Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - rama3124

#16
Still not working so i'm definitely missing something here. I am running plex container on my Unraid server and usually access the service with IPADDRESSOFUNRAID:PORT but can't add port numbers to host override so filled out the fields like this but it doesn't seem to function:
Host: plex.local
Domain (name of my container): plex
Type: A
IP: IPRADDRESSOFUNRAID

What am i doing wrong now? Also regarding using the plex container name, docker containers are on a custom docker network on my unraid server so not sure if this affects things

Thanks again for all the help
#17
Thanks for the reply
There's two options, host overrides or domain overrides. I'm assuming it is domain override that i need and i tried adding a domain (test.local) and then put in the IP address and port for an example service and then clicked save + apply however visiting test.local in my browser didn't bring up the service. Am i doing something wrong?
#18
Hi
I run several services on my server through docker containers and currently access these services using the IP address of the server followed by the port number. Is there a way to arrange it so that I can access the services locally using container names? For example if I want to access my Plex container, typing plex.local instead of the IP address? Fairly new to opnsense so sorry if the question is silly or basic, TIA
#19
General Discussion / Re: Separate VLAN for IoT devices
February 16, 2023, 08:42:27 AM
I  have already set a static IP on the VLAN of 192.168.10.1 and have a  range of 192.168.10.50-192.168.10.100 on the dhcp server.
I've tried changing the vlan interface parent from the LAN port to another unused NIC port and plugging directly into the router but my laptop still didn't receive an address. I'm thinking of trying a full factory reset to see if it helps or perhaps plugging the AP directly into the router without my switch
#20
General Discussion / Re: Separate VLAN for IoT devices
February 15, 2023, 11:34:58 AM
DHCP server is enabled on the VLAN interface and yes switch port 1 goes to router and 2 to AP.
I left port 1 & 2 tagged, but added port 3 as an untagged member port of the VLAN 10 and adjusted the PVID to 10 for port 3. When i connected my laptop, it didn't receive an IP
Any idea why opnsense isn't giving network access if the DHCP server is enabled?
#21
General Discussion / Re: Separate VLAN for IoT devices
February 14, 2023, 09:08:07 AM
I had vlans disabled for the SSIDs that were already running, but the test SSID had VLAN enabled as per the screenshot. Yet when i connect to this test SSID, i get no network access and don't get assigned an IP
#22
General Discussion / Re: Separate VLAN for IoT devices
February 13, 2023, 09:33:55 AM
More screenshots, please let me know if anything else is helpful
#23
General Discussion / Re: Separate VLAN for IoT devices
February 13, 2023, 09:33:04 AM
Screenshots of configs attached
#24
General Discussion / Re: Separate VLAN for IoT devices
February 13, 2023, 03:57:34 AM
Like a diagram of the setup? Any advice on what application I can use to create a diagram like this?
#25
General Discussion / Re: Separate VLAN for IoT devices
February 12, 2023, 10:11:00 PM
I went and bought a tp link managed switch so that I could get rid of my bridge and then assigned ports 1 and 2 of the switch as tagged for a test vlan (these ports are connected to my opnsense PC and my access point). I set this vlan up in opnsense (with Lan port as parent), assigned it to an interface and enabled dhcp server for the vlan interface. I then cloned the allow all rules from my Lan interface to the vlan (only changing the interface and source). When I add an extra ssid mapped to this test vlan on my access point, my laptop is not assigned an IP and has to self assign again and I can't ping anything.

Any idea why the vlan is not working? Thanks
#26
General Discussion / Re: Separate VLAN for IoT devices
February 08, 2023, 08:49:46 AM
I did adjust the tunables as per the opnsense documentation. I'll try disabling DHCP on the VLAN within the bridge and see if that improves my problem. I think it's also probably time to buy a switch and stop messing with this bridge too!
#27
General Discussion / Re: Separate VLAN for IoT devices
February 07, 2023, 12:34:29 PM
Thank you pmhausen, your answer has helped me a lot. I didn't know you couldn't have a VLAN on a port that is part of a bridge. I carried out your instructions almost exactly except that i put my IOT VLAN into my LAN bridge and kept my trusted VLAN outside the bridge since i only have 4 trusted devices (two laptops and two phones) so it's easier to seperate them out rather than all the individual IoT devices.

Do i still have to enable DHCP on the VLAN contained within the bridge or is this handled by the bridge? Also if i have an allow all rule for my trusted VLAN, can it connect via telnet and ssh to devices in the other VLAN? I tried telnet from my laptop and it said connection refused despite being able to ping the destination device
#28
General Discussion / Re: Separate VLAN for IoT devices
February 07, 2023, 09:13:25 AM
I only have one access point and want to divide the devices connected into two subnets
#29
General Discussion / Re: Separate VLAN for IoT devices
February 06, 2023, 12:42:19 PM
Ok that makes sense. Thanks for your prompt reply

I have an opnsense router with quad NIC with 3 of the ports setup with a LAN bridge and the 4th being WAN. Tonight, i tried creating two VLANs with tags 10 & 20, with the parent set as the one of the bridged ports (igc0). I created firewall rules for the two VLAN interfaces to allow all traffic and also enabled DHCP on both interfaces. Then i went to my access point which is plugged into to igc0 and assigned VLAN tags 10 & 20 to the 5ghz and 2.4Ghz SSIDs. Upon doing this, i immediately lost all network access through wifi and couldn't ping anything. Actually, my wifi connected laptop stopped being assigned an IP adress and had to self assign.

Any reason why this would happen, considering i only had a single allow all rule assigned to the interface? i feel like it might be related to the fact that i have a LAN bridge set up linking 3 ports on my router (in place of a switch)
#30
General Discussion / Separate VLAN for IoT devices
February 06, 2023, 07:27:23 AM
Hi, I run opnsense on a mini PC along with home assistant on a raspberry pi running some IoT devices. I plan to move the home assistant and all IoT devices to a separate vlan from my laptop and phone for security purposes.

I'm a networking newbie so wanted to ask, will this break any of my automations or functionality? I assumed it wouldn't matter as long as home assistant and the IoT devices are on the same VLAN. I also assume I'll have to put in a rule to allow me to access the web GUI for home assistant as well (perhaps only allowing port 8123). Any other rules I might need to setup?

I was also thinking I could seperate the VLANs and initially allow all traffic but measure traffic crossing the VLAN boundary to see what rules I might need to apply. How would I go about logging the traffic between the VLANs like this?

Thanks