Comment on Help configuring OPNsense VLANs? Tutorials I find seem to quickly become outdated.
ampersandrew@lemmy.world 1 day ago Looking at the live view, a ping against Google shows both my and Google’s IPv6 addresses when done from my desktop on VLAN 1, but the logs show nothing of the sort when done from my mini PC on VLAN 10, which isn’t surprising, since the error returned from the terminal is “Temporary failure in name resolution”, meaning the error is before it even knows what Google’s IP address is. I don’t know what step I might have missed for that to be the case.
If you look at my screenshot, those are the settings of my VLAN’s firewall rule, and if there’s a difference between that and the one on the LAN interface, other than the field labeled Interface Name, I don’t know what it is. The LAN interface has a firewall rule for IPv6 as well, but the Home Network Guy tutorial skipped that one, and it still reached the internet. His tutorial was for allowing internet access without reaching the other private networks, but I believe I understand the Invert setting that he checked, and I did the opposite of that specifically for this test.
Archer@lemmy.world 1 day ago
Interesting, try pinging 8.8.8.8 (no DNS dependency) and looking at your DNS settings, what DNS is set up for the host?
A ping against that address works on the VLAN 1 desktop. It returns “Network is unreachable” on VLAN 10. I’m not quite sure what you mean by DNS settings on the host. I’m using DHCP, and DNS appears to be automatic as well. I’m on Debian KDE, for what that’s worth, and historically in my life, I haven’t touched DNS settings basically anywhere; maybe I could count how many times I did on my fingers, but it definitely wasn’t recently for this project.
Archer@lemmy.world 1 day ago
I need to see your firewall rules for both 1 and 10, dhcp settings for 10, and the output of ip addr on your test machine.
The screenshot in the original post is the only firewall rule on 10. This is the equivalent rule on 1 that will look very familiar. Image
And this is the IPv6 rule on 1. Both of these screenshots were from rules set up by default. Image
From the mini PC on VLAN 10, the output is: