Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Completely puzzled

    Scheduled Pinned Locked Moved Routing and Multi WAN
    6 Posts 5 Posters 896 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jamet
      last edited by

      I am not sure what I am messing up.  I have my configuration pretty basic at the moment and yet I can not get my vlans to talk to the outside world

      |–------> Cisco SF300-48P
                                                            |
      PFSENSE -------->  Cisco SG300-20 --|
                                                            |
                                                            |--------> Cisco SG300-10MPP---------> UniFi AP-AC-Pro

      PFSENSE CONFIGS:

      | | |
      | | |
      | | |

      • DHCP on all internal networks

      • All VLANS currently have the same firewall rules

      • All switches in layer2 config

      All Switches:

      • All switches are able to grab a management IP address from VLAN99 DHCP Reserved IPs

      • All switches are able to ping gateways of all VLANS

      • All switches are able to ping LAN gateway

      • All switches are able to ping 8.8.8.8 (Google DNS)

      • All switches FAIL to ping hostname google.com

      Switch1 CONFIGS:

      • GE17  PFSENSE - TRUNK

      • GE19  SWITCH 2 - TRUNK

      • GE20  SWITCH 3 - TRUNK

      | | |
      | |

      Switch2 CONFIGS:

      • GE1  AP1 - TRUNK

      • GE10  SWITCH 1 - TRUNK

      | | |
      | |

      Switch3 CONFIGS:

      • GE4  SWITCH 1 - TRUNK

      | | |
      | |

      1 Reply Last reply Reply Quote 0
      • GentleJoeG
        GentleJoe
        last edited by

        Did you configure, Firewall-NAT-Outbound ?

        Did you enable a DHCP server to exist/allow access on each vlan?

        1 Reply Last reply Reply Quote 0
        • J
          jamet
          last edited by

          Yes there is a DHCP on each VLAN.  I did not configure any thing in the NAT rules.  Only the automatic rules have been created

          If I am on the default vlan/LAN then I have internet access.

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            All switches are able to grab a management IP address from VLAN99 DHCP Reserved IPs
                All switches are able to ping gateways of all VLANS
                All switches are able to ping LAN gateway
                All switches are able to ping 8.8.8.8 (Google DNS)
                All switches FAIL to ping hostname google.com

            That is the only actual trouble description you gave so…

            Your switches cannot resolve DNS. Fix that.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              If you want your switches to resolve dns, that has to be set

              https://sbkb.cisco.com/CiscoSB/GetArticle.aspx?docid=5fa907c56103465e86b7f56ca946efe7_Configuration_of_a_DNS_Server_on_a_SF200_Series_Device.xml&pid=2&converted=0
              Add a DNS Server on the 200/300 Series Managed Switches

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • G
                georgeman
                last edited by

                I'm not sure I understand your problem. Your switches can ping 8.8.8.8 so indeed they can talk to the outside world. What is what does not work? Regular hosts plugged onto those switches are the ones that can't?

                Also, why all ports on all switches are set up as trunks? Shouldn't you have at least some access ports where you plug in your hosts?

                If it ain't broke, you haven't tampered enough with it

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.