OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: JRC on May 18, 2020, 09:46:24 pm

Title: Firewall rules not working for specific VLAN
Post by: JRC on May 18, 2020, 09:46:24 pm
Hi there,

I am running OPNsense 20.1.6-amd64 and have been working on segmenting my network into a some VLANs, everything is working great except for just one VLAN. For some reason I cannot get traffic to leave VLAN 50, even though the firewall rules are set up identically to other (working) vlans.

The rules look like this:

        IPv4 *   *   *   100_Servers net   *   *   *         
        IPv4 *   50_VoiceNetwork net   *   RFC1918    *   *   *   Block all private IP space      
        IPv4 *   50_VoiceNetwork net   *   *   *   *   *   Default allow LAN to any rule

The goal is for this VLAN to internet access, access to my server VLAN and no others, the RFC1918 Alias refers to the private ip space, it's to block traffic to other VLANs. This exact rule set works just fine on other VLANs, exactly as expected. But even when I disable the top 2 rules I still can't get traffic to leave the VLAN.

Nothing comes up in the firewall line view and I can ping other clients on the VLAN in question (but not the opnSense VLAN interface, or anything beyond it).

So I am completely stumped. I have gone through and checked and rechecked the VLAN setup, the interface setups etc and as near as I can tell it is identical to the others, but it just won't pass the traffic.

Any ideas on where else I can check to get an idea of what's going on here?

Thanks,
Title: Re: Firewall rules not working for specific VLAN
Post by: JRC on May 18, 2020, 10:35:22 pm
It really helps if your switch knows about the VLANs you are trying to create. The issue was on my Cisco switch, I completely forgot to tell it about VLAN50.

It all works as expected now.