[SOLVED] Unable to pass vlan to trunk

[Prox815]

Pfsense vm cannot detect the WAN connection.
I can manage PVE through a managed switch.
Also, I want to set up VLANs in Pfsense, so that the management VLANID of Pfsense will also the same as that of proxmox.
After installation of Pfsense, I cannot login to web interface through the switch.


I have tried the following configurations in proxmox but did not work out:

auto lo
iface lo inet loopback

iface enp8s0 inet manual

# Pve management port
auto vmbr0.98
iface vmbr0.98 inet static
        address  192.168.98.251
        netmask  255.255.255.0
        gateway  192.168.98.254

auto vmbr0
iface vmbr0 inet manual
        bridge-ports enp8s0
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes

Not sure what is the problem

 

[Lorenz.S]

This is perhaps because of the PVE Firewall [0]. Try deactivating at the VM level (of the pfSense firewall VM)

Other question: Why don't you use multiple interfaces for the pfSense VM? So the firewall VM would not have to bother with VLANs.

[0] https://pve.proxmox.com/wiki/Firewall

 

[Prox815]

I have disable the firewalls on Datacentre, on Node and on the VM. Still cannot gain public ip address from ISP.

 

[ph0x]

You can only have 1 untagged VLAN on a port and that should also be the PVID.

 

[Prox815]

I have modified VLAN 1, but the VM still cannot detect WAN connections

 

[ph0x]

How did you modify it? Could you show another screenshot of your switch's VLAN config?

 

[Prox815]

How did you modify it? Could you show another screenshot of your switch's VLAN config?

Here are my modifications:

(mod 1)



(mod 2)

i set port 1 and port 8 non-member of VLAN 1, and chnage the PVID of port 8 from 1 to 99.

 

[ph0x]

Now that you have one VLAN untagged on those two ports you have to define the address of your host directly on vmbr0.
If you want to have the address on vmbr0.98 you have to put VLAN 98 tagged on the trunk.

 

[Prox815]

Turns out I have found out that my proxmox configuration has no problem.
The device that I am using has a i225-v NIC, which the kernel 5.4 has compatility issues with it.
Upgrading the kernel to 5.11 could solve the network problem.

For more reference,
https://forum.proxmox.com/threads/is-anyone-using-i225-v-nic-in-their-pve-setup.76708/
https://forum.proxmox.com/threads/kernel-5-11.86225/