Comment on Help configuring OPNsense VLANs? Tutorials I find seem to quickly become outdated.
Archer@lemmy.world 1 day ago
This is a great opportunity to learn tshoot on OPNsense. Learn where the firewall logs are and how to check them to see if your client IP is blocked. Check the firewall rules to see if that VLAN has internet access - remember, the default is deny on firewalls, so the one you made is not the default OPNsense “LAN” firewall with a rule allowing internet access, so look at how that is set up and compare to your VLAN
Looking at the live view, a ping against Google shows both my and Google’s IPv6 addresses when done from my desktop on VLAN 1, but the logs show nothing of the sort when done from my mini PC on VLAN 10, which isn’t surprising, since the error returned from the terminal is “Temporary failure in name resolution”, meaning the error is before it even knows what Google’s IP address is. I don’t know what step I might have missed for that to be the case.
If you look at my screenshot, those are the settings of my VLAN’s firewall rule, and if there’s a difference between that and the one on the LAN interface, other than the field labeled Interface Name, I don’t know what it is. The LAN interface has a firewall rule for IPv6 as well, but the Home Network Guy tutorial skipped that one, and it still reached the internet. His tutorial was for allowing internet access without reaching the other private networks, but I believe I understand the Invert setting that he checked, and I did the opposite of that specifically for this test.
Archer@lemmy.world 1 day ago
Interesting, try pinging 8.8.8.8 (no DNS dependency) and looking at your DNS settings, what DNS is set up for the host?
A ping against that address works on the VLAN 1 desktop. It returns “Network is unreachable” on VLAN 10. I’m not quite sure what you mean by DNS settings on the host. I’m using DHCP, and DNS appears to be automatic as well. I’m on Debian KDE, for what that’s worth, and historically in my life, I haven’t touched DNS settings basically anywhere; maybe I could count how many times I did on my fingers, but it definitely wasn’t recently for this project.
Archer@lemmy.world 1 day ago
I need to see your firewall rules for both 1 and 10, dhcp settings for 10, and the output of ip addr on your test machine.