Hi,
For educational purpoese, I am implementing some VLAN segregation in my home network. I have a Unifi network, and my Truenas Scale (ElectricEel-24.10.1) server is, along with everything else, on the default network (VLAN 1). The IP range here is 192.168.32.0/24. On there I also have a VM, hosted in the Truenas, that runs docker containers, and accesses NFS shares on the TrueNAS.
No, to complicate things, I have created a VLAN with ID 100, (IP range 192.168.100.0/24) and setup an Active Directory there.
The VLAN is created in my Unifi UI, and I have a VLAN type NIC setup with a static IP for it on my TrueNAS. At first it was set at DHCP, and it recieved an IP address in the correct subnet.
Now, since this is a separate VLAN I can not access it from my default network, so I setup a jump host, that has a NIC in both networks. That way I can RDP to that from my default network, and access everything in VLAN 100 from there. Everything works as planned, so happy thoughts.
But now I want to move my docker VM into VLAN 100, and access the NFS shares on my TrueNAS from there. But no host in VLAN 100 can ping the TrueNAS servers NIC in VLAN 100. It shows up in my Unifi UI with correct IP, so it seems to have some sort of connection.
Trying to ping a host inside VLAN 100 from the shell of my TrueNAS gives this:
PING 192.168.100.5 (192.168.100.5) 56(84) bytes of data.
From 192.168.100.2 icmp_seq=1 Destination Host Unreachable
From 192.168.100.2 icmp_seq=2 Destination Host Unreachable
From 192.168.100.2 icmp_seq=3 Destination Host Unreachable
From 192.168.100.2 icmp_seq=4 Destination Host Unreachable
192.168.100.2 is the IP of my TrueNAS in VLAN100.
Pinging 192.168.100.2 with 32 bytes of data:
Reply from 192.168.100.5: Destination host unreachable.
Reply from 192.168.100.5: Destination host unreachable.
Reply from 192.168.100.5: Destination host unreachable.
Reply from 192.168.100.5: Destination host unreachable.
All other hosts inside VLAN 100 can ping eachother.
netstat -rn on the TrueNAS gives this:
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.32.1 0.0.0.0 UG 0 0 0 br0
192.168.32.0 0.0.0.0 255.255.255.0 U 0 0 0 br0
192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0 vlan100
What do I have to do in order to access the NFS shares on my TrueNAS from within VLAN 100? Is it even possible?
It seems there is no gateway for VLAN 100, is there supposed to be?
I have tried disabling all firewall rules that has anything to do with VLAN 100, even though I think that shouldn´t be an issue, since I am within the same subnet. Is there something that needs to be done on the Truenas to make it communicate over the VLAN NIC? What have I missed. Please let me know if any more info is needed.