Hi All
I am new to opnsense, please excuse my ignorance.
as stated on the subject, I have installed OpnSense with the following version details
Versions
OPNsense 24.7.10_2-amd64
FreeBSD 14.1-RELEASE-p6
OpenSSL 3.0.15
I have configured the LAN interface with DHCP IP Address 172.16.10.0/24 and assigned the IP address 172.16.10.2 as OpnSense IP
I also created 4 VLANS and assigned them under the LAN interface
VLAN20IoT 10.50.50.1
VLAN30Storage 172.16.30.1
VLAN40Servers 172.16.0.1
VLAN50WorkStations 172.16.50.1
connect the LAN interface to a Cisco switch and configure port 1 as a trunk with the following configurations
interface GigabitEthernet6/0/1
description Main Input from OPNSense
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,10,20,30,40,50
switchport mode trunk
also here are the vlan configurations on the switch
interface Vlan1
ip address 192.168.0.10 255.255.255.0
!
interface Vlan10
description ManManagement Vlan
ip address 172.16.10.3 255.255.255.0
!
interface Vlan20
description IoT Devices Vlan
ip address 10.50.50.1 255.255.255.0
!
interface Vlan30
ip address 172.16.30.1 255.255.255.0
!
interface Vlan40
ip address 172.16.0.1 255.255.255.0
!
interface Vlan50
ip address 172.16.50.1 255.255.255.0
!
ip default-gateway 172.16.10.2
and configured port 6/0/2 as access port to access vlan 20
interface GigabitEthernet6/0/2
description Test Connectivity
switchport mode access
switchport access vlan 20
on opnsense, I have configured DHCP for all Vlans and LAN network
I also added a FW rule on each VLAN to allow access to the internet and ICMP and DNS
now when I connect my machine to an untagged port which is VLAN 1 my machine gets the IP Address on the 172.16.10.0/24 network and can browse the internet with no issue
but when I connect it to any of the tagged vlan regardless of Vlan20 or 40 I get the DHCP address but can't ping the other vlans or browsing the internet.
I give up after a couple of days of trying to figure out what is going on, any help is much appreciated.
Regards
I finally was able to figure it out after I posted here, I have to remove the IP addresses from each VLAN on the Cisco switch