How to make multiplie VLANs on one ETH port?
-
Hi, I managed to have a LAN and a VLAN on a Netgate XG-7100 when using 2 cables on ETH2 and ETH8, to seperate the traffic.
But is it possible to have the LAN and VLAN on only the ETH2?
So I have:
53cd8577-15df-4b3f-a7f0-770d59d01a58-image.png
091aaaef-4ca3-4ef0-a9e6-8e49297b000d-image.png
And that way I can get it to work. But this is in a test setup. In the live environment I can do this to the first switch. But to the second switch I only have 1 cable.... On other Netgate it is easier to do, but on the XG-7100 it seems I cannot find the solution to put the 2 vlans on one ETH port?
Anyone can help or tell me it just is not possible?
-
You make them the same was as the first. Just use a different VLAN number when you create it.
-
@nick-loenders You certainly have to tag them. You may only have one untagged VLAN on a switch port.
If it is an inter-switch link (vlan trunk) I would just set them all to tagged on each side. The pfSense interface will not change, just the tagged status on the switch ports.
-
-
What's to show? If you did it once, you can do it again. You do the exact same thing except pick a different VLAN number.
You go into Interfaces / VLANs and add a VLAN, filling in the appropriate details
Then you to into Interfaces / Interface Assignments to add it and assign a name.You will then have two VLANs, one with each number. It sounds like you have to brush up on VLAN frames. When you create a VLAN, all you do is add a 4 byte tag, which identifies which VLAN a frame belongs to. So, with the different VLANs, the ID within a frame will be different.
-
@nick-loenders Connect port 8 to a switch port on the switch that also tags VLANs 70, 80, and 90. Note that those VLANs are tagged (8t) not untagged (8)
-
@derelict OK, so the VLAN I changed and in my example I also added the vlan80
But how do I make the LAN, vlan70 and vlan80 connect on ETH2 ?
-
@nick-loenders said in How to make multiplie VLANs on one ETH port?:
@derelict OK, so the VLAN I changed and in my example I also added the vlan80
But how do I make the LAN, vlan70 and vlan80 connect on ETH2 ?You would need to add VLANs 70 and 80 as tagged on port 2 just like port 8. (VLAN groups 3 and 4 should be 2t,8t,9t,10t)
Whatever is connected to port 2 would then be on VLAN 4091 for untagged traffic, and VLANs 70 or 80 if tagged for them.
-
-
@derelict I mean, I think this is working, but I'm looking for confirmation :)
-
@nick-loenders Do a packet capture on the interface and look at the packet tags ?
