VLAN DHCP behind pfSense & 2 Unifi switches

Hey,
I have a pfSense router, which has several VLANs on it:

  • 1 for all connected network devices
  • 10 for wired devices
  • 20 for private wifi
  • 30 for entertainment devices (receiver, speakers, tv, etc)
    DHCP is set for each of these VLANs within pfSense providing a different network (for simplicity: 192.168.xx.1/24)

pfSense is connected to a Unifi US 16 PoE with several Unifi APs attached to it, set to use , as well as a Unifi Mini Flex (1st edition?).
Both switches and all APs are properly getting an IP from the DHCP on VLAN 1 (i,3 192.168.1.1/24).

The APs are configured to use VLAN 20 and all devices (i,e laptops, mobile phones) connected via WIFI are properly getting IP on VLAN 20 (i,e 192.168.20.1/24).

the “entertainment” devices, are wired to the Unifi Mini, which has the port set to VLAN 30.
None of the 3 attached devices are getting IP (i,e 192.168.30.1/24) from the DHCP on pfSense.

I’d appreciate the help setting it up properly.

M.

The only stupid idea I have is: do you have DHCP service enabled for VLAN 30? Is the admission criterion properly set? If it is restrictive, have you made a DHCP entry for each device on VLAN 30?

Could be the rules in pfsense or that the DHCP server is not enabled on that VLAN. I do have a tutorial on the topic

Thank @xerxes @LTS_Tom.

The DHCP on pfSense works (it is configured the same as for any other VLAN, just different IP range).
As an experiment, if I switch the designated VLAN from 30 to 20 (the one used by the AP) it also doesn’t work - mobile devices are able to get an IP, but wired devices to the 2nd switch are not.

Could it be somehow with the (2) nested (layer 2) switches, somehow?

Make sure you are trunking all VLAN’s between switches.

This is how the port is configured on the Mini:

This is the port configuration on the US16:

Identically, this is the port where where an AP is connected on the US 16:

That looks correct, maybe the Mini is not passing all the traffic.

How can I verify that?

By bypassing the mini.