This is my first post here, although I’ve been using TrueNAS for over 10 years. I’m experiencing a frustrating issue after setting up VLANs on my network: the TrueNAS web interface is not reachable from other VLANs.
No, the VLANs are separate, and I’m only connecting to one interface at a time.
Interface 0: This interface has a static IP in the 10.1.10.X range. When I connect through this interface from a switch tagged port 10, I can’t access it from VLAN 1.
Interface 1: This interface uses DHCP. When connected to a switch port tagged with VLAN 1, it’s also not accessible from VLAN 10.
Any ideas on what could be causing this issue? Thanks for the help!
You cannot have two default gateways. Remove the gateway from the one that is configured statically.
You can then only access the interface in VLAN 1 from clients in VLAN 1 and the interface in VLAN 10 from clients in VLAN 10.
Trying to access the interface in VLAN 1 from a client in VLAN 10 or vice versa leads to asymmetric routing and is very probably blocked by your firewall.
That’s how it’s supposed to work. There is no policy routing mechanism in TrueNAS that will send “answers” to what you think is the “correct” interface. If a client contacts TN and the client is in VLAN 1, then TrueNAS will always send via VLAN 1 according to its routing table. Again, this is how IP is supposed to work if there is no policy routing in place. And policy routing is not a feature present in TrueNAS.
i can confirm that the gateway set is only one, it is 10.1.10.1 set under Global Configuration
The strange thing is that the ping and ssh can reach from a VLAN to the oher
is it possible that the WEB interface has resriction?
If you set a static gateway in global configuration but at the same time use DHCP for another interface, that one will of course also get a gateway from the DHCP server.
That’s why I wrote you must remove the static one. There must be only one default gateway.
Or get rid of DHCP and configure both interfaces statically.
it was deriving from MTU restriction on the VLAN interfaces, it was set to 1492 in order to be in line to my WAN MTU to avoid re-package by the Router, but it apparently crated problem with some devices.
Removing this MTU restriction from my LAN and VLANs it immediately solved the problem