What I try to achieve
To make the shares accessible from multiple subnets, whereby each subnet is on a different vlan. And you don’t leave your vlan/use a NAT to hop over.
Hardware
ASRock B650I with 2.5gbe NIC from Realtec Dragon RTL8125BG
Dual Port SFP+ with Intel X710 Chipset
EdgeSwitch 16 XG es-16-xg (SFP+ switch)
TP-Link TL-SG2424 (gigabit switch)
A Pfsense router/firewall
TrueNAS version
Dragonfish-24.04.2.3
Current setup
- The 1gbe Realtec on the motherboard is only for management and is on the TP-Link switch untagged for VLAN19. On the TrueNAS server it has a static alias of 192.168.19.20/24
- The first SPF+ 10gbe port (with no alias) has two vlans as childern, vlan20 with alias ip 192.168.20.20/24 and vlan30 with alias ip 192.168.30.20/24. On the SPF+ switch the port is tagged with vlans 20, 21, 30 & 31.
- The second SPF+ 10gbe port (with no alias) has two vlans as childern, vlan21 with alias ip 192.168.21.20/24 and vlan31 with alias ip 192.168.31.20/24. On the SPF+ switch the port is tagged with vlans 20, 21, 30 & 31.
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp110s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 9c:6b:00:5c:bf:ac brd ff:ff:ff:ff:ff:ff
inet 192.168.19.20/24 brd 192.168.19.255 scope global enp110s0
valid_lft forever preferred_lft forever
3: enp1s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 6c:b3:11:3c:33:d8 brd ff:ff:ff:ff:ff:ff
inet6 fe80::6eb3:11ff:fe3c:33d8/64 scope link
valid_lft forever preferred_lft forever
4: enp1s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 6c:b3:11:3c:33:da brd ff:ff:ff:ff:ff:ff
inet6 fe80::6eb3:11ff:fe3c:33da/64 scope link
valid_lft forever preferred_lft forever
5: vlan20@enp1s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 6c:b3:11:3c:33:d8 brd ff:ff:ff:ff:ff:ff
inet 192.168.20.20/24 brd 192.168.20.255 scope global vlan20
valid_lft forever preferred_lft forever
6: vlan21@enp1s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 6c:b3:11:3c:33:da brd ff:ff:ff:ff:ff:ff
inet 192.168.21.20/24 brd 192.168.21.255 scope global vlan21
valid_lft forever preferred_lft forever
7: vlan30@enp1s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 6c:b3:11:3c:33:d8 brd ff:ff:ff:ff:ff:ff
inet 192.168.30.20/24 brd 192.168.30.255 scope global vlan30
valid_lft forever preferred_lft forever
8: vlan31@enp1s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 6c:b3:11:3c:33:da brd ff:ff:ff:ff:ff:ff
inet 192.168.31.20/24 brd 192.168.31.255 scope global vlan31
valid_lft forever preferred_lft forever
Nameservers
Nameserver 1:
192.168.19.1
Nameserver 2:
192.168.20.1
Nameserver 3:
192.168.21.1
Default Route
router
IPv4:
192.168.20.1
The resulting transfer speeds are amazing using SMB Multichannel on the vlans 20 & 21, however when i added the vlans 30 & 31 i cant reach them. Not when my own pc joins the corresponding vlans & with the pfsense firewall to allow all. Even with a ping from the PFsense router are non responsive. The SMB shares on the vlans 20& 21 are still working fine, and the management on vlan19 is also working.
I have tried to add to each vlan, a bridge, with the alias ip moved to the bridge, but no dice.
Is it not possible to assign a single network port to multiple vlans, with each it own ip? Or am i making an incorrect setup?