Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [Solved] DHCP Denied

    General pfSense Questions
    dhcp
    4
    10
    1.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • AndyRHA
      AndyRH
      last edited by AndyRH

      I am not sure what would cause 1 system to have this error and another one on the same port to work. I cannot find any differences between the DHCP settings on the other VLAN that it works on. It does link and the client is an Intel 2.5Gb NIC, but it is successfully linking at 1 Gb.
      The FW is an XG-7100 running 21.05.1-RELEASE (amd64)

      Any ideas where to look?

      Backstory, this NIC does not like my switch and frequently will not link so I moved it to an unused port on the FW to see if it would work better there. I may have been wrong...

      dhcp Denied.JPG

      o||||o
      7100-1u

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @AndyRH
        last edited by

        @andyrh if you have dhcp enable - there is hidden rule to allow dhcp.. Such a block by default deny should not be possible. Unless dhcp is not enabled on that interface.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        1 Reply Last reply Reply Quote 0
        • AndyRHA
          AndyRH
          last edited by

          DHCP is enabled and does work for another system. There is not a switch connected to that FW port, but I do not see that causing the problem.
          Normally there are no clients using the port.

          There are few rules on the port.
          Kind of a head scratcher.

          LANDHCP.JPG

          lanrules.JPG

          o||||o
          7100-1u

          S 1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @AndyRH
            last edited by

            @andyrh Your post shows DHCP on LAN but your OP shows lagg0.4091?

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote ๐Ÿ‘ helpful posts!

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @SteveITS
              last edited by

              @steveits yup good catch - prob has vlan setup with tags, and non tagged traffic hitting the bare interface.. Which yeah would be blocked by default rule because the dhcp rules would be added to the lan, with tag? etc..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              1 Reply Last reply Reply Quote 0
              • AndyRHA
                AndyRH
                last edited by

                I am not understanding what you are telling me.
                The client is untagged. The interface is the default LAN interface.
                Where am I missing what you have found?

                o||||o
                7100-1u

                S 1 Reply Last reply Reply Quote 0
                • S
                  SteveITS Galactic Empire @AndyRH
                  last edited by

                  @andyrh This is not the LAN interface:
                  3975812b-bd41-48ac-af82-bef35b586745-image.png

                  Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                  When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                  Upvote ๐Ÿ‘ helpful posts!

                  1 Reply Last reply Reply Quote 0
                  • AndyRHA
                    AndyRH
                    last edited by

                    Ok, I think I fixed it. I cannot test right now. Does this look right?

                    Switch vlans.JPG

                    o||||o
                    7100-1u

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Yes, if the LAN is assigned as lagg0.129.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • AndyRHA
                        AndyRH
                        last edited by

                        That was most of the problem. I also had to change the VID of each port on the switch and it worked after that.

                        Thank you for the help.

                        o||||o
                        7100-1u

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.