Quote from: johnydo on August 02, 2026, 10:09:09 AMAdvanced – Trusted ComputingAUS !!! mit die TCPA/Palladium scheiBe bitte !!!
TPM Support > Aktivieren
Quote from: tonys on August 02, 2026, 09:45:45 PMThe untagged LAN + both tagged VLANs are on igc0 (port 1 of the Protecli) and go ONLY to the Unifi AP.If you need the VLAN 1 stuff for Ubiquiti UniFi equipment then this would be the right setup :
Quote from: danman on August 02, 2026, 05:59:10 AMI hope so :DI am confused by the following :
QuoteI watched a video last night that you should suppose to set the VLAN PVID only on untagged ports but how does opnsense know which VLAN to handle the switch with then? And I always changed the PVID to work with OpenWrt and this works fine for years that way.&
QuoteSo that basically means to me, that I probably should set up on opnsense igc1 port with the right IP range (25)?&
I'm trying to set the switch on VLAN ID 25 same for the openwrt but it always gets 80 and sometimes 60.
If I set a static ip for the switch that would work too but as I mentioned there are coming a few more devices with TAGGED ports and I dont wanna play that game.
QuoteSo if I can't use PVID 25 for Port 4 & 5 to tell OPNsense in which DHCP/IP range it should put those devices how can I change it on opnsense side and not setting up static IPs?&
Quote from: danman on August 02, 2026, 01:24:57 PMI need to somehow tell the switch to connect to the specific VLAN ID 25 which would mean, whenever I use a device to trunk VLANs I'll need to set a static IP for that particular device as well.&
Because I've a few devices/VMs I would like to avoid that :D
QuoteThe issue is here how can I tell opnsense that the switch I use to trunk the VLANs to to put this switch in IP range 25 (VLAN ID 25) without static IP and without PVID?What are you trying to achieve ?!
Quote from: danman on August 02, 2026, 01:59:28 PMOPNsenseCan we assume that each VLAN Interface has it's own Subnet and active DHCP Server + the right Firewall Rules ?
- all VLANs are running on Port 1 (igc1)
- IP set
- DHCP set
Quoteswitch on port 5If you don't get any DHCP IP Address then there is an error in your configuration => See my previous questions !!
- all tagged, nothing untagged on port 5
- PVID doesn't matter
- for now only static IP works
Quoteopenwrt APLooks like another configuration error! Possibly between the Switch and the Accesspoint ?!
- all tagged from switch port 4 to WAN port
- VLANs created
- WiFi 2.4 for VLAN ID 80 and wifi 5 for VLAN 50 (but it connects to ID 60/80 or whatever)
QuoteI just hooked the switch and the openwrt AP device onto my current set up with the main openwrt router. VLAN configs are the exact same for the AP and switch like I try to use with the opnsense router.Then you need to fix your OPNsense configuration :P
That works very good. Thats not helpful :D