INTERVLAN Help!

Routers
1

Looking for a little help here, and im a bit of a newbie so bare with me!

I cant get two vlans to communicate with each other - i have tried creating firewall rules, following vlan videos on repeat, however no success.

I’m trying to create a 3 VLAN scenario as follows:

VLAN1 - 172.16.0.0/24 ( Wired Devices)
VLAN2 - 172.16.1.0/24 ( Home WiFi Devices)
VLAN3 - 172.16.2.0/24 (Isolated vlan for external facing servers)

I want vlan 1 and 2 to be able to communicate. This is where i am stuck. Would someone mind showing me how my firewall settings should look or a setting I may missing.

2

Inter-VLAN traffic should be allowed by default, as far as I understand. So, unless you have have setup a rule that explicitly drop all traffic between VLANs, it should be allowed.

1 Like
3

I have reset the router and redone configuration multiple times - it does not work.

4

Strange. What is the network topology and how are the associated ports on router and/or switches setup?

5

Can you take a screen shot of the firewall rules so we can see if there are any potential misconfigurations?

It sounds more like @ebuckland81 mentions that there are interface configurations that needs to be done such as allowing VLANS over a trunk/access port.

6

Issue is for the user to follow the manual. I reset everything to defaults and re followed videos step by step - now working properly. I think my issue was i did not assign the vlan to the wifi password.

Thanks for quick replies!

7

So slight update - i thought all was working however it seems i cant communicate from vlan 2 back to vlan 1, however i can now communicate from vlan 1 to vlan 2.

Any suggestions?

8

Are you using altapass (ppsk)?

What type of network have you chosen for vlan2?

I think we will need the pictures of how the settings are to get a better understanding of the setup itself, also if you can show the fw rules you have.

9

Yes im using altapass - this was my initial issue as I was not able to get a conventional vlan setup to communicate at all before seeing this feature in a tutorial video.

Network for vlan2 is Standard. VLAN has been set here.

Firewall is default settings, no modifications have been made. I tried creating a firewall rule to allow both networks to communicate, however made no difference. Rule placement in list had no effect either.

10

Would you mind sharing the topology of network devices and port settings? Maybe someone can spot something being off by looking at that.

11

I must have been tired last night - you guys are 100% correct to say that it all should work out of the box with no setting changes.

When testing i first pinged my proxmox server, no response. I then pinged a windows 11 device, no response. This is what lead me to believe I was only able to communicate one way.

While going through settings, i noticed on my proxmox server network settings that the gateway was incorrect and still set to my previous gateway ip of .254 instead of .1. Correcting this made it pingable.

It should be noted also that Windows 11 blocks ICMP requests, so if you want to ping for testing make sure rule has been enabled to allow icmp.

Everything is now working as it should. I appreciate the ability to be able to bounce thoughts off you gents! Thanks again!

3 Likes
12

Great. Happy that you found the issue :slightly_smiling_face:

Now that you mention it, I should have had that fresh in mind as something similar occured just recently: