Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Cannot connect to internet with VLANs

    General pfSense Questions
    2
    2
    947
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      aTastyAim last edited by

      Hey everyone.
      I'm having a rather strange issue.
      I've just setup pfsense, running within vmware esxi 5.1 on a Dell PE R320II.

      Network setup is as follows
      WAN Interface is directly attached to the ADSL gateway having DHCP IP 10.0.0.152
      LAN Interface is attached to a Dell PowerConnect 2824 Switch. Port tagged on VLAN 1, 2 and 10

      The vlans are not in use yet. I'm just using VLAN 1 at the moment to test the setup

      Problem is:
      pfsense can ping to 8.8.8.8
      and when I use a client to ping to 8.8.8.8 it says:
      "Response from 10.0.0.152: target host unreachable"
      Also: For some reason i'm unable to ping to the pfsense box (10.0.0.1) but it's not blocked by any FW rule.
      Strange thing is:
      When attaching the linksys ADSL GW to the switch AND to the pfsense box's WAN Interface I can ping 10.0.0.1, but as soon as the ADSL gateway gets disconnected from the switch I lose the ability to ping. But I can get an IP from pfsense..

      Any suggestions would be appriciated

      1 Reply Last reply Reply Quote 0
      • P
        phil.davis last edited by

        It sounds like the WAN and LAN are connected together on one single layer-2 network. And that you have WAN and LAN subnets the same - 10.0.0.0/24. The LAN client is probably getting DHCP from the ADSL gateway, rather than pfSense.

        1. Make your LAN subnet different from the WAN subnet.
        2. If you have 2 NICs in your pfSense hardware, then connect the ADSL gateway directly to 1 NIC and use that as WAN, completely separate from the VLAN stuff;
          otherwise you have to configure the VLAN switch, and use a VLAN for WAN devices and separate VLAN for LAN devices, with pfSense trunk port between them. That way a DHCP request from pfSense WAN is only seen by the ADSL gateway, and a DHCP request from a LAN device is only seen by the pfSense virtual LAN interface.

        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

        1 Reply Last reply Reply Quote 0
        • First post
          Last post