COMMUNICATE VLANS ON OPT1 TO LAN



  • I am a fan of the pfsense application. I created three vlans (vlan10, vlan20, vlan30) on the OPT1 interface with each of the subnets addresses respectively 10.17.10.0/ 24,10.17.12.0 / 24 and 10.17.13.0/24, the network address of the LAN is 10.17.0.192/26, now I would like to communicate the vlans on the interface OPT1 with the network address of the LAN. Someone Can he help me?


  • LAYER 8 Global Moderator

    And what firewall rules did you create on the vlan interfaces to allow this traffic?  This would work out of the box once you put in the appropriate rules on the vlan interfaces to all traffic from those vlans to go where you want it to be able to go too.



  • The rule create to permit this traffic :
    Rule on LAN interface
    Rule :Pass
    Protocols :TCP/UDP
    Source :LAN NETWORK
    DESTINATION :VLAN10 ADDRESS
    The same rule for all vlans(10,20 and 30)

    Rule on VLANS(10,20 and 30)
    Rule :Pass
    Protocols :TCP/UDP
    Source :VLAN10 NETWORK
    Destination :LAN ADDRESS
    The same rule for all vlans(10,20 and 30)



  • You want the destinations to be VANnn NETWORK and LAN NETWORK

    At the moment you are just allowing, for example, from any LAN client (LAN NETWORK) to the pfSense interface address that "faces" VLAN10. You actually want to allow to any client in VLAN10.


  • LAYER 8 Global Moderator

    phil beat me too it ;)



  • Yes I would like all the clients of the VLAN10 to have access to the network of the LAN. I note that in the LAN I have placed servers and I want all the clients to access the data common to all the VLANS.



  • Then make the pass rule on VLAN10 to be source VLANnet and destination LANnet.


Log in to reply