VLAN

[grant4790]

I have been at this for two days now, I cannot get this vlan to work I have a dell R730 running OPNsense in a VM it has two ports dedicated to it one wan one lan WAN is RJ45 LAN is SFP+ twinaxe cable that connects to a cisco 3650 switch that port I have set to Trunk vlans 1 and 10. pots 5 on said switch has the same config for my u7 pro AP, Finally port 35 is set as access for vlan 10 which is my desktop that I am testing this issue with. Vlan 1 can ping vlan 10s gate way however anything connecting to my vlan 10 SSID via my AP wont get an IP nor will my desktop which as I mentioned is connected via an access port to vlan 10 please help my brain hurts. Thank you in advance.

[Patrick M. Hausen]

Which firewall rules did you create for the new VLAN?

[grant4790]

The pre generated, and access to the internet

[Patrick M. Hausen]

For the new VLAN there are no pre-generated. Only for the default LAN interface. Whenever you create a new interface you also need to create firewall rules for this one.

[grant4790]

Then what's the folder that says "pre-generated rules 18" that have DHCP and others in it?

[Patrick M. Hausen]

What's a "folder"? Post a screenshot, please.

[grant4790]

Here is a SS of my rules for vlan 10 with the generated rules folder extended and not extended

[Patrick M. Hausen]

I don't see any manually added "allow" rule for anything. Which is of course necessary.

[grant4790]

I have these manually made one

[Patrick M. Hausen]

Looks ok to me. Time to login to OPNsense via SSH and watch with tcpdump what is actually happening on the wire.

[grant4790]

I was looking at the DHCP logs and it was listening, I am SSHing in now, just "tcpdump" in shell im assuming?

[grant4790]

I did "tcpdump -i vlan0.10" it is empty nothing going on I just connected my phone to the SSID that is set to tag vlan 10. and the switch is set to trunk vlan 1 and 10 on the AP port, and the firewall to switch port is set to do the same. No DHCP IP on my phone no tcpdump traffic on the vlan eitther

[Patrick M. Hausen]

Then your AP is not forwarding the frames as you expect it to do.

[grant4790]

I thought it was AP as well but if I set one of my switch ports to access vlan 10 that end device does not get connection to vlan 10 either. Im beginning to think it may be something with my switch it is a cisco 3650 if you know anything about them.

[Patrick M. Hausen]

"switchport mode trunk" set on all ports carrying tagged VLANs?