Disable Ports: 7100

[unififcf]

hello,

Is there a way to disable ports: Eth5 and Eth6 if not in use?

[rcoleman-netgate]

@unififcf Not in the sense that you could disable ADMIN mode but if you created a VLAN in the Switches menu and assigned those ports to that PVID you'd effectively do that.

Make sure to assign both 5 & 6 to the vlan untagged (and not add 9 or 10 tagged) and then you really just have made an ETH bridge/repeater but that's about all you can do to disable them.

Giving them individual vlans (that don't go to the pf side at all, so no tagging 9 or 10) will isolate the ports and stop traffic in its tracks.

[unififcf]

@rcoleman-netgate

OK.

since I am not very good here...
here is what I did:

I then enabled the interface with no ip address.

would this be correct?

[rcoleman-netgate]

@unififcf The switch configuration is not the interfaces... it's a completely different part of pfSense that is only for the hardware we sell that has built-in switches.
Further reading: https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100-1u/configuring-the-switch-ports.html

[unififcf]

@rcoleman-netgate

OK let me do some reading.

[stephenw10]

You could just force the media type to 'none' on the ports tab there for 5 and 6. That will prevent anything connecting to them.

Steve

[unififcf]

@stephenw10

Thanks... That's Great!