Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfsense+mikrotik switch=vlan on windows

    Scheduled Pinned Locked Moved General pfSense Questions
    23 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      learn @stephenw10
      last edited by

      @stephenw10 I didn't understand tag and untagged thing can you please tell how and explain please!!

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        In order to connect a host device to a VLAN you would usually connect to the host to a switch that is configured with an access port for that VLAN.
        That means the port the host is connected to must be an untagged member of that VLAN in the switch.
        And that the port pfSense is connected to must be a tagged member of the VLAN so packets can pass tagged to pfSense.

        So for example something like this:
        Screenshot from 2022-08-26 14-54-28.png
        In this setup pfSense is connected to port 25 and is configured with a VLAN 101 interface.
        A host can connect to port 23 and will be on VLAN 101.

        Steve

        L 1 Reply Last reply Reply Quote 0
        • L
          learn @stephenw10
          last edited by

          @stephenw10 can you please help me to find this in the mikrotik switches because this what i was searching for .
          thank you so much for your patience and help .

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Unfortunately I have zero experience with Mikrotik switches so I probably can't help you there. 😉 However I imagine there are numerous videos on youtube etc walking through VLAN config on Mikrotik.

            Steve

            L 1 Reply Last reply Reply Quote 1
            • L
              learn @stephenw10
              last edited by

              @stephenw10 thank you friend

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                For reference, which Mikrotik switch and OS are you using?

                L 1 Reply Last reply Reply Quote 0
                • L
                  learn @stephenw10
                  last edited by

                  @stephenw10 i am using two switches of mikrotik CRS305-1G-4S+ and CRS305-1G-8S+ the OS is windows

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Sorry I meant which OS type/version on the switch(es).

                    L 1 Reply Last reply Reply Quote 1
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Seems like it's this:
                      https://help.mikrotik.com/docs/pages/viewpage.action?pageId=76415036#CRS3xxandCSS32624G2S+seriesManual-VLANandVLANs

                      1 Reply Last reply Reply Quote 1
                      • L
                        learn @stephenw10
                        last edited by

                        @stephenw10 I was on RouterOS and I switched to SWOS

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          akuma1x @learn
                          last edited by akuma1x

                          @learn I don't see it mentioned here yet, but the IP address space you chose is out of spec. The 172.16.X.X address space is as follows:

                          172.16.0.0/12 IP addresses: 172.16.0.0 – 172.31.255.255

                          You used 172.168.100.X, and that address space looks to belong to Microsoft maybe, somewhere else in the world. First, fix that problem, bring your IP address space within the proper range.

                          L 1 Reply Last reply Reply Quote 1
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Yup, that's true ^.

                            I would not expect it to prevent the VLAN config working though.

                            The VLAN setup in SwOS looks more complex that many switches but I'm sure once you're familiar with it it's easy enough.

                            Steve

                            L 1 Reply Last reply Reply Quote 1
                            • L
                              learn @akuma1x
                              last edited by

                              @akuma1x thank you Ill try that and see if works

                              1 Reply Last reply Reply Quote 0
                              • L
                                learn @stephenw10
                                last edited by

                                @stephenw10 yes mikrotik switches are very complex and difficult I did the vlans on edge switch and ubiqiti and went good .
                                this mikrotik switchess made lost me

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.