VLAN tagging traffic from a VM

[debsque]

Hello,

I need help on how to use VLAN tags for several VMs. I've read several threads in the forum, but other setups are more complex whereas I need something simple.

I have 1 NIC which supports VLAN tagging (I know this because a pfsense VM inside prox picked up a wireles vlan tag). I want 2 VMs with untagged traffic and 2 VMs with tag 20.

auto lo
iface lo inet loopback

iface eth0 inet manual

auto vmbr0
iface vmbr0 inet static
    address  192.168.90.99
    netmask  255.255.255.0
    gateway  192.168.90.60
    bridge_ports eth0
    bridge_stp off
    bridge_fd 0

2 VMs are untagged and 2 VMs are tagged from the GUI so they look like this:

virtio=xx:xx:xx:xx:xx,bridge=vmbr0,tag=20

Untagged VMs get IPs from the DHCP server (pfsense - Vlan tagging works for wireless network) but tagged VMs don't. They don't even reach the firewall. Pfsense is on a netgate appliance.

I've also tried OVS instead of linux native and check/uncheck VLAN aware on the interface.

I don't know what to do next.

 

[debsque]

Update:

I've created a pfsense VM, bridged to vmbr0 and it's not picking up VLAN tag traffic, only untagged.

EDIT: that was my fault. "Vlan aware" was unchecked from vmbr0. VLAN 20 works with pfsense virtualized, but not with the physical box.

EDIT2:

SOLVED. I've tagged only the pfsense port and didn't tag proxmox's port on the switch.