VLAN routing
-
I have VLANs setup on two separate interfaces -- one for VLAN 10 on the LAN and VLAN 20 on the opt1 interface. If I ping from VLAN 10, I can see the traffic logging out the rule that is setup to allow VLAN 10 to VLAN 20, but PFSense seems to want to sent it out the WAN interface. It's almost like it's missing a route somewhere but the routing tables look right. Is there something that I'm missing other than create the interfaces, assign them the proper VLANs, create the rules to allow the traffic between them?
-
@briancounsel-tech-com is the interface subnet mask correct?
Can pfSense ping the target
-
The two subnets are 10.0.0.0/24 (VLAN10) and 10.200.0.0/29 (VLAN20). The VLAN 20 can get to the internet and gets DHCP from PFSense.
-
@briancounsel-tech-com Have you verified the packets are going out the WAN via traceroute?
The other device has to allow ICMP from the VLAN10 subnet of course.
Otherwise pfSense "knows" where its subnets are so the routing just happens.
-
@SteveITS Yeah, I determined that it's going out the WAN via Traceroute. If I do a packet capture on VLAN 20 looking for the ping from VLAN 10 I get no data.
-
@briancounsel-tech-com Is the target IP actually in the /29? There's not too much to affect routing...
-
@SteveITS Yep. The address in that /29 was given by DHCP.