Bug #7553
closed
Captive portal on a parent interface blocks traffic on VLAN interfaces too
0%
Description
Using PfSense 2.3.4, I enabled a captive portal on interface em2. Then, as I needed another interface, I added a tagged VLAN on the same switch port, and created a VLAN interface using em2 as parent (em2_vlan55). Took me a while to understand that the captive portal is blocking the VLAN traffic. IMHO this should not be the case. A parent and a VLAN interface should be considered independent.
Updated by Jim Pingle almost 8 years ago
- Category set to Captive Portal
- Status changed from New to Confirmed
- Priority changed from Normal to Very Low
- Affected Version changed from 2.3.4 to All
This does appear to be the case on 2.3.x and 2.4.x. It used to work, not sure when it stopped.
That said we always recommend either tagging everything or never tagging on an interface. The best practice is to NOT mix tagged and untagged traffic on the same physical interface. You should switch pfSense to use a tagged interface for the default VLAN traffic on that port instead of leaving it untagged.
Updated by A FL over 6 years ago
I just tested on two old release (x64-2.1-RELEASE and i386-2.1.5-RELEASE. That's the only deprecated release i could find on the internet), i got the same issue.
I think it's an ipfw issue related to the table lookup algorithm when using tablearg with iface table type.
Updated by Marcos M over 2 years ago
- Status changed from Confirmed to Resolved
- Release Notes set to Force Exclusion
Tested on latest 23.01 snap - this is no longer an issue.