xg-7100 routing vlan46 not working and cannot even ping the interface IP from the Webgui

frog

Good morning, I have a problem with vlan46 192.168.46.x .1 being the pfsense. it has stopped working and cannot even ping it from the webgui ping screen.

Setup is
created vlan46 on lagg0
added interface and gave it a 192.168.46.1/24 address.
added the 46vlan - 3 46 2t,3t,4t,5t,6t,7t,8t,9t,10t PBXVLAN46 on the vlans under switchports
there is the allow rule in rules from PBSVLAN46 to any for any protocol.

How can I diagnose please?

I'm fairly ofay with the general setup of PFsense.

TIA Chris

johnpoz

@frog

You would add vlan 46 untagged on the switch port you want to use, and then 46 would be tagged on the port 9 and 10

Can you post a picture of your switch config

frog

@johnpoz ![alt text]( switch config.jpg image url)

johnpoz

@frog that setup is not right - you have your vlans 46,47 and 48 all tagged on ports 2 thru 8..

If you want to plug something into port X and have it be on vlan 46 it should be untagged on that port. And you should remove vlan 4091 (lan) from that port X..

In that setup you have ports 2 - 8 as trunk ports (cisco term) and it has all the vlans 46-48 on them tagged.. So if you want something on port X to be on 46 it would have to be doing tagging as well for vlan 46

In that setup anything you plug into ports 2-8 that is not doing tagging would end up on your lan

frog

@johnpoz hi thx. Yes I understand that and yes I have a usw-pro with the bland added. I also have a VM that is tagged.
I don’t think the issue is away from the netgate.
If I go to diagnostics and ping I cannot ping 192.168.46.1 which is the interface ip I can ping 192.168.47.1 .48.1. 45.1

Just not the vlan46 interface ip. Something inside the pfsense is wrong.

johnpoz

@frog yeah that config ;) What do you have connected to all your ports? I can not think of a sane reason to have a setup like that..

pfsense can not even ping its own interface, on pfsense? Do you have it enabled?

So you have ports 2-8 all connected to the same usw-pro? Sounds like a loop to me..

You have 2-8 all in a lagg/port channel/etherchannel/lacp - whatever unifi calls it on their end.. Did you set that up on pfsense? Why would you have all 3 of your vlans tagged on every port unless they were connected to different switches or APs, or different vm hosts?

With the info provided that setup looks wrong to me.