Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No Internet on Pfsense Vlan

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    17 Posts 5 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      n_oandasan
      last edited by

      I'm new to vlan please help or assist how can arrive a solution to my problem because on the picture shown the PC2 having internet. PC1 i want to put internet to it using those details.1_1540795336186_2.jpg 0_1540795336186_1.jpg

      1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan
        last edited by

        Hi,

        VLAN settings should be set up on two devices :
        pfSense
        and
        Your switch, which should be administrable for this.
        A dumb switch won't do here.

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 0
        • N
          n_oandasan
          last edited by

          you mean sir the manage switch?

          1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan
            last edited by

            Exact.

            You should be able to manage it, and it should have VLAN capabilities.
            And if the case, set up correctly.
            Devices should be connected to the right ports, etc.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 0
            • N
              n_oandasan
              last edited by

              sir, so i have change the TP-link to manageable switch with vlan capabilities with the correct vlan tag with the correct port. Nothing to change it on the Pfsense?

              JKnottJ 1 Reply Last reply Reply Quote 0
              • GertjanG
                Gertjan
                last edited by

                I never used VLAN's or VLAN capable switches.

                I advise you to read https://www.netgate.com/docs/pfsense/book/vlan/switch-vlan-configuration.html

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                1 Reply Last reply Reply Quote 0
                • N
                  n_oandasan
                  last edited by

                  thank you so much

                  1 Reply Last reply Reply Quote 0
                  • JKnottJ
                    JKnott @n_oandasan
                    last edited by

                    @n_oandasan said in No Internet on Pfsense Vlan:

                    sir, so i have change the TP-link to manageable switch with vlan capabilities with the correct vlan tag with the correct port. Nothing to change it on the Pfsense?

                    Avoid TP-Link managed switches. They don't handle VLANs properly.

                    Nothing to change it on the Pfsense?

                    You'll need to configure the VLAN on pfSense. You'll then have both native LAN and VLAN on the same cable and the managed switch will sort it out.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Yeah stay away from the low end tp-link for vlan capable switches.. They seem to have released a fix for v3 of them, but looks like v2 and v1 got no love. They would not allow you to remove vlan 1 from the ports.. There are multiple posts here about it, and on their own forums.

                      I even got one to do my own testing with because of the threads here - and yeah... They don't do it correctly.. I believe same goes for one of their AP as well. Got with with a different company for your budget smart switch would be good idea.. dlink and netgear both work and same price point.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • N
                        n_oandasan
                        last edited by

                        thank you guys

                        1 Reply Last reply Reply Quote 0
                        • N
                          n_oandasan
                          last edited by

                          Sirs, Can the LAN work like this diagram,

                          0_1540817957054_3.jpg

                          thanks in advance

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by Derelict

                            Why would you do that?

                            While it is not a true "core" switch, it would be playing that role.

                            If that "unmanaged hub" goes down or gets unplugged or kicked or whatever your whole network is down.

                            Most people would want a piece of quality kit there.

                            But if that "hub" passes VLAN tags properly it should work. Not recommended but it should work.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @Derelict
                              last edited by

                              Use the managed switch upstream of your dumb switch(es).. You can put a dumb switch on any 1 vlan.. If the clients of switch are all going to be on 1 vlan, then you don't need vlan capable switch there. You list vlan 1 and vlan 2 on their own switches. In that case they can be dumb..

                              You only need vlan capable switch as you move upstream.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • N
                                n_oandasan
                                last edited by

                                thank you guys for your advice...thanks alot

                                1 Reply Last reply Reply Quote 0
                                • N
                                  n_oandasan
                                  last edited by

                                  0_1540882567509_1.jpg how about this diagram... thanks

                                  1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by

                                    yup that works - as long as that dumb switch is only going to be in vlan 1 or 2..

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • N
                                      n_oandasan
                                      last edited by

                                      thank you for your inputs....

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.