have I configured the VLAN correctly?

swemattias

This is how I have set VLAN 10 in Interfaces -> Switch -> VLANs
I think I have done as it should be... thing is devices connected to this vlan doesn't get any DHCP.

johnpoz

@swemattias what does port 1 connect to? 5 would be the internal uplink I believe so 1 should connect to something that understand the tag 10..

swemattias

@johnpoz Port 1 is connected to a Unifi US-8 switch, the port that 1 is connected to accepts "All" VLANs. Yes 5 it the internal uplink.
I am sorry I didn't tell anyone much in my first post. But you did answer to my obfuscated question.

johnpoz

@swemattias well then what is connected to what port on your unifi switch, and is port 10 untagged on that port to some device?

swemattias

@johnpoz Hmmm port 1 on the switch is set to all, I am not sure but I think that profile all doesn't do anything to the packages that is passing.
This is a quote from the Unifi forums about All: "The "ALL" profile is simply a trunk port...a purely layer 2 construct."

On port 4 and 5 I have Proxmox connected and on port 5 I have setup a bridge and on that bridge I have a VLAN 10 connected. I know all the numbers are the same...

johnpoz

@swemattias again what device is suppose to be in vlan 10 and get dhcp from pfsense.. Sure all is a trunk - but what device on that switch is suppose to be in vlan 10?

I don't currently have it on my network but I do have a flex mini I could hook up..

You would connect say a laptop to port X on that switch that you put in vlan 10..

swemattias

@johnpoz The mini is kind of a special case... it only has All or specified networks.

johnpoz

@swemattias while I would agree with you on the mini its a bit off.

Switches are switches are switch, vlans are vlans are vlans.

The vlan is either tagged or it isn't.. When you connect a end user device to a port on a switch is is almost always untagged.. Unless you have gone into the OS of that device and specifically set it to understand a tag..

Almost always a end user device will be untagged on a switch port, with the port in that vlan, and the pvid set on the port that you want the traffic to be in.