Comment on Help configuring OPNsense VLANs? Tutorials I find seem to quickly become outdated.
derek@infosec.pub 1 week ago
I’m a bit late to the party. I was a network admin in another life and believe I can help out. I’ve skimmed existing conversations but not fully poured over them.
That said: I’d print the routing tables for the switches and firewall and review them. Considering firewall rules is sensible but it seems you’ve already done quite a bit of investigation there. It sounds like there is some vlan configuration missing. Like one of the switches doesn’t have the vlan interface defined or named in its vlan database.
Review the routing tables and confirm who owns each vlan and what those networks are aware of. Also toggle your logging options on so you can review them and test with more info than pass/fail.
It very well may be a OPNsense firewall knowledge thing but I’m not convinced. If you’re still working on this tomorrow I’d be happy to help root-cause the problem and fill in the gaps between RTFM and old YouTube videos. :)
I might not understand what you mean, but doing the best I can figure out, the output from the endpoint mini PC running ip route is:
192.168.10.0/24 dev enxc84d4422aa48 proto kernel scope link src 192.168.10.157 metric 100From the OPNsense firewall, the trace route looks like this (I would have expected to see the switches that it hops to in between, but I don’t see them here):
Image
I can’t find any option to print routing tables in my switches, both of them Netgear GS305E switches. I don’t see any mention of it in the manual either. I suspect that what you asked me to do was lost on me.
Jenseitsjens@lemmy.world 1 week ago
If that’s the only route then your issue starts there. If you want to reach anything other than the local network there needs to be a default route to the gateway.
The default route is sent along the dhcp lease so my suspicion is that the issue is in the dhcp server config.
So what do you think might be the problem with it that I might check? As far as I know, if I’ve been assigned an IP address, DHCP is working.
Jenseitsjens@lemmy.world 6 days ago
DHCP usually provides three things:
In the DHCP lease you for example get the IP 192.168.10.42/24. That IP is assigned to your interface which creates a implizit route like
192.168.10.0/24 dev netinterface. Now you know how to reach other hosts in your local network.In the same DHCP lease, you should also receive a default gateway - likely 192.168.10.1. this would add a route like
default via 192.168.10.1.Without the default route, packets for IPs other than your local network never leave your host because it doesn’t know where to send them to.
DNS servers are also provided, though before troubleshooting that, I would just ping addresses like 8.8.8.8 (google dns) for testing connectivity.