SG1100 having LAN and OPT on same Untagged Network

[stephenw10]

Hmm, they are configured identically. Anything that works on LAN should also work in OPT.

I would be running a pcap on mvneta0.4091 to look for dhcp requests coming in from a device on OPT.
If there's nothing then run a pcap on mvneta0 dircerty and look for incorrectly tagged traffic.

Steve

[ahking19]

@stephenw10 Do you still want VLAN group #3?

I removed it in my setup.

[ahking19]

@ahking19 I also disabled the OPT (mvneta0.4092) interface.

[stephenw10]

You don't need it, I removed it from my test too, but it doesn't hurt having it there. Only the internal port is a member.

I also disabled and removed the OPT interface in my test but again that shouldn't make any difference. With that switch config the OPT port is connected to the LAN interface.

Steve

[pmarq2008]

I will run some captures tomorrow afternoon or over the weekend and let you know.

[langrock]

Has there been any resolution to this topic? I recently got an SG-1100 and now would like to make use of the OPT port. I followed the same steps as outlined above and cannot get the box to hand out an IP address to the attached computer. The LAN port works just fine. I deleted the in OPT interface, and the Interfaces / Switch / Ports and Interfaces / Switch / VLANs look exactly s shown above (and described in https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/switch-overview.html). I am at a loss. I'd greatly appreciate if someone could suggest what else to try. Thanks.

[stephenw10]

It works fine as outlined above. If you are not pulling a DHCP lease on LAN then the OPT port isn't configured correctly in the switch. How have you set it?

Steve

[pmarq2008]

Hi @stephenw10 and @langrock ,
I never did get this to work. I know I said previously that I would get some captures however I just ran out of time on it. I got around by just purchasing a managed switch to plug into the LAN port. As stated previously I followed the Documentation 3 times with a factory default on each and no luck.

Thanks
Phil

[stephenw10]

If you have the switch setup as I showed here it should work.

[langrock]

@stephenw10 Thanks for the response. That's exactly how it looks like for me as well, but it clearly doesn't work. Maybe the hardware itself isn't working. I suppose @pmarq2008 got the OPT port to work using a different configuration. Is there a test I could perform to distinguish between a configuration and hardware problem?

[langrock]

@pmarq2008 I suppose that's a solution, albeit a somewhat dissatisfying one. In the end, all I want it have a single computer directly hooked up to LAN and a wireless AP to OPT. According to the documentation, that should be doable, but I haven't been able to get the configuration correct. I almost don't care anymore if the AP and the LAN port would be on the same subnet, but it'd be nicer if those two would be.

[stephenw10]

Hmm, that works fine for me when I test it. Can you PM me a status_file to review? Or open a ticket and attach it? (make it for my attention if so).

Steve

[langrock]

@stephenw10 Thanks! Since I don't have a support plan, I am assuming that I cannot open a ticket. How do I get to the file you think might help with the trouble shooting? Is this something under Status / System Logs? I browsed around a bit but couldn't find any downloadable files. Once I have that file, should I upload the file in this thread? You mentioned tp PM you, not sure how to do that either :(

[stephenw10]

You can open a ticket you just can't get support.

But as long as you mark it for my attention or link to this thread someone will ping me so I can check it.

Steve

[langrock]

@stephenw10 Ok. I can try that. Still not sure what file you would need and where to find it. Thanks

[stephenw10]

The status output file is not linked anywhere in the gui, you need to go dircetly to the URL:
<your firewall IP>/status.php

There is a link to download it on that page.

Steve

[langrock]

@stephenw10 Got it, thanks. I opened a ticket and attached the file as suggested.

[NOCling]

I works for me with a UniFi AP.


After this, you have to setup the VLAN Interface with static IPv4 and i use Track Int WAN for IPv6 to.
Setup DHCP Server for this Network, RA for IPv6.
Define a Rulset to allow Dataflow from the Clients of the Gast Netzwork, Done.

I use VLAN 167, you have to setup the same, only with your wish VLAN ID.

So it work nice and stable.

[stephenw10]

@langrock
OK I checked your config there and it looks OK. I just tested again here though and it works fine, something odd is happening there.
A pcap on the LAN whilst tying to pull a lease via the OPT port should show it though.

Steve