Jump to content
adminmat

[Solved] Pihole across multiple VLANS?

6 posts in this topic Last Reply

Recommended Posts

Just set up pihole on my Secure LAN. Its working great but I have 4 VLANs running on an EdgerouterX. All VLANs are segregated and VLAN10 can establish communication with any other VLAN (via firewall rules) I have a pihole on VLAN10 in an unRAID server.

 

How can I let VLAN20 utilize the pihole as well? I've tried many firewall rule to no success. Is my only option to set up a pihole for every VLAN? Surely there is a better way. 

Edited by adminmat

Share this post


Link to post

If you want to keep network segregation, the best way is to set up a dedicated pi-hole server for each VLAN (network).

 

Below an example of my setup

image.png.30d6f81dc5bed9e7789e6a9d01b05d59.png

Share this post


Link to post
36 minutes ago, bonienl said:

If you want to keep network segregation, the best way is to set up a dedicated pi-hole server for each VLAN (network).

 

Below an example of my setup

image.png.30d6f81dc5bed9e7789e6a9d01b05d59.png

But wouldn't I have the same problem because of my VLAN firewall rules? Being my client devices on the guest/family network would not be able to connect to the secure network (unRAID box/Pi-Hole) in order to access the Pi-Hole DNS server? Since the Pi-Hole server is on the Secure LAN? 

 

For example:

My unRAID server is on the 192.168.10.0/24 subnet.

Pi-Hole is on the  192.168.10.0/24 subnet.

My guest/family network is 192.168.20.0/24.

 

Or maybe i'm not understanding and you can totally set up different subnets on the unRAID server.  I can set this all up using one physical ethernet interface on the unRAID server?

 

Also, others are recommending just opening port 53 from VLAN to VLAN. Which I've tried unsuccessfully. 

 

Share this post


Link to post

update: I'm not sure why but the network setting for pihole and unraid were all scrambled. I deleted and reinstalled pihole. It's working now but not across VLANS still. I'm considering scrapping all my EdgrouterX's firewall rules and starting over. 

Share this post


Link to post

Ok update on this I finally got it working. I created a rule in the GUEST_TO_LAN ruleset to allow destination traffic to the pihole's IP address on port 53. But it was important to move this rule to the top of the ruleset to get it working properly. See my post here for more info.

 

@bonienl, out of curiosity what router are you using?  And another thing I found out today. Every time I rebooted my unRAID server the Pi-Hole docker would fail to open again. It was happening because the unRAID server was getting a new DNS of the Pi-Hole itself. So in unRAID's network settings I had to set the DNS to Static and list my Edgerouter IP as the DNS. Does this make sense? Is there another way? 

Edited by adminmat

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.