New build - WAN blocking DHCP address request

[AndyRH]

I am building a new firewall (21.05-RELEASE (amd64)) and I am stuck. When I put the WAN on a VLAN it does not get a DHCP address. The logs indicate the request was blocked.

Jun 24 20:49:37 ix1 Default deny rule IPv4 (1000000103) 192.168.1.254:67 255.255.255.255:68 UDP
Jun 24 20:49:37 ix1 Default deny rule IPv4 (1000000103) 0.0.0.0:68 255.255.255.255:67 UDP
Jun 24 20:49:36 ix1 Default deny rule IPv4 (1000000103) 0.0.0.0:68 255.255.255.255:67 UDP
Jun 24 20:48:05 ix1 Default deny rule IPv4 (1000000103) 192.168.1.254 224.0.0.1 IGMP

Using the very same interface without VLAN tagging it works. Have I missed something?

[JKnott]

@andyrh

First off, why are you using a VLAN on the WAN side? Does your ISP require it?

[AndyRH]

Less important, but I am reducing cable usage on my switch by using 1 10GbE link instead of four 1 Gb links.