Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Setting up a VLAN part 2

    Scheduled Pinned Locked Moved General pfSense Questions
    110 Posts 3 Posters 38.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      A Former User
      last edited by

      ok, marked port 4 in the 8 port switch from U to T

      and marked port 8 in the 24 port switch from U to T

      everything seems to be operating as it should.

      1 Reply Last reply Reply Quote 0
      • M
        Metu69salemi
        last edited by

        Like i tried to say several times, if no vlan support on switch/client use untagged.
        If vlan support exists then use tagging

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          In your diagram above port 4 on Switch8 and port 8 on Switch24 are marked E for both VLANs.
          Did you change them to U subsequently?
          They should be T as you said.

          Steve

          1 Reply Last reply Reply Quote 0
          • ?
            A Former User
            last edited by

            @stephenw10:

            In your diagram above port 4 on Switch8 and port 8 on Switch24 are marked E for both VLANs.
            Did you change them to U subsequently?
            They should be T as you said.

            Steve

            i am working with vlan 1, i see them as Us in my post above, but yes, i did change them to T before you replied.

            8 port-

            vlan1- E E E U U U U U

            24 port-

            vlan1- U U U U U U U U E E E E E E U U U U U U U U U U

            current config of vlan1 on both switches is as follows:

            8 port-

            vlan1- E E E T U U U U

            24 port-

            vlan1- U U U U U U U T E E E E E E U U U U U U U U U U

            1 Reply Last reply Reply Quote 0
            • ?
              A Former User
              last edited by

              @Metu69salemi:

              Like i tried to say several times, if no vlan support on switch/client use untagged.
              If vlan support exists then use tagging

              these are both vlan switches.

              1 Reply Last reply Reply Quote 0
              • ?
                A Former User
                last edited by

                @stephenw10:

                In your diagram above port 4 on Switch8 and port 8 on Switch24 are marked E for both VLANs.
                Did you change them to U subsequently?
                They should be T as you said.

                Steve

                did i mess up or did you miss something?

                your post is correct in that the ports were marked as E, but not on the same vlan that i was referring to.

                thanks.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  No I didn't realise you were refering to VLAN1.

                  This is where is gets confusing. VLAN1, the default VLAN, is usually only ever tagged within the switch. Although you can send it tagged between switches you could equally send it untagged with no difference in the logical network layout.

                  Anyway I think you have it correct.

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • ?
                    A Former User
                    last edited by

                    @stephenw10:

                    No I didn't realise you were refering to VLAN1.

                    This is where is gets confusing. VLAN1, the default VLAN, is usually only ever tagged within the switch. Although you can send it tagged between switches you could equally send it untagged with no difference in the logical network layout.

                    Anyway I think you have it correct.

                    Steve

                    ok, well now that we are on the same page, see if you can help me out with this…

                    both my vlan switches are on the 192 network.

                    8 port- 192.168.1.20
                    24 port- 192.168.1.9

                    for now, there are 0 rules in play to block vlans

                    here is the issue.

                    i get a laptop and join it to the 172 or 10 network, w/o any issues, i can ping 192.168.1.20 and 192.168.1.9...replies come back for both.

                    i can web into the .20 8 port switch but i cant web into the .9 port switch.

                    do you know why that is?

                    everything is tagged as i typed it in my most recent tagged/untagged port above.

                    not sure why i can ping and web into .20 but i can only ping .9 and not web into it.

                    the .9 switch is more advanced, i wonder if there is some sort of option i am missing?  i am almost certain in the 24 port, .9, switch each vlan can have its own gateway address and i know i set the gateway for vlan1 at 192.168.1.1, but i dont know that would cause me to not be able to web into it, locally.

                    thanks.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Hmmm.
                      The 24 port switch is significantly more complex.
                      It may have a setting that limits web GUI access to clients from it's own subnet. Since you are trying to access it routed via pfSense it would block that connection. This is relatively common.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • ?
                        A Former User
                        last edited by

                        @stephenw10:

                        Hmmm.
                        The 24 port switch is significantly more complex.
                        It may have a setting that limits web GUI access to clients from it's own subnet. Since you are trying to access it routed via pfSense it would block that connection. This is relatively common.

                        Steve

                        ok good, that makes me feel a little better about not being able to connect to it.

                        thanks for your help.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.