VLAN creation issue

[supercm]

I have a new installation and DHCP works fine on the LAN interface.

I created a new vlan, assigned it, enabled the interface, assigned an IP, set up a dhcp scope and enabled it. Created a temporary allow all rule in the firewall to test. When I move a device to the new vlan, the DHCP request (in the log) tries to be served by the LAN address.

So I assigned a static address and tried to ping the gateway and cant ping. Where do I look to troubleshoot?

For context, this is a hyper-v vm and I have another firewall as a vm (from another vendor) that I am migrating from with the same settings on the same switch and the same hyper v settings and it works over there, so I can say the switch and the hyperv network are not the issue.

Thank you

[pmhausen]

You should probably create and manage VLANs in Hyper-V and assign dedicated interfaces to OPNsense.

[supercm]

Thank you. That works but is that by design. With both Sophos XG and PFSense, I am able to configure it as a VLAN in the respective tool and that seems to work just fine.

[pmhausen]

I honestly don't know. Never run Hyper-V. I try to keep layer 2 stuff as close to the hypervisor as possible in ESXi. And I can recommend not to mix tagged and untagged on a single interface in FreeBSD.

So if you want to re-evaluate your approach at least run only tagged VLANs on that port.

HTH,
Patrick

[supercm]

Got it. Thank you.