Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLAN + DHCP + OpenWrt

    DHCP and DNS
    4
    10
    5.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      simplei
      last edited by

      Hi all,

      I want to separate wireless visitors from my network so decided to use vlans on pfsense and openwrt.
      My openwrt device directly connected with 1 lan cable to pfsense and i designed the system below;

      • pfsense
        – lan interface 192.168.1.1/27 on re1
        -- vlan interface 10 192.168.1.64/27 on re1
        -- vlan interface 20 192.168.1.97/27 on re1
        -- dhcp enabled on all interfaces.
        -- firewall rules added for pass all.
        -- pfsense restarted after configuration

      • OpenWrt
        -- ssid 1 vlan 10 member
        -- ssid 2 vlan 20 member
        -- ssid 3 without vlan
        -- dhcp disabled on the device
        -- firewall disabled on the device
        -- OpenWrt restarted after configuration

      I can connect with ssid 3 without a problem.
      But when i try to connect with ssid 1 or 2, dhcp can not assign me an ip.
      When i connect via ssid 3 i can ping vlan 10 and 20 interfaces. Also i can ping vlan 10 and 20 interface from openwrt console.

      How can i solve the dhcp problem on this design ?

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        @simplei:

        – vlan interface 10 192.168.1.64/27 on re1
        -- vlan interface 20 192.168.1.97/27 on re1

        Did you mean:

        – vlan interface 10 192.168.1.65/27 on re1_vlan10
        – vlan interface 20 192.168.1.97/27 on re1_vlan20

        If your ssid 1 and ssid 2 interfaces are assigned to re1_vlan10 and re1_vlan20 in respectively in Interfaces->Assign, then your problem is likely in openwrt and its configuration of tagged VLANs.

        As an aside, why such small subnets?  RFC1918 addresses are free.

        Also, you can always assign a static IP address and see if you can ping the pfSense interface to determine if you have a DHCP problem or a layer 2 problem.  My hunch is the latter.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • S
          simplei
          last edited by

          Thank you for your fast response and reply.

          I know there is a strange ip addressing in the definition. I will solve and fix range problems.
          So for ex. vlan 10 will start with .65
          I am using small subnets because the potential userbase is very small and i will be creating vpn's with other systems via this system.

          Wireless is on openwrt so i can only define vlans on pfsense side.
          Btw. vlan and untagged interfaces is on the same interface re1.

          I can not even see a related records about vlans in system logs.
          Should i modify any other thing on pfsense side ?

          Thanks

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            Please post a screenshot of Interfaces->(assign)->Interface Assignments

            Since this is a pfSense forum we should make sure pfSense is good to go first.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • S
              simplei
              last edited by

              Allright changed the ip ranges.
              Attached 2 images related with the interfaces.

              Thats right lets solve the pfsense side. Thanks.

              http://tinypic.com/view.php?pic=qxtn3b&s=8#.VC_Brvl_uSo
              http://tinypic.com/view.php?pic=i3tq87&s=8#.VC_B1Pl_uSo

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Looks fine.  Probably a problem with openwrt.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • S
                  simplei
                  last edited by

                  @Derelict:

                  Looks fine.  Probably a problem with openwrt.

                  I will work on openwrt then recheck my pfsense.
                  Thanks.

                  1 Reply Last reply Reply Quote 0
                  • S
                    simplei
                    last edited by

                    It seems it's a openwrt configuration problem.  ;)
                    Solved the issue.
                    Thanks.

                    1 Reply Last reply Reply Quote 0
                    • G
                      G.D. Wusser Esq.
                      last edited by

                      May or may not be an issue to you, just keep in mind that the untagged interface can spy on your tagged ones.

                      1 Reply Last reply Reply Quote 0
                      • P
                        pablot
                        last edited by

                        @simplei:

                        It seems it's a openwrt configuration problem.  ;)
                        Solved the issue.
                        Thanks.

                        Hi, can you share your OpenWRT configuration?. I have a similar setup and I'm stucked with the problem that my clients do not get addresses through DHCP. :-(

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.