Can we control two LAN interfaces independent of each other?
-
I've installed pfsense in an old NUC and works perfectly. The only issue is , the NUC had two cable ports (1 used for WAN and other for LAN) and its working perfectly. I wanted to extend the LAN to have one or two more by adding a USB to LAN adapter and then attach to a wifi emitter. The diagram below explains and the one in red colour is what I wanted to put as NEW
- Is this possible and and if yes how do do? Create a new VLAN etc?
- Can I then control the finer settings of this new LAN output from pfsense? For instance wanted to install ad-free pfBlockerNG or piHole just for the new LAN?
-
@getk You can add a usb interface - not really recommended. But if the usb comes up (pfsense/freebsd) has driver for it. Then sure you can add another network - wouldn't really be a "vlan" It would be another network, just like lan untagged on whatever interface comes up for your usb nic.
USB nics and freebsd, therefore pfsense not really a great track record. You might be better off just using a vlan capable switch and setting up a vlan on your lan interface..
But sure once you bring up another network or vlan - you could connect your AP to this new network/vlan
-
@johnpoz said in Can we control two LAN interfaces independent of each other?:
You might be better off just using a vlan capable switch a
thank you for the reply.
Do you recommend a vlan capable switch? -
@getk what a specific make or model? What sort of budget are you thinking? How many ports do you want/need.. It would be possible to just get a little vlan capable switch, or you could replace your whole switch if it has lots of ports, etc.
Example - that could be done with just a 5 port vlan switch... Where everything on the downstream switch is on some vlan X, and your AP is on vlan Y.
5 or 8 port gig vlan capable switches can be had for under $40 for sure..
-
@johnpoz
thank you again. In the above design, would we be able to configure/block-ads etc for per vlan? i meant can we control finer details per vlan? -
@getk yes once you create the new vlan/network you could allow/block communication between these networks at pfsense.
You could block vlan X from going to xyz on the internet, while allowing vlan Y, etc.
You would be able to have as much control as you want on where either of these networks could go, within the limits of what pfsense can do of course.
-
@johnpoz thank you and much obliged
