I have a Netgear switch which has some VLANs configured:
VLAN 1 in ports 1,2,3,4,5,6,7,8 Untagged VLAN 2 in ports 1,2,3 Untagged + 8 tagged (8 is the router) VLAN 3 in ports 4,5,6,7 Untagged + 8 tagged (8 is the router) PVID: 2 (1,2,3), 3 (4,5,6,7), 1 (8)
I also have an opnsense router with the VLAN interfaces VLAN2 and VLAN3. From a computer A in VLAN2 I can reach the router VLAN3 interface (ping, Web access, etc), so the switch is not blocking this inter-VLAN traffic. From the router, I can reach computer B in VLAN3 (ping), so the computer B is correctly configured in the VLAN3 network. However, when I try to ping from computer A at VLAN2 to computer B at VLAN3, the ping doesn't reach the destination. Therefore, it looks like opnsense is blocking such traffic, but I am unable to find how, since both VLAN2 and VLAN3 have a rule to "pass" IPv4 traffic (
IPv4 * * * * * * *).
10.1.1.2 (VLAN2, computer A) --> 10.1.1.1 (VLAN2, router) --> 192.168.1.1 (VLAN3, same router) --> 192.168.1.2 (VLAN3, computer B)
My questions are:
- How can I allow access from computer A to computer B?
- Why is the switch not blocking level-2 traffic from one VLAN to another? Is it because of the tagged router port I set?