Hoping someone may be able to help me with some troubleshooting. I've looked through a bunch of guides and got pieces of this to work, but can't get it all working together.

 

I currently am running an unraid server, with a pfsense box as my router/firewall. I'd like to have one unraid VM routed out over a VPN using VLANs.

 

I can get the following pieces to work:

1) Route all traffic out of Unraid over VPN with appropriate rules in pfsense.

2) Enable VLANs on br0.10 with a VLAN interface on pfsense, so the VM pulls the appropriate IP for the VLAN and maintains all connectivity to internet and local network.

 

However, as soon as I enable the VLANs, it "breaks" the VPN tunnel. I still have connectivity on all devices (unraid server and VM), but the traffic is now being routed over the WAN with my ISP IP, not the VPN.

 

I'm guessing that somehow I'm not isolating the VLAN appropriately, and there's a route over br0 out through the WAN. Problem is that I'm not sure how to pinpoint the issue.

 

 

Edited October 27, 20214 yr by ed_dantes

Well, I ended up solving it. Just in case anyone else runs into this issue, it turns out I had a rogue pass rule for the VLAN interface. Even though my first rule should have passed to the VPN, the existence of another pass all rule was providing it a workaround.