Need help with configuring VLAN in PfSense

romainp · Nov 10, 2010, 2:18 AM

Hi guys,
I am currently playing with vlan and pf and I am stuck and really need some help or some advices (or both).

Here is my setup:

at the logic level:

PF ---- LAN (192.170.1.1) (dhcp)
|
|----- WIFI (192.170.3.1) (dhcp) VLAN3
|
|----- VLAN2 (192.170.1.2) VLAN2

So as you can see my setup is no so complicated.

To play with vlan, I have setup a vlan for the wireless:
wan is on em0
VLAN3 attached to lan interface (em1)
Created VLAN3 opt interface 192.170.3.1
wireless on ath0 bridge with VLAN3
dhcp for VLAN3 for 192.170.3.x

For my VMs on my Xen box I have created another VLAN

VLAN2 attached to lan interface (em1) 192.170.2.1
Created VLAN2 opt interface 192.170.2.1
no dhcp

I have created the rules accordingly and all is working fine.

Now
I wanted to add an ip on my xen box (192.170.1.5 let say)
I soon as I add it:

my lan can't communicate with the xen box
my xen box can't talk to the lan
my xen box can talk to 192.170.2.1 gateway
my xen box can talk to 192.170.3.1 gateway
my xen box cannot talk to 192.170.1.1 gateway

I have tried to setup a VLAN1 opt interface with dhcp the same way as VLAN2 with no luck at all.

Can you give me some advice on how should I use VLAN with PF with my config or some advice to create them?
Can the LAN interface could be vlan tagged?

Thanks in advance

Romain

clarknova · Nov 10, 2010, 4:02 PM

Please state the version of pfsense you are using.

It appears from your post that things worked as expected until you tried adding an IP to the xen box. If this is the case then I would first suspect a misconfiguration in the xen box.