I've been trying for a few days now to isolate my docker containers into groups on different VLANs so that I don't have a bunch of security cameras, monitoring dockers, home automation, etc. all on my main LAN. However, but have ran into a number of problems.
Dockers with br1:VLAN networks will not grab an IP address from the Pfsense DHCP server
I can manually assign IPs, and would likely do so for most Dockers. However, this is a bit annoying...
Dockers with br1:VLAN networks with Fixed IP addresses do not show up in Pfsense DHCP leases (though I can see the IPs traffic)
This isn't a huge problem right now, but it does make managing static IP assignments more difficult.
Dockers with br1:VLAN networks can be pinged by devices outside of Unraid, but can not ping to devices outside of unraid
This isn't causing me a problem right now, but might shed some light on what exactly is going on.
Dockers with br1:VLAN networks will attempt to use the br0:LAN's default gateway to resolve DNS
This prevents VLAN dockers from accessing the internet
My setup is as follows:
Pfsense box with the following VLANs:
LAN: Access to all VLANs
IOT: Access to internet, but not other VLANs
Security: No access to internet or other VLANs
Guest: Access to internet, but not other VLANs
Unifi managed switch and AP. The port connected to Unraid is a trunk port with all tagged VLANs
Unraid box
br0: Currently configured to be LAN, with the static IP of the server for SMB/management
br1: No IP address, but all VLANs added with no IP address assignment
Thanks for any help! Let me know if there is any additional information I can provide.