New VLAN won't route to other VLANs



  • I an working on adding a VLAN to our network for some new wireless devices. I've setup the VLAN on our Netgear switches and also in pfSense. I've added a firewall rule of any>any to test connectivity but when I ping between them, I'm not getting a reply. The devices are routing to the internet properly. I feel like i'm missing something easy somewhere but it's driving me crazy! I've searched the forums and haven't found the smoking gun yet.

    Config is as follows:

    VLAN 4: Internal (192.168.53.0/24)
    VLAN 5: Tablets (192.168.5.0/24)

    I've checked the logs and it says the packets are routing, but I'm not seeing them on wireshark on the target PC.

    Any help or pointers would be much appreciated!

    Thank you all in advance for your help!



  • Maybe the switches are not set up for the VLans correctly? I know I had issues with my DLink switch until I got it right. Same symptoms.



  • @veldthui THANKS for the quick reply!

    From any computer on the .53.0 subnet, I can ping 192.168.5.1, but the devices on the 5.0 subnet can't ping 192.168.53.1.

    I was heavily leaning down the VLAN setup on the switches, but I was assuming that since the packets can reach the pfSense router, the VLAN would be correct and it's a routing issue. I can dig deeper into the switches if that would help.

    Thanks again!


  • LAYER 8 Netgate

    Sounds like firewall rules on the 192.168.5.0 interface.



  • Hi! Mr. fescorick
    Could be the common problem on NIC installed
    https://www.netgate.com/docs/pfsense/book/hardware/index.html

    Test changing the NIC to a Intel PRO

    :)


  • LAYER 8 Global Moderator

    Did you put a gateway on your vlan 5 rules? This is common mistake where users set a gateway on the rule, this forces traffic out that gateway vs allowing pfsense to use it routing table.

    Post up your rule(s) you put on vlan 5 interface

    Blocking rfc1918 on the interface have seen as well.