What does the switch care about rules in pfsense?? Switch is just layer 2, it sees packets come in 1 interface and based upon the dest mac, or broadcast sends it out other interfaces.. Are you going to use this switch as a router in layer 3 mode??
So there is few different ways you match up your vlans you create in your switch to the vlans you create on pfsense so that your packets go where you want them to go.. So your sending in all your vlans into pfsense via only 1 interface em1 (lan)… So you need to create your vlans in pfsense to match up with the vlan ID, which you have as 10,20,30..
So these vlans are all in addition to your normal LAN? Or do you also have LAN native on the interface and then these 3 vlans are on top of that? So for example maybe that is just going to use the default vlan 1 on your switch??
So you really have
lan (em1) (vlan 1) but not tagged this is just native vlan
VLAN10Design (em1 vlan id 10)
VLAN20Storage (em1 vlan id 20)
VLAN30Science (em1 vlan id 30)
So for example here is my vlans.. They all sit on my em2 interface, and their tags match up with the tags in my switch.. But there is also a network that runs native without any tagging that is em2 (wlan) pfsense doesn't care about this tag. But in my switch this vlan has tag of 20..
So you can tag all your traffic to pfsense and let it determine what traffic is in what network. Or you can use native without any tagging and just create a new layer 2 network in your switch and pfsense doesn't know what this tag is. Or you can do a combination where there is a untagged network on your parent interface, but there are also vlans on top of that with tags..
[image: vlans.png]
[image: vlans.png_thumb]