Incus - opnsense vm vlans

Hi All,

I have a question. I now have opnsense as a virtual machine inside incus. (bridged nic adapters) now i want create some vlans. is it enough to create vlans inside opensens and my switches to make it work? or do i need to do some configuration on incus to?

Should work just fine

Hi stephan,

Its not working for me.

I created a vlan on opensense (vm). Also same vlans on switches. (Dhcp on opensense for this vlan)

However i never get a ip from this vlan…

Am i missing something here

I have a virtual opensens machine, and a container. I want both of them in a vlan so i can create a guest network (wifi)

Do i need to create also vlan configuration on the incus host? and inside the container?

Can you show how the bridge was defined on the host system?

Linux can do VLAN filtering which could explain what you’re seeing, but that’s generally not done by default for regular bridges created by the usual distro-level tools.

Hi,

I created the bridges myself. This is not done by incus.

Example:

file bridge1.netdev

[NetDev]
Name=bridge1
Kind=bridge

file bridge1.network

[Match]
Name=bridge1

[Network]
DNS=192.168.2.4
Address=192.168.2.3/24

I have done nothing with vlans here.

Okay, time to play with tcpdump to see what’s going on then.

So yust for my info.

When i create a vlan inside opensense (vm)

My containers should be able to pick up this vlan? Or do i need more config for this to work?

VLAN tags shouldn’t be filtered in your environment, so you should see the tagged traffic in your container.

@stgraber

When i add a vlan to my host true systemd and add a vlan in my opensense i can ping al vlan ip adresses ij the hosts. Now i am configuring a vlan in my virtual unify controller. In the software. Do i need to add a vlan nic to the controller? Pr should ot work without it? What i am trying to do is setup a extra wifi ssid in a different vlan. However i see the extra wifi but i never get an ip adres in this vlan from my opense box. Dhcp is enable for this vlan.

Hi,

i resolved it. Al is working now.