Unable to get internet access on vlans through switch

  • Hello, I'm having problems getting internet on clients connected through a VLAN.
    Here's my setup, I have a pfsense with two NIC, one for WAN and one for LAN. The WAN IP is 201.220.xxx.xxx and uses an external DNS server to resolve requests. The LAN ip for my pfsense is and is connected to a Netgear switch GS728TSB on port 1. I've also added the VLANS on the switch set their membership and PVIDs so VLANs 10 and 20 use port 1 of my switch as trunk.

    I've set up two VLANS on my pfsense, 10 and 20 respectively, and DHCP servers for them using the ip pools and respectively. The NAT rules on my pfsense are automatic, allowing all three networks (LAN + OPT1 + OPT2) to NAT to a WAN address. Also added the firewall rules to (allow any) on each of my OPT interfaces. My pfsense uses an external DNS server which is set on the General Setup page and I've activated the DNS forwarder on the LAN and OPT interfaces.

    The problem is that if I connect my laptop directly to the pfsense's LAN interface port I get DHCP as well as access to the internet, but if I connect through the switch although I still get DCHP for LAN and both the VLANS I cant get to the internet. The VLANS can ping each but i cant ping which is the pfsense's LAN ip and the switch's gateway. Am I doing something wrong? I'm new to pfsense so I would appreciate some help. Thanks

  • LAYER 8 Global Moderator

    What are the rules you put on your opt interfaces that are you vlans - can you post your vlan setup in pfsense.

    So for example here are 2 vlans I have in pfsense that are connected to my em2 physical interface.  So your saying if you plug a device on your switch that is in vlan 10 you get IP from dhcp for that vlan, and if you put in switch port for 20 you get IP from that vlan pool.

    Can you ping the pfsense IP you put on that vlan?  So for example mine are and Devices on those vlans can ping pfsense IP address on that vlan.  Pinging pfsense IP address on your lan segment would depend on your firewall rules.  Well for that matter even pinging pfsense IP in that vlan would depend on your firewall rules.  Please post up your vlan configuration, the ips of your pf interfaces in those vlans.  Your firewall rules for those vlans and ipconfig from clients in those segments.

    Your using just /24 for your masks right?