Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    1.2-RC3 Vlan creation issue

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    6 Posts 3 Posters 4.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      vantage
      last edited by

      My Network:

      WAN(em1) – pfsense (Carped pair) --- (em0)802.1Q tagged Cisco switch
                                 
                                  \ (em2)non tagged Cisco switch

      Both ciscos are taggable. But I have only been using tagging on one (em0). The other has been a single /24 net (em2).

      I am trying to add another vlan to the previously untagged switch. When I remove the IPs from the non tagged interface (em2) and create 2 vlans on that interface, I cannot get traffic to pass into any of those vlans. I am unable to even ping anything on either vlan from the firewall. I have incomplete arp entries for all of the live IPs on the vlan subnets. The vlan interfaces show outgoing traffic, but no incoming. All throughput ot all interfaces stops as well.
      I tried to add another vlan to the interface (em0) that already has 2 802.1q vlans on it and all throughput stops. even when I haven't touched the untagged interface.

      This device was set up under 1.0.1 and upgraded to 1.2-RC3. so the original interfaces were all created under 1.0.1.

      Any thoughts?
      What info can I provide?

      # ifconfig -a
      em0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
              options=b <rxcsum,txcsum,vlan_mtu>inet6 fe80::21b:21ff:fe08:3826%em0 prefixlen 64 scopeid 0x1 
              inet 192.168.100.2 netmask 0xfffffffc broadcast 192.168.100.3
              ether 00:1b:21:08:38:26
              media: Ethernet autoselect (1000baseTX <full-duplex>)
              status: active
      em1: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
              options=b <rxcsum,txcsum,vlan_mtu>inet XXX.XXX.174.5 netmask 0xfffffff8 broadcast 208.38.174.7
              inet6 fe80::21b:21ff:fe08:3827%em1 prefixlen 64 scopeid 0x2 
              ether 00:1b:21:08:38:27
              media: Ethernet autoselect (1000baseTX <full-duplex>)
              status: active
      em2: flags=8943 <up,broadcast,running,promisc,simplex,multicast>mtu 1500
              options=b <rxcsum,txcsum,vlan_mtu>inet XXX.XXX.171.2 netmask 0xffffff00 broadcast 208.38.171.255
              inet6 fe80::230:48ff:fe8e:dffa%em2 prefixlen 64 scopeid 0x3 
              ether 00:30:48:8e:df:fa
              media: Ethernet autoselect (1000baseTX <full-duplex>)
              status: active
      em3: flags=8843 <up,broadcast,running,simplex,multicast>mtu 1500
              options=b <rxcsum,txcsum,vlan_mtu>inet 192.168.1.1 netmask 0xfffffffc broadcast 192.168.1.3
              inet6 fe80::230:48ff:fe8e:dffb%em3 prefixlen 64 scopeid 0x4 
              ether 00:30:48:8e:df:fb
              media: Ethernet autoselect (1000baseTX <full-duplex>)
              status: active
      pflog0: flags=100 <promisc>mtu 33208
      enc0: flags=0<> mtu 1536
      pfsync0: flags=41 <up,running>mtu 1348
              pfsync: syncdev: em3 syncpeer: 224.0.0.240 maxupd: 128
      lo0: flags=8049 <up,loopback,running,multicast>mtu 16384
              inet 127.0.0.1 netmask 0xff000000 
              inet6 ::1 prefixlen 128 
              inet6 fe80::1%lo0 prefixlen 64 scopeid 0x8 
      vlan0: flags=9943 <up,broadcast,running,promisc,simplex,link0,multicast>mtu 1500
              inet XXX.XXX.133.126 netmask 0xffffff80 broadcast 208.38.133.127
              inet6 fe80::21b:21ff:fe08:3826%vlan0 prefixlen 64 scopeid 0x9 
              ether 00:1b:21:08:38:26
              media: Ethernet autoselect (1000baseTX <full-duplex>)
              status: active
              vlan: 2 parent interface: em0
      vlan1: flags=9943 <up,broadcast,running,promisc,simplex,link0,multicast>mtu 1500
              inet XXX.XXX.147.130 netmask 0xffffffe0 broadcast 208.38.147.159
              inet6 fe80::21b:21ff:fe08:3826%vlan1 prefixlen 64 scopeid 0xa 
              ether 00:1b:21:08:38:26
              media: Ethernet autoselect (1000baseTX <full-duplex>)
              status: active
              vlan: 3 parent interface: em0
      carp0: flags=49 <up,loopback,running>mtu 1500
              inet XXX.XXX.171.1 netmask 0xffffff00 
              carp: MASTER vhid 2 advbase 1 advskew 0
      carp1: flags=49 <up,loopback,running>mtu 1500
              inet XXX.XXX.174.4 netmask 0xfffffff8 
              carp: MASTER vhid 1 advbase 1 advskew 0
      carp2: flags=49 <up,loopback,running>mtu 1500
              inet XXX.XXX.147.129 netmask 0xffffffe0 
              carp: MASTER vhid 4 advbase 1 advskew 0
      carp3: flags=49 <up,loopback,running>mtu 1500
              inet XXX.XXX.133.125 netmask 0xffffff80 
              carp: MASTER vhid 3 advbase 1 advskew 0</up,loopback,running></up,loopback,running></up,loopback,running></up,loopback,running></full-duplex></up,broadcast,running,promisc,simplex,link0,multicast></full-duplex></up,broadcast,running,promisc,simplex,link0,multicast></up,loopback,running,multicast></up,running></promisc></full-duplex></rxcsum,txcsum,vlan_mtu></up,broadcast,running,simplex,multicast></full-duplex></rxcsum,txcsum,vlan_mtu></up,broadcast,running,promisc,simplex,multicast></full-duplex></rxcsum,txcsum,vlan_mtu></up,broadcast,running,promisc,simplex,multicast></full-duplex></rxcsum,txcsum,vlan_mtu></up,broadcast,running,promisc,simplex,multicast> 
      

      HELP!!

      I am down to 6 free IPs on the untagged LAN. I need to get another vlan up quickly.
      Thanks.

      1 Reply Last reply Reply Quote 0
      • P
        Perry
        last edited by

        Did you reboot after you created the vlan's?
        Since so many things has change in the code after 1.01 a reinstall is better than a upgrade imo.

        /Perry
        doc.pfsense.org

        1 Reply Last reply Reply Quote 0
        • V
          vantage
          last edited by

          I may have not rebooted untill I was trying to get back to a working config.  I suppose that could have been the issue.

          1 Reply Last reply Reply Quote 0
          • V
            vantage
            last edited by

            Rebooting didnt help.

            I reinstalled on my failover device and added this config in at install time.

            All is happy now.

            Any ideas why I was unable to add a vlan?

            1 Reply Last reply Reply Quote 0
            • C
              cmb
              last edited by

              So you're saying adding the VLANs to a running system didn't work, even after reboot, but restoring the same config onto a fresh install did work?

              @vantage:

              Any ideas why I was unable to add a vlan?

              No clue, I did several VLAN setups in the past week testing the ALIX VLAN patch and never had a single issue. Some NICs/drivers require a reboot before VLANs will work properly but it seems you eliminated that as a possibility.

              1 Reply Last reply Reply Quote 0
              • V
                vantage
                last edited by

                I manualy added the vlans to a fresh install. Then I synced the rule set and the aliases.  and it worked.

                Seames very odd.  I am going to try adding vlans to the fresh installed box and see if I have a failure there .

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.