VPN and Vlan
-
Hello,
First I'm new to networking. My setup is my ISP's modem (bridged) -> pfsense (QOTOM Mini PC) -> Managed switch (TP-Link TL-SG108E) -> PCs, TV etc..I managed to setup as per instructions provided from PIA for VPN but failing to successful create firewall rules to send VPN to only a couple of PCs and rest have no VPN for gaming/work. Only have it set for whole network.
Also, I'm trying and unsuccessfully create vlans for basically the same purpose, have 2pcs on one network, work laptop, 1 in living room, TV and later on to a Wifi box.
I followed several guides on youtube and online and even though I learned alot in the progress (factory resets galore lol), I still can't seem to find that perfect guide. Meanwhile trying to keep it secure as I'm sure I have peeping toms.
Any advice or links to good guides would be appreciated. -
@joeseph As far as the vpn, just search this forum. Been discussed many, many times and you'll find all the answers you'll need.
Vlans, what exactly are you having a problem with? You didn't really give any details.
-
Vlans, what exactly are you having a problem with? You didn't really give any details.
Thank you for replying..
In the switch, on the 802.1Q, I'm selecting port 2 and 3 giving them VLAN ID: 10. Then link them together in the 802.1Q VLAN PVID tab. Untagged or tagged.
To my understanding I need to set my vlan to 10 in each PC. In windows NIC properties, advanced, Vlan ID value of 10. Correct? Do I need to reboot? like I said, can't find any step by step documentation.
-
@joeseph hey,
You do not need to set each client' s network configuration.
If you set (on your switch) ports 2 and 3 to belong to vlan 10, that should be enough.So configure all your vlans in pfsense, put them on your switch. Clients are put on your untagged switch access ports. Then use a trunk connection between pfsense and switch, here all vlans are tagged except vlan 1 (default).
Do not use vlan 1 as a prodductive vlan, it only carries neccessary packets for your network infrastructure but should not carry any productive data.
Port 1 (to pfsense as trunk) : vlan 1 untagged, others tagged
Port 2 (to client 1): vlan 10 untagged
Port 3 (to client in let's say vlan 30): vlan 30 untagged
Etc.
