Unifi UDM Gateway Network Tagging With pFsense
-
I have spent several days trying to figure this out and need some expert direction. My current setup is an SG-1100 that is LAN port connected upstream to LAN port 4 of a Unifi UDM (original model). I have a VLAN network configured on pfsense: VLAN10 for primary devices. This is configured with static IP address of 192.168.10.1/24 and has DHCP server configured in the .100 - .200 range. In the Interfaces -> VLAN's tab of pfSense, I have the VLAN 10 tagged to Port 2 (LAN) and Port 0 (LAN Uplink, internal port for VLANs). I then have in the Ports tab the LAN Port #2 Port VID set at 10. This then feeds into the UDM on LAN port 4, which is natively set for VLAN10. I have a VLAN only network configured set at VLAN 10 on the machine and a respective SSID tied to the VLAN 10 network.
This works great, the UDM is getting internet from pfsense and pfsense is handling all the routing and firewalls, I can connect my devices to it via WiFi. My issue is that on the UDM, there is a Default network set with a concrete VLAN 1 which I am trying to have pfSense interact with upstream (this is the management network hardwired into the UDM, and is the only way of accessing the UDM GUI). I have the current gateway set at 192.168.1.2, DHCP server turned off, and the network is tagged to Port 4 (natively set for VLAN10) as well as natively set to LAN Port 1. Currently I have my computer ethernet static address set to 192.162.1.150 just so that I can plug into Port 1 for UDM management access. I would like to be able to access the UDM gateway via the VLAN10 Wifi for remote management instead of always having to plug into the device itself. But I cannot for the life of me figure out how to do this. I've tried all sorts of ways to tag the LAN network on my pfSense (192.168.1.1/24 - same IP as UDM Default), but this has a VLAN of 4091 and the internal VLAN of pfsense is concrete set to VLAN1, can't be changed.
Sorry for the long post but hopefully the information given is helpful to figuring this out. I can provide more as needed for troubleshooting. Thanks
TL;DR - How can I get my VLAN only configured router's Default management gateway IP to be read and accessible from pfSense?