Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Configuration of VLANS

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    2 Posts 1 Posters 494 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      codemonkey76
      last edited by

      I am having trouble setting up VLAN's on pfsense.

      I have created a 4-Port LAGG, which all my VM network traffic from Proxmox will travel over.

      I have created VLAN15, and added the VLAN15 on LAGG0 interface. I am using a HA setup, so my interface IP for the 2 firewalls is 10.15.0.2/24 and 10.15.0.3/24 with 10.15.0.1/24 as the CARP Virtual IP.

      From the proxmox host I have a 2-port bond, with the VLAN setup and I can successfully ping both firewalls on that interface. however, i can't get to external, if i try ping the DNS on 8.8.8.8 it fails (I am using 10.15.0.1 as the gateway address).

      Also I get the same issue when attempting to ping an external address from the switch.

      e.g.

      switch#ping 10.15.0.2 source vlan 15

      Type escape sequence to abort.
      Sending 5, 100-byte ICMP Echos to 10.15.0.2, timeout is 2 seconds:
      Packet sent with a source address of 10.15.0.220
      !!!!!
      Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/8 ms
      switch#ping 10.15.0.3 source vlan 15

      Type escape sequence to abort.
      Sending 5, 100-byte ICMP Echos to 10.15.0.3, timeout is 2 seconds:
      Packet sent with a source address of 10.15.0.220
      !!!!!
      Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms
      switch#ping 8.8.8.8 source vlan 15

      Type escape sequence to abort.
      Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
      Packet sent with a source address of 10.15.0.220
      …..
      Success rate is 0 percent (0/5)

      1 Reply Last reply Reply Quote 0
      • C
        codemonkey76
        last edited by

        YAY!!!!!!

        I solved my own problem, posting for anyone else who's interested.

        I have outbound NAT set to manual, and I had not created any rules for this range.

        Once i created the rule to NAT traffic from that network, it worked.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.