Not pinging Netgate Vlan's
-
Ok that should work as long as the Cisco switch is connected to port 2 (LAN). Is it not?
How exactly are you testing?
-
@stephenw10 It's connected to Netgate port 2
I can't access Negate from the switch...
That's the problem.
A
-
Which IP?
How exactly are you testing that?
-
@stephenw10 192.168.104.2 - Cisco Switch IP
192.168.104.1 Netgate -
Netgate port 2 Cable to GI1/0/1 in Cisco Switch configured as trunk
PC connected to gi1/0/11 in Cisco Switch configured as Vlan 30A
-
@afcarvalho said in Not pinging Netgate Vlan's:
I can't access Negate from the switch...
So you are trying to ping 192.168.104.1 from the switch CLI?
What error is shown?
-
-
One other strange thing:
NTP isformation is wrong!
-
It has no WAN connection and the 1100 has no battery backed RTC so it uses the most recent file timestamp.
What are you pinging from there? Clearly not the switch.
What IP address is that? Is that a static IP? How is it connected?
How are you connecting the the pfSense GUI? From a different workstation?
-
@afcarvalho Are you sure you have the WAN and LAN connected correctly? Almost seems like they may be reversed.
As Stephen said, no internet connection there. See where it says Can't check for updates, dead give away.
Also, post the G1/0/1 config. -
@jarhead I have no Wan connected.
I have one PC that I connect via one usb c adapter.
And I have a Wifi connection on that the PC that connects to the net.
That's what I am using to answer in this communication.
When I connect the PC directly to the Negate, it works fine.
The Netgate has the Lan port 192.168.104.1
The Netgate has one Vlan (30) with 172.168.108.1 as static IP and a DHCP service serving 172.168.108.100 to 172.168.100.200.A
-
@afcarvalho
You're getting very confusing now.
If you don't have a WAN connected, why would you think the NTP would be correct??What does "When I connect the PC directly to the Negate, it works fine." mean?
Do you mean you can ping all vlan interfaces?Post the G1/0/1 config.
-
@afcarvalho said in Not pinging Netgate Vlan's:
172.168.108.100 to 172.168.100.200
So when you connect the client does it get an IP in that range?
Can you ping 172.168.108.1?
If you try to ping the LAN IP, outside that subnet the client might be trying to use the wifi if you didn't disable it.
You said the firewall rules are open but are they really open?
-
@stephenw10 Connecting directly the PC to the Netgate, I can't ping 172.168.108.1 (Vlan 30)
-
Ok those rules look good.
When you connect the client directly to the LAN does it get a DHCP lease in the LAN subnet? (192.168.104.0/24)
When you connect it via the switch does it get a lease in the VLAN subnet?
Are you disabling the wifi when you test to be sure the 1100 is the default route?
-
@stephenw10 1st question - yes
2nd question no
3rd question yesA
-
@afcarvalho
3rd time.
Post G1/0/1 config. -
Sorry.
A -
@afcarvalho You have to add the vlans to it
Switchport mode trunk allowed vlan 10,20,30 -
this is the port configuration on the cisco switch that I use to connect to the Netgate when the Netgate Lan port is connected to the GI1/0/1 trunk port
