Protectli vault FW6A with Proxomox hosting OPNsense with TP-Link TL-SG108PE

[DenisB_13]

I am very new to this and I'd greatly appreciate your patient assistance.

OPNSense 26.7amd64, FreeBSD 15.1-RELEASE-p1, OpenSSL 3.5.7

OPNSense is a PROXMOX vm.

I have an internet router connected to WAN port of Protectli.  I have LAN port of protectli connected to port 8 of TLSG108PE.

TLSG108PE is set up as follows:
VLANID  VLAN_Name  Member_Ports   Tagged_Ports  Untagged_ports
   1      Default    1-4,8                            8
  20      IoT          5,8            8               5

I think I have PROXMOX and OPNSense configured correctly.  Also I have done the chatgpt hokey pokey checking each step step of the way. I've checked this with CHATGPT twice with no success.

Symptom - Any computer connected to port 1 or 2 or 3 or 4 correctly receives 192.168.10.x/24 ip address.  No computer connected to port 5 receives any ip address from the IoT vlan configuration of 192.168.20.x/24 subnet.  DHCPDISCOVER never gets a DHCPOFFER.

I know this is a "newbie" question and I might have overlooked this in the earlier threads or threads for earlier versions.  I'd greatly appreciate assistance geared toward someone who has never done this before....because I've never done this before.

[meyergru]

I suggest you to read:

https://forum.opnsense.org/index.php?topic=42985.0, especially point 3

and

https://forum.opnsense.org/index.php?topic=44159.0

if you have not done so already.

On a side note: "VLAN 1" is special - on some switching platforms, it denotes the "untagged" VLAN, on some, it doesn't. So be sure that your switch, your Proxmox installation and OpnSense are in sync about what "VLAN 1" means in terms of bridge view, logical and physical interface views, respectively. Also check that port 5 has PVID 20; making it an untagged member of VLAN 20 only controls egress tagging.

You will find that you have chosen an environment with the maximum amount of potential complications. If you do not have an advanced level of networking knowledge, you will have a steep learning curve ahead - and I do not mean that condescending, but as an unbiased early warning, only considering the fact that this was your first posting here. What I mean by that is that I doubt that there is a step-by-step guide and an LLM will probably be of little use, either, especially if it is a free or local variety with limited capabilities.