Cannot access some switches anymore?

Urbaman75

Hi,

I moved all of my home devices from LAN interface (untagged native on pfsense and all switches) to VLAN10 (trunked on pfsense and all switches, tagged on the Switch Access2 port going to the home network), also changing IP range in the process (192.168.1.x to 10.0.10.x).
Now, all of my switches have an IP address on the VLAN1 (native, untagged) internal VLAN.
I see them properly with their IPs on the ARP table, properly associated to the LAN interface.

Now, I can only access one of them. This is what I have:

PfSense - trunk - Switch Core
Switch Core - trunk1 - Switch Access1
Switch Core - trunk2 - Switch Access2
Switch Access2 - VLAN10 exit

I can properly access all devices on VLAN10, Pfsense (on VLAN1) and the Switch Access2
I cannot seem to be able to access Core and Access1.

I do not have any FW rule with single IPs and see nothing on logs.

How can I properly check and debug the problem?

Thank you.

Urbaman75

One more insight: I can ping all of the switches from pfsense

SteveITS

@Urbaman75 do the switches allow connections from outside their subnet?

Urbaman75

@SteveITS that's right.
The two switches not being accessed are L2/L3 and lost the internal VLAN routing. I re-enabled it by accessing from VLAN1 and re-adding an IP on both Switches' VLAN10 interface: both got accessed again from VLAN10 devices.

Now I'll properly go (hopefully) through ACL settings to limit access to some devices only.

Thank you very much for pointing me in the right direction.