Trying to host my first Server!

Elyot

I am trying to host my first server behind my XG-7100.
My thinking was to isolate it on a vlan and and port forward the necessary ports.
I tried this but there must be some configuration issue because have no network connection, everything looks ok as per the plan.
If anyone can help have a look at the setting or has any advice I'd really appreciate it.

patient0

@Elyot did you have a look at the port forwarding documentation of Netgate/pfSense, there is even an example section:

https://docs.netgate.com/pfsense/en/latest/nat/port-forwards.html#port-forwarding-configuration-examples

If you write "have no network connection", do you refer to not being able to access the server from the outside? Or is there already an issue with the VLAN configuration?

Elyot

@patient0 I will check that documentation, but I believe there is a problem with either the VLAN settings or port fowarding. Inside my network, I am not getting any external access

patient0

@Elyot said in Trying to host my first Server!:

I believe there is a problem with either the VLAN settings or port fowarding

Do you have added a firewall rule to the VLAN? And does DHCP work on it? Have you setup a VLAN before on the XG-7100? Find the docs about it, including an example of how to create to LANs:

VLAN mode: https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100/switch-overview.html#q-vlan-mode
configure the switch ports: https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100/configuring-the-switch-ports.html#vlans
two LAN example (what you want to do): https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100/configuring-the-switch-ports.html#two-lan-switches

Elyot

@patient0 thanks, I will check them out

KOM

@Elyot If you want help, you will need to tell folks exactly what you did with appropriate screenshots. Just saying "It doesn't work" and then guessing at the cause helps no one.

Port-forwarding should not affect your internet connection unless you've seriously borked something.

Start from the beginning with your current config, and what you have done. It's really pretty simple and Netgate has guides on how to do it, with a million other folks also posting guides, YouTube videos etc.

stephenw10

Yup, that. The 7100 has some additional requirements when adding a VLAN because of the internal switch.

Elyot

@stephenw10 Extra rerquirements? Such as?

I have not had time to look at this for a couple of days.
I am looking at the suggested pages and writing a step by step process and seeing if it matches what I did and if I need to change anything or just start again.

Elyot

@stephenw10

OK, I was just reading about that, but if I do not want to use the switch functionality and just use it in "access" mode, there shouldn't be any extra configuration required?

(Still not sure when you would use "Trunk" or "Port VLAN" mode)

stephenw10

So what exactly are you trying to do? Use one of the switch ports as a separate interface?

You need to create the interface as a VLAN on lagg0 in pfSense.

Then you need to add that VLAN in the switch config. It needs to be added as tagged on the two lagg ports (9 & 10) and untagged on whichever port you with to use.