SMART Device no Ethernet on my VLAN - even with the right shown VLAN Adress

[Patuff]

As you see above, i just cannot connect with my Nvidia Shield TV Pro to the Ethernet. It show me the right VLAN Adress, so i know its set up right, but cannot access and Application needing the Ethernet.
This one happens after i made a fresh install and set all firewall rules new.

What confusing me, is the fact, my Laptop can connect via the selected LAN cable and get the right ip Adress of the VLAN and also Ethernet. So i am unsure if i miss anything?


If more pictures needed of any other configuration, just ask me out. Thank you!
PS: I also take advice in some Firewalls rules you advise. Thank you!

[Stuzoo72]

It looks like you are using IPv4 only. This is good as it is easier for me and the older generation to understand.
I am not familiar with Shield devices, but assume they are linux based and good for streaming etc. As a precaution you could try turning IPv6 off on the Shield.

I use a very similar vlan/DMZ for my smart devices.
Your rules to destination "any" port should work.
I would suggest that you combine them into one rule that does both functions.
Source ANY (as this is from a vlan so all traffic entering this vlan will be from from VLAN30_SmartDevices net).
Destination INVERT PrivateRanges (!Private Ranges)
It reads as pass anything that enters from vlan30 > going to the internet.
No need for block/reject.

My suspicion is with the DNS rules that you have.
Maybe the Shield has some built in DNS settings that it must use. Or something else.
I don't know the reason you need to block general DNS requests so this is a bit of guess work.
Try changing the allow DNS rule to pass both UDP and TCP. Some times TCP has to be used.
Can you try disabling the DNS block rule as a test to see if that is the issue?

If you need to enforce specific DNS, why not try redirecting all DNS queries?
https://forum.opnsense.org/index.php?topic=9245.0

I've included a screen grab of my rule(s) that works for my Smart Device subnet.

[Stuzoo72]

.

[Patuff]

I appreciate your answer, but i figuerd out i had to set the VLAn tag to untag and now its working like it should.

So the mistake is totally made by this step i guess.

Thank you!