pfsense not able to pick up DHCP broadcasts from proxmox guest tagged with VLAN

crissaegrim

New Member
Dec 31, 2024
2
0
1

TLDR: No DHCP offers from pfsense with VLAN tagged on a VLAN-aware host. Switch is trunked to allow "All" traffic.​


I have a VLAN tagged as 20: https://i.imgur.com/Rz61DMz.png
And its corresponding interface: https://i.imgur.com/pQxJitG.png
And its DHCP server: https://i.imgur.com/jsAjxid.png

I start packet capture to see if DHCP on this VLAN responds: https://i.imgur.com/xlfsm4U.png at Diagnostics -> Packet Capture -> VLAN20 (vmx1.20) (I don't see any activity, zilch).



On proxmox side, I have this guest: https://i.imgur.com/md46zBT.png
Its host has bridge-vlan-aware yes: https://i.imgur.com/72iiWmW.png also the GUI: https://i.imgur.com/L2WBcgo.png

I start data capture on the host to see if DHCP for VLAN 20 is being solicited (it is): https://i.imgur.com/HMdpzqi.png
The guest is timing out, with no DHCP offers: https://i.imgur.com/Yyul1iA.png



Then finally, on the switch's port, I double-checked that it's allowing All: https://i.imgur.com/iTnIzH2.png
 
Figured it out. Two issues: I was missing an additional setting in `/etc/network/interfaces`:

bridge-vlan-aware yes
bridge-vids 2-4094

Then on `pfsense`, I had to change the network cidr from `/16` to a smaller one like `/24` or `/23`. My guess is pfsense CE doesn't support huge networks like `/16`.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!