TrueNAS Network (VLAN, Jails, Subnets...) best practises?

_Alchemist_

Dabbler
Joined
Jan 10, 2019
Messages
23
Hello all,

I am trying to improve my Home(-lab) Network design by switching from one flat 192.168.1.0/24 Network to multiple 172.16.X.0/24 Networks:
Networks: Management, LAN1 (me), LAN2 (Family), DMZ (Plex, Nextcloud, etc.), Guest...
Every Subnet has their own VLAN and is already configured on all Switches Routers and is working wihtput problems.

In TrueNAS, I created one VLAN Interface with a static IP adress for every VLAN.
All VLANs are created on a LACP Interface (2x Intel 1Gb).
I have 3 Jails (Nextcloud, Syncthing, Deluge) which are connected to the DMZ VLAN.
The Web Interface and SSH is only available on the Management VLAN.
NFS is only available on the Management VLAN (for Proxmox), SMB Works on all Interfaces.

My Problem now is that while all Jails, Services and so on are working perfectly fine, I am unable to reach the Internet with the TrueNAS Host.
I can only Ping the Gateway / other VMs or PCs on the Subnets of the VLANs, but can't reach any IPs behind a Gateway with TrueNAS.
I only found out because I was unable to download the TrueNAS 12.0U5 Update yesterday and don't know why nothing is routet anymore...
The only thing I can remember what could have something to do with it is that I had to play around with "bridge0" to make the Jails work.

Here is the output of ifconfig:
Code:
igb0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
    description: member of lagg0
    options=e507bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
    ether 0c:c4:7a:71:4b:20
    media: Ethernet autoselect (1000baseT <full-duplex>)
    status: active
    nd6 options=9<PERFORMNUD,IFDISABLED>
igb1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
    description: member of lagg0
    options=e507bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
    ether 0c:c4:7a:71:4b:20
    hwaddr 0c:c4:7a:71:4b:21
    media: Ethernet autoselect (1000baseT <full-duplex>)
    status: active
    nd6 options=9<PERFORMNUD,IFDISABLED>
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
    options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
    inet6 ::1 prefixlen 128
    inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
    inet 127.0.0.1 netmask 0xff000000
    groups: lo
    nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
pflog0: flags=0<> metric 0 mtu 33160
    groups: pflog
lagg0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
    description: lagg0
    options=e507bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
    ether 0c:c4:7a:71:4b:20
    laggproto lacp lagghash l2,l3,l4
    laggport: igb0 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>
    laggport: igb1 flags=1c<ACTIVE,COLLECTING,DISTRIBUTING>
    groups: lagg
    media: Ethernet autoselect
    status: active
    nd6 options=9<PERFORMNUD,IFDISABLED>
vlan1010: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
    description: MGNT
    options=600603<RXCSUM,TXCSUM,TSO6,LRO,RXCSUM_IPV6,TXCSUM_IPV6>
    ether 0c:c4:7a:71:4b:20
    inet 172.16.10.10 netmask 0xffffff00 broadcast 172.16.10.255
    groups: vlan
    vlan: 1010 vlanpcp: 0 parent interface: lagg0
    media: Ethernet autoselect
    status: active
    nd6 options=9<PERFORMNUD,IFDISABLED>
vlan1020: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
    description: LAN1
    options=600703<RXCSUM,TXCSUM,TSO4,TSO6,LRO,RXCSUM_IPV6,TXCSUM_IPV6>
    ether 0c:c4:7a:71:4b:20
    inet 172.16.20.10 netmask 0xffffff00 broadcast 172.16.20.255
    groups: vlan
    vlan: 1020 vlanpcp: 0 parent interface: lagg0
    media: Ethernet autoselect
    status: active
    nd6 options=9<PERFORMNUD,IFDISABLED>
vlan1040: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
    description: DMZ
    options=600703<RXCSUM,TXCSUM,TSO4,TSO6,LRO,RXCSUM_IPV6,TXCSUM_IPV6>
    ether 0c:c4:7a:71:4b:20
    inet 172.16.40.10 netmask 0xffffff00 broadcast 172.16.40.255
    groups: vlan
    vlan: 1040 vlanpcp: 0 parent interface: lagg0
    media: Ethernet autoselect
    status: active
    nd6 options=9<PERFORMNUD,IFDISABLED>
vlan1021: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
    description: LAN2
    options=600703<RXCSUM,TXCSUM,TSO4,TSO6,LRO,RXCSUM_IPV6,TXCSUM_IPV6>
    ether 0c:c4:7a:71:4b:20
    inet 172.16.21.10 netmask 0xffffff00 broadcast 172.16.21.255
    groups: vlan
    vlan: 1021 vlanpcp: 0 parent interface: lagg0
    media: Ethernet autoselect
    status: active
    nd6 options=9<PERFORMNUD,IFDISABLED>
vlan1041: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
    description: VMnet
    options=600703<RXCSUM,TXCSUM,TSO4,TSO6,LRO,RXCSUM_IPV6,TXCSUM_IPV6>
    ether 0c:c4:7a:71:4b:20
    inet 172.16.41.10 netmask 0xffffff00 broadcast 172.16.41.255
    groups: vlan
    vlan: 1041 vlanpcp: 0 parent interface: lagg0
    media: Ethernet autoselect
    status: active
    nd6 options=9<PERFORMNUD,IFDISABLED>
bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
    ether 02:b4:00:2e:a5:00
    id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
    maxage 20 holdcnt 6 proto stp-rstp maxaddr 2000 timeout 1200
    root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
    member: vlan1040 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
            ifmaxaddr 0 port 8 priority 128 path cost 10000
    groups: bridge
    nd6 options=1<PERFORMNUD>
If someone can tell my why TrueNAS can't connect to the Internet anymore I would be very thankful :)
 
Top