Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[thomas7467]

Hi all,

I'm trying to tag device packets from one DLINK port 14 (VLAN ID 11) so my OPNSense router/firewall can allow DHCP configuration and network access.

1/ Assigning VLAN ID 11 on device network card, connected directly on OPNSense works fine.

2/ I've configured VLAN 11 on the DLINK with VLAN wizard, untagged but my Pc connected on the dlink cannot acquire IP address from OPNSense, packets seemed not beeing taggued.

Any ideas how I can solve this?

Thank you,
Thomas

[Mr.Mom]

VLAN on switch
Need Access Port that is connected back to the network, Default VLAN untagged, and other VLAN ID tagged
Other ports that are not default VLAN are untagged for the VLAN

VLAN Mode can be set to Hybrid, Trunk, or Access:

Hybrid mode - can allow the port to be a tagged member or an untagged member port of multiple vlans.
 
Trunk mode - the port will be a tagged member of any vlan or an untagged member of a single vlan using the native checkbox
 
Access mode - the port will be an untagged member of a vlan

[thomas7467]

Hi,

Here is my config for the port 14 :

Port   eth14
VLAN Mode   Access
Access VLAN   11
Ingress Checking   Disable
Acceptable Frame Type   Untagged Only

But the packets from the PC outgoing from the DLINK to the OPNSense router are not tagged ...

Works fine with all the standard ports without VLAN configuration.

[Mr.Mom]

What port is your uplink port to your network. You should already have VLAN 11 on your network as tagged traffic.
That way VLAN 11 on port 14 can handout those VLAN frames.

[thomas7467]

Hi,

with uplink port I think you mean the port that connects the DLINK to the OPNSense router? So uplink port is port 1, that I have leaved unconfigured

[Mr.Mom]

Configure port 1 with VLAN 11
How many VLANs do you have on the router?

[thomas7467]

Hi,

the target is VLAN ID 11 on port 14, VLAN ID 10 on port 15 and 16 and no specific VLAN config for all other ports.

[Mr.Mom]

Are the VLANs from there router tagged or untagged.
If they are tagged which they should be for VLAN 11 and VLAN 10 unless one of them is your native VLAN.
Example
VLAN 1 Native
VLAN 11 tagged
VLAN 10 Tagged
Port one on the DGS switch is Hybrid native VLAN 1 untagged but tagged for VLAN 10 and 11  this would be the uplink port.
Port 14 would be Access Tagged for VLAN 11
Port 15 and 16 Access Tagged for VLAN 10

Anything plugged into port 14 on the switch will get VLAN 11 IP addressing.
same fore 15 and 16 would get VLAN 10 IP addressing.
You do need a uplink port on the switch and make sure they are working on the router side before configuring the switch.

[thomas7467]

OK good news  It works !

I've configured as you suggest :
Port 14  Access Tagged for VLAN 11, Ingress checking Enabled
Port 15 and 16 Access Tagged for VLAN 10, Ingress checking Enabled

Port   eth15
VLAN Mode   Access
Access VLAN   11
Ingress Checking   Enable
Acceptable Frame Type   Untagged Only


Port 1 (the one connected to the OPNSense Router) configured like this:

Port   eth1
VLAN Mode   Hybrid
Native VLAN   1
Hybrid Untagged VLAN   1
Hybrid Tagged VLAN   10-11
Ingress Checking   Enable
Acceptable Frame Type   Admit All

Mr. Mom thank you, you're the King

[Mr.Mom]

Awesome, have fun.