pfSennse,switch replacement from tplink to Zyxel,VLans not working
Freshman Member
Hello,
I have a pfSense as firewall-router on customers premise.
Replaced small TP-Link SG-2008 (8 Port) with Zyxel GS1900-24.
Upgraded to Latest Firmware etc,Vlans are not working on the replaced switch, everything was working on tplink thought.
Port 10 is the DVR in VLAN untagged and PVID 200
Port 12 is the Access Point, untagged 1 and tagged 100 to 102
Scenario is that the port 24 is the Uplink, VLAN ID 1 untagged all ports
VLan 100 Guest :all ports excluded,tagged only port 1,12 and 24
VLan 101 Guest :all ports excluded,tagged only port 1,12 and 24
VLan 102 Guest :all ports excluded,tagged only port 1,12 and 24
With this basic setup Vland and devices still are on the 1X.xx.30.0/24 subnet
pfSense doesn't detect traffic from the other VLans
*I will attach images, would be really helpful is someone told me if i miss something or wrong configuration.
same VLANS where working correctly before, checked uplink cable if correct port, rebooted firewall,router etc
Thank you.
All Replies
-
Hi @ArmoredPCs,
Could you help to check the MAC table if your devices are in the correct VLAN? The path is Menu > Monitor > Mac table.
0 -
Hello, thanks for the reply, it seems some devices are right now on the ''correct'' vlans per the mac table.
Looked on the arp table on pfsense but the IPs that the devices are getting are like of the VLAN1
0 -
I followed those two guieds
and
But still its the same.
0 -
Post the setup of the tplink
0 -
Setup is the same just deferent switch
LAN1 was the uplink tagged and then Tagged port 8 for the AP and untagged for port 7 DVR
Both switch installations were made by me…
0 -
So devices are getting a IP just not from the right VLAN?
Forbidden VLAN1 on all ports mainly 1, 10, 12, 24 with a port reserved to login
The DVR on port 10 untag with PVID 200 should work
0 -
Correct, they don't get the correct IP.
I can see even the devices from advance IP scanner. and ping works ,even after configuring the vlans.
Last time o configured a zyxel switch i didnt had such hassle.
Only problem is i am through VPN and i fear that if i change the VLAN ports as you said i will lose the management to the switch since port 24 is the uplink,tried to change to forbiden the port 10 but no change.
Scenario is that VLAN1 is the managment and intenal network ,we manage the switch from there and the AP.
Only the DVR and other 3 Wifi (guest,Iot,employees) need to be on a vlan
There is another WIFI with vlan1 that the owner even when i am there can connect and do maintenance.
0 -
It seems like the AP's don't have a VLAN if devices are getting a IP on the untag VLAN1
0 -
WiFi before was working correctly with the same configuration on the AP
Its not the first time doind vlans with access poin etc
My main problem is like its not feeding the VLANS to to the switch etc
I have tried every combination of settings.
0 -
So your going to have to go on site to fix it because they have done something on the other end.
0
Zyxel Employee
Guru Member
Categories
- All Categories
- 415 Beta Program
- 2.3K Nebula
- 141 Nebula Ideas
- 94 Nebula Status and Incidents
- 5.5K Security
- 216 USG FLEX H Series
- 262 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 39 Wireless Ideas
- 6.3K Consumer Product
- 243 Service & License
- 382 News and Release
- 81 Security Advisories
- 27 Education Center
- 8 [Campaign] Zyxel Network Detective
- 3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 71 Security Highlight
