VLAN Tag not being passed

[randy9000]

@marvosa

I have the netgate configured as a firewall and router that is connected to a netgear switch on port 1. Netgate LAN1 is connected to port 1 on the switch.

The VLAN is created on the LAN1 port of the Netgate. The firewall rules have been created to pass anything. Allow all. The parent interface is connected to the "trunk" port on the netgear switch and tagged with the "T"

The access ports (23,24) on the switch are "U" untagged.

The DHCP server is enabled and configured on the appropriate the interface. I can ping the gateway (192.168.40.1) from 192.168.1.216 (laptop) but I can not add PC's or devices to the 192.168.40.1 network.

I also ran the Packet Capture on the interface and and tried to ping a PC plugged in the port with an ip address of 192.168.40.50 and got this:

01:22:47.697263 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
01:22:48.702622 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
01:22:49.708371 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
01:22:50.709008 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
01:22:51.707711 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
01:22:52.709573 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
01:22:53.715154 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28

Thanks for you help!

[Derelict]

@randy9000 Again, screenshots.

[randy9000]

@derelict

Re: VLAN Tag not being passed

Update: I was attempting to troubleshoot and had to reset the Netgate appliance. Therefore I am starting from a fresh start.

Does anyone have any tutorials or step by step job aids that walks you through how to configure a Netgate appliance (router and firewall) VLANS that's connected to a Netgear Switch model GS324TP?

You all have been great!!
Thanks for all the responses and assistance.

[randy9000]

@marvosa

Re: VLAN Tag not being passed

Update: I was attempting to troubleshoot and had to reset the Netgate appliance. Therefore I am starting from a fresh start.

Does anyone have any tutorials or step by step job aids that walks you through how to configure a Netgate appliance (router and firewall) VLANS that's connected to a Netgear Switch model GS324TP?

You all have been great!!
Thanks for all the responses and assistance.

[Derelict]

@randy9000 You are not going to find anything specific to the Netgear switch I don't think. But it really comes down to whether the VLAN traffic hits the pfSense port tagged or untagged. All 802.1q switches are pretty much the same in that regard.

SG-3100 Switch

SG-1100 Switch

SG-7100 Switch

They all have different examples for various switching configurations.

[randy9000]

@jknott

Re: VLAN Tag not being passed

Update: I was attempting to troubleshoot and had to reset the Netgate appliance. Therefore I am starting from a fresh start.

Does anyone have any tutorials or step by step job aids that walks you through how to configure a Netgate appliance (router and firewall) VLANS that's connected to a Netgear Switch model GS324TP?

You all have been great!!
Thanks for all the responses and assistance.

[randy9000]

@derelict

That makes sense. I'll try to follow what's in the guide and report back.

Thanks

[randy9000]

@derelict

I followed those instructions and still nothing. See attached screen shots..

I configured firewall rules to pass all traffic.

Please help!

[Derelict]

@randy9000 Don't set a Port VID for a tagged VLAN. The Port VID is for the untagged VLAN on that port. Just leave the Port VID at 1 on port 2.

And whatever you are connecting to port 2 has to be configured tagged VLAN 30, too.

You also need a DHCP server and firewall rules to pass traffic on the VLAN30_Port2 interface.

[randy9000]

@derelict

That didn't work either.

[NOCling]

It works with the SG-3100, i use 10 VLANs with it over Lan1.

You have to tag it right:

And the same on the Switch Uplinkt to the SG-3100 LAN Port.

Thats all.

[randy9000]

@nocling

What configuration changes do I need to make in the example you provided to use Port #2 - LAN 2?

Thanks

[NOCling]

Pic 2 -> Member 1t replace by 2t

[randy9000]

@nocling

That’s how it’s currently configured and it’s not working. See images previously posted.

[Derelict]

@randy9000 Again, the switch port has to be expecting tagged traffic on that port.

This stuff works 100%.

[randy9000]

@derelict

Okay. Retrying again.

[randy9000]

@nocling & @Derelict

On the Netgear switch, am I to only tag "T" the port that the cable is in and untag "U" the others with on the VLAN? Or, Tag "T" all of the ports that will be used on the VLAN?

[Derelict]

@randy9000 Everything tagged on the pfsense switch side needs to be tagged on the switch port you are connecting to it.

[randy9000]

@derelict

It seems as though the issue is with me netgear smart switch. If I plug a pc directly into port 2 of the Netgate 3100 I can get and ip address and internet. However, when I connect it to the netgear switch I get nothing.

I also noticed that in order for my laptop to get and ip address the port 2 tagged check box but be unchecked and the port 5 box must be checked.

[Derelict]

@randy9000 That is how it works. Client devices like laptops almost exclusively get connected to single-VLAN, untagged ports.

Tagged ports are for connections to other VLAN-aware devices like switches and access points and router ports with VLAN tags configured.