• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Want to Access Switch from a Different Subnet.

Scheduled Pinned Locked Moved General pfSense Questions
subnetrouting
23 Posts 8 Posters 5.3k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    johnpoz LAYER 8 Global Moderator
    last edited by Sep 17, 2019, 10:38 PM

    Hehehe - dude really? There is layer 2, and then there is layer 3 ;) There is no layer 2+ heheheh

    These stupid marketing nonsense terms.. If you want to call it layer 3 lite would be better than layer 2+

    Where is this drawing of your network? Do you need some color+ crayons to use? ;)

    While it is technically feasible to route multiple layer 3 on the same layer 2 - it would be the technical term BORKED if you actually do something like that ;)

    An intelligent man is sometimes forced to be drunk to spend time with his fools
    If you get confused: Listen to the Music Play
    Please don't Chat/PM me for help, unless mod related
    SG-4860 24.11 | Lab VMs 2.8, 24.11

    1 Reply Last reply Reply Quote 0
    • D
      Derelict LAYER 8 Netgate
      last edited by Sep 17, 2019, 11:56 PM

      A Layer 2+ switch generally has things like DHCP snooping but can't actually be configured as a router like a Layer 3 switch.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • J
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz Sep 18, 2019, 1:08 AM Sep 18, 2019, 12:33 AM

        So a smart/managed layer 2 then ;)

        BTW, if your going to route and your wanting to access something on your downstream from a IP that is on your transit network you are always going to run into asymmetrical problems..

        asymmetrical.png

        If you want to route to other networks on your downstream, then that needs to be connected to your upstream router via a transit network.. If you going to want to get to it from devices on your transit network.. Then you need to host route on them, or you run into the above asymmetrical problem.

        Connect your upstream to your downstream via transit network (no hosts on it) and your asymmetrical issues are gone
        17216.png

        Also if you created your SVI on the L2 that your 10 network is on, then its IP would be in the 10 nework.. If you created put the svi on a different L2, then you need to route it via a transit or host routes or your going to have the asymmetrical problems.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        21 out of 23
        • First post
          21/23
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received