DHCP on VLAN not working
-
Good Morning together!
We are new into pfSense and set up our companies new Firewall with pfSense in a Test Lab.
Now I was able to create several VLANs on the pfsense and configure them as an Interface.
I assigned them all to ix0 (which is one of our two 10GB Ethernet jacks on our SUPERMICRO Server), configured an DHCP-Server and DNS-Forwarding for every VLAN.
(192.168.[1 … 100].[10 … 250] DHCP Ranges, Interface IP is allways 192.168.xxx.1 )Now the Problem:
When I put this "trunk" on ix0 (as Cisco world would call it) into a switch, I won't get any DHCP Lease on non of the assigned ports.We tested arround with an TP-LINK tl-sg108pe and one DLINK DXS3350SR. Our Trunk-Ports where in "TAGGED" Mode and the VLAN-attending Ports where configured to be untagged.
Can you imagine what we are doing wrong?
Do we have to turn of the physical interface ("LAN") and only use the VLANsSide-Not: When I configure DHCP Server on an physical interface of the Supermicro, I get an DHCP Lease immediatly, so the service itself does fine.
Thanks for your help, as our IT staff starte getting despaired :P
-
If you have an interface on ix0_vlan10, you need to make sure VLAN 10 is tagged to pfsense on the switch port ix0 is connected to. Any host on the switch on an untagged (access) port on VLAN 10 will get DHCP from that DHCP server. You can also statically assign a workstation to say, 192.168.XXX.100/24. See if it can ping 192.168.XXX.1. If not see if it has ARP for 192.168.XX.1 after trying to ping it. If not, your Layer 2 is not right.
No, the parent interface ix0 does not need to be assigned for the VLAN interfaces to work. If it is assigned, it might have to be enabled for the VLANs on it to function. I would have to test that.
Look in the switch to see if you can see all the MAC addresses associated with VLAN XXX. I used to do things like that all the time to quickly determine if a VLAN was properly tagged through the infrastructure.
On a Brocade it would look something like this:
telnet@6450#show mac-address vlan 999 Total active entries from VLAN 999 = 12 MAC-Address Port Type Index VLAN d468.4d1f.5a00 1/2/2*1/2/4 Dynamic 51600 999 3c07.540c.2316 1/2/2*1/2/4 Dynamic 27692 999 0060.2e02.45bd 1/1/24 Dynamic 8132 999 d468.4d1f.7140 1/1/43 Dynamic 52932 999 6c19.8f93.953b 1/1/43 Dynamic 49840 999 0008.a20a.5942 1/1/44 Dynamic 1500 999 1c5f.2bb5.ee37 1/2/2*1/2/4 Dynamic 39464 999 6805.ca0a.3b21 1/1/26 Dynamic 992 999 0026.bb5a.7f32 1/1/3 Dynamic 14620 999 d050.99e1.5612 1/1/25 Dynamic 39044 999 001e.8cf1.e910 1/1/42 Dynamic 21712 999 66b5.a87f.db78 1/1/41 Dynamic 64596 999I know that 1/2/2*1/2/4 is a lagg to another switch. Since I am getting MAC addresses there I know VLAN 999 is tagged properly between them.
