× NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Orbi WiFi 7 RBE973
Reply

Re: VLAN Config with 2 switches and psfense

bemerson
Tutor

VLAN Config with 2 switches and psfense

I'm trying to setup a VLAN for the first time and I'm having trouble getting it to work.

 

Relevant screenshots below. When I connect my laptop to port 4 on the GS105 I do not get any network connectivity.  What am I doing wrong??

 

 

I have a netgear GS308EP and a GS105Ev2 connected together as follows:

 

GS308EP 

PORT 1:  Connects to PFSense LAN

PORT 8: Connects to GS105Ev2

 

bemerson_1-1691949287817.png

 

 

 

GS105Ev2

PORT 1: Connects to GS308EP 

PORT 4: VLAN 70 (Connects to a wired laptop)

 

bemerson_2-1691949402478.png

 

PFSENSE

bemerson_3-1691949723335.png

 

Message 1 of 9
schumaku
Guru

Re: VLAN Config with 2 switches and psfense

Hello @bemerson 

Is it intended on the GS308E Port 1 is configured as Tagged (for a trunk), while it's connected to the LAN on the security appliance, which does not look like a port acting as a trunk?

 

GS308E p§ vlan70 t.PNG

Message 2 of 9
bemerson
Tutor

Re: VLAN Config with 2 switches and psfense

I'm not clear.  On the pfsense box I have WAN connected to my modem, and LAN connected to the GS308 on port 1.  I believe this needs to be a trunk?

 

Toggling this port to exclude does not resolve the problem. I do not discover any network when connected to port 4 on the GS105

 

Message 3 of 9
schumaku
Guru

Re: VLAN Config with 2 switches and psfense


@bemerson wrote:

I'm not clear.  On the pfsense box I have WAN connected to my modem, and LAN connected to the GS308 on port 1.  I believe this needs to be a trunk?


Strongly doubt. Can't see any indication the LAN security zone or this port is a trunk (tagged). Thus, tagging LAN does not make much sense to me.

 


@bemerson wrote:

Toggling this port to exclude does not resolve the problem. I do not discover any network when connected to port 4 on the GS105


Why exclude? You don't need the LAN zone on your switch? In my simple view, this port should be an access port, untagged, with the PVID set accordingly for the desired VLAN.

 

Guessing is a bad advise. Avoid trial and error. Make  clear design on a sheet of paper. All security zones, VLANs, links

Message 4 of 9
bemerson
Tutor

Re: VLAN Config with 2 switches and psfense

I have a clear design. It just isn't working.

 

All I'm trying to do is setup 1 VLAN on a single port. I cannot get the device connected to that port to recognize a network when plugged into it. VLAN 70 is not working.

 

As you suggested, I have tried changing the GS308 Port 1 on VLAN ID 1 to U, as well as E and I have not had any success.  Something else seems to be the issue. 

 

 

Message 5 of 9
schumaku
Guru

Re: VLAN Config with 2 switches and psfense


@bemerson wrote:

All I'm trying to do is setup 1 VLAN on a single port. I cannot get the device connected to that port to recognize a network when plugged into it. VLAN 70 is not working.

 

As you suggested, I have tried changing the GS308 Port 1 on VLAN ID 1 to U, as well as E and I have not had any success.  Something else seems to be the issue. 


Are we still talking about the GS308E port 1 connecting the security appliance for the predefined LAN security zone, which you intend to have on the switches as VLAN 70? As suggested before, it has to be an untagged port. And the PVID must be set 70 so the untagged frames are assigned to the VLAN 70 on the switch. 

 

VLAN 70 "not working" is certainly wrong, similar spoken a port is never "recognizing" a network. These switches do exactly what the network admin is configuring. With E on the VLAN 70. the VLAN is no longer participating on the port. It's [E]xcluded.

 

Said that: Also the GS308EP does have a PVID config table, just like the GS105Ev2. Last hint before I shut up: Use the same designations for what is supposed the same network and WLAN. Why does this have to be "LAN" on the security appliance (I understand it's part of the default configuration) but over on the GS308E you name it "Work". To easy to make yourself a lot of confusion, especially while trying to learn such a powerful (tough simple) technology.

 

 

 

 

Message 6 of 9
schumaku
Guru

Re: VLAN Config with 2 switches and psfense

What I had in mind ref. a table is shown in a different thread https://community.netgear.com/t5/Plus-and-Smart-Switches-Forum/GS305E-GS308E-VLAN-802-1Q-issues/m-p/... .... granted, not two different Web UI versions involved.

Message 7 of 9
bemerson
Tutor

Re: VLAN Config with 2 switches and psfense

ok I'm back. After spending all weekend trying to get this working, I have to be honest, I'm having a hard time following what you are trying to tell me.  

 

I went out and bought a new switch thinking perhaps the GS305 was not up to the task. I now have two GS308EPs.  

 

My setup is as follows   (PFsense) --LAN--> (Port 1 - GS308 - "Core") --Port 8--> (Port 1 GS308 - "UP")

 

On the GS308 - UP, I would like port 8 to be "VLAN 70". Every other port I want to simply be my default LAN network.

 

 

 

bemerson_1-1692669835226.png

 

When I Set Port 1 on "Core" to Trunk, I lose all internet connectivity, but on Port 8 of "UP" I can connect to the network.  If I set Port 1 on "Core" to "Access" and 1 - Default, I have internet connectivity but port 8 of "UP" will not connect.

 

I *think* this is a pfsense issue, but I'm baffled as to what it is.

 

It's worth noting that my IP for pfsense, and therefore my LAN network is 192.168.69.###.  I am pretty sure this should make no difference to the switch configuration, but it's worth noting.

 

In pfsense, I have things set as follows:

bemerson_2-1692670182361.png

 

 

 

 

bemerson_3-1692670220565.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

bemerson_4-1692670279243.png

 

 

 

bemerson_5-1692670317597.png

 

 

bemerson_6-1692670385783.png

 

Am I missing something?  This is a very basic setup.  I cannot tell if this is a problem with pfsense, or the switches. 

Message 8 of 9
tigo13
Star

Re: VLAN Config with 2 switches and psfense

Hi, do you still need help with this setup? Let me know, and I'll reply back with pointers on your screenshots with modifications to make to get the whole thing working. Let me know....

 

 

Message 9 of 9
Top Contributors
Discussion stats
  • 8 replies
  • 2154 views
  • 1 kudo
  • 3 in conversation
Announcements