OPNsense Forum

English Forums => General Discussion => Topic started by: spetrillo on November 01, 2024, 07:44:55 PM

Title: iSCSI VLAN Question
Post by: spetrillo on November 01, 2024, 07:44:55 PM
Hello all,

I have a VLAN dedicated to iSCSI storage traffic. I have setup the interface just like I would with any other interface. I have no rules assigned for this interface. When I try to ping from one device to another, both in the storage vlan, they do not respond. Do I just need an ICMP rule to allow this to happen? I am trying to troubleshoot some issues.

On a separate but related topic I would like to change the MTU on the storage VLAN to 9000. I assume that every path between any two devices must have their MTUs changed to make this happen correct?

Thanks,
Steve
Title: Re: iSCSI VLAN Question
Post by: clarknova on November 01, 2024, 08:26:06 PM
If both devices are on the same vlan then they should be able to communicate at layer 2 with no firewall in the path. Check your switch configs.

For trouble-free operation, all the hosts on the LAN should have the same MTU and all the connected switch ports should have an equal or larger MTU.
Title: Re: iSCSI VLAN Question
Post by: Patrick M. Hausen on November 01, 2024, 09:34:14 PM
Also for a VLAN dedicated strictly to storage without any traffic to another VLAN or the Internet - why configure on OPNsense at all?

If have this exact configuration, VLAN 8 for iSCSI and NFS between TrueNAS and Proxmox - no VLAN 8 on OPNsense. What for?
Title: Re: iSCSI VLAN Question
Post by: spetrillo on November 02, 2024, 12:04:43 AM
I was using OPNsense for DHCP, but you are correct. This is dedicated for storage traffic between my NAS and my client machines. I can just statically assign the IPs and call it a day.