VLAN - No DHCP, no ARP replies

[anselor]

New to opnsense but I feel have a reasonable grasp of the networking fundamentals of what's going on.

I'm working from what seems to be a poplular set of instructions from homenetworkguy


I have opnsense running on a 4-port minipc. I have 3 of the ports configured as follows:
igc0 - WAN - plugged into my AT&T modem/router
igc1 - LAN - plugged into port 1 on my switch
igc2 - the parent for all VLAN traffic - plugged into port 8 on my switch

I have a handful of VLAN tags configured but I'm just trying to test one of them, tag 20.
20 - vlan02
50 - vlan05

On the switch I have it configured as follows:
ports 1, 2, untagged LAN (Switch calls this VLAN 1) - When I plug in to port 2 I get an IP in the LAN IP block and can access the internet as expected
port 3, untagged VLAN 20 with PVID set to 20
ports 4-7, untagged VLAN 50 with PVID set to 50
port 8, tagged with all VLANs enabled, PVID set to 1

When I plug in to port 3 on the switch (VLAN 20) I don't get an IP.

I found the opnsense interface to do a pcap on vlan02 and igc2.
At no point in anything I've tried do I see any packets captured on vlan02 at all.
On igc2 I do see DHCP broadcasts tagged with vlan 20 so it seems like the switch is configured correctly and adding the vlan tag and sending it out port 8 to the router. Nothing is responding on the router and, as I mentioned, nothing is showing up on vlan02 (TAG 20). I'm guessing I've misconfigured opnsense somewhere.

I tried manually setting the IP to 192.168.20.99/255.255.255.0 with 192.168.20.1 as the gateway.
Tried to ping 192.168.20.1. I see in igc2 a bunch of ARP requests coming in tagged as VLAN 20 as expected.

I tried taking the switch out of the equation. I configured my client to use VLAN 20 and plugged it directly into eth2/igc2. Seeing the exact same behavior. DHCP requests with VLAN 20 show up on the pcap. Manually setting the IP, I see ARPs with VLAN 20 tagged.

In the screen shots I grabbed VLAN50 but VLAN 20 is configured the same with just different IP ranges.

[anselor]

Ok, it seems like I'm limited to only 256kb in total images on the entire thread so I've uploaded pictures here instead:

https://imgur.com/a/DTmy9fx

[anselor]

Someone on Discord was able to help me out. There wasn't anything wrong with the configuration. I just had to click apply everywhere one more time to make it extra applied.