DEC2752: Getting switch online

[Flattery6100]

Hi!  I'm setting up a new DEC2752.  I've set up VLANs for one of the ethernet ports and set up firewall rules.  I've now plugged a small managed switch into that port to try to get it online.  I see the switch's static IP in DHCP leases, but it shows as offline and I can't ping it.  I tried factory resetting the switch but it behaves the same.

I don't have anything on the base interface for the port, just the VLAN interfaces, which I think is correct.  What do I need to do to allow the switch to communicate?

Thanks!

[Flattery6100]

I've tried hooking up to the switch and setting up the ports like so:

PORT 1:  Untagged VLAN 1
PORT 2:  Untagged VLAN 10
PORT 3:  Untagged VLAN 20
PORT 4:  Tagged VLANs 10, 20, 25
PORT 5:  Tagged VLANS 10, 20, 25

I've also tried adding VLAN 1 as Tagged or Untagged on PORT 5.

PORT 5 is intended to be the link to the firewall.
PORT 4 is for a wireless AP.
PORTS 1-3 are for a direct machine connection.

If I plug into PORT 1, I can access the switch and nothing else.
If I plug into PORT 2, I can't access anything.

[Flattery6100]

The switch is intended to be in VLAN 2 on the firewall, with VLAN 99 as the management VLAN (though I've also got VLAN 10 allowed to get to everything while I'm trying to get this set up).

[Flattery6100]

I tried setting the PVID, since I do have that set in the pfsense I'm migrating from, and I think that let me get an IP assigned via DHCP from opnsense, but I can't do anything beyond that.

[Flattery6100]

Running a packet capture does show traffic, so.. enabling logs on rules to see if any of them are being hit.

[Flattery6100]

Logs show that everything is being passed.  wtf?

[Flattery6100]

Okay, I restarted the firewall and the switch, and - I was able to hit google.com once from browser (and also dig it once from the terminal), then it all went back to not working.

Any ideas?