VLAN with VPN

Follow

Herve

• January 14, 2026 17:48

I configured my firewalla Gold SE with 2 VLANs (sharing the same trunk), one VLAN has a direct access to Internet, the other one uses a VPN client (ProtonVPN with Wireguard). But unfortunately, after a while, I lose the Internet connection!

When it happens, the connection is gone for both VLANs, I can no longer ping the ISP box, but as soon as I disable the VPN in the corresponding VLAN, then I get Internet back. It happens on a Linux laptop, without any antivirus and I noticed the same issue with my phone.

I also tried different VPN servers to eliminate an instability issue without noticing any improvement, now, I am running out of idea and this limitation reduces the interest of using the firewalla box.

Is there anything specific using VLAN+VPN client to set up?

 

0

• 

  Firewalla

  • January 14, 2026 17:53

  If you are sending all VLANx traffic to a VPN, and when VPN is down, your device shouldn't have access to the internet. (since all traffic are directed towards the VPN side)

  The only fix is to make sure your VPN is avaliable. Have you tried VPN groups? https://help.firewalla.com/hc/en-us/articles/36227232863379-Firewalla-App-Release-1-64-Local-Flows-VPN-Group-for-Failover-and-Firewalla-AP7-Support#01JF977C8XSYXPQPTCD30FSSKQ

  0

  Comment actions Permalink
• 

  Herve

  • January 14, 2026 18:00

  Thank you for the advice, I will try VPN groups but since I already tried different VPN servers with the same result, it seems unlikely this is a VPN issue :-/

   

  0

  Comment actions Permalink
• 

  Herve

  • January 14, 2026 18:01

  And to complete my previous answer, I also mentioned that when I lose connection, it happens also on the VLAN with direct Internet connection, no VPN in that case.

  0

  Comment actions Permalink
• 

  FirewallaSupportDesk

  • January 15, 2026 00:37

  If all VLANs are having issue, I'd suggest you check LAN side first. When internet doesn't work, try to ping your switch IP and VLAN gateways to see if they are reachable. 

  0

  Comment actions Permalink

Please sign in to leave a comment.