2 different hardware ports onto the same vlan
-
Re: Same VLAN on two ports on pfsense
I have a VLAN set on hardware port from the pfsense device. Unused for now. What if I need to get onto the same VLAN a device that comes from a different hardware port? In this case, that hardware port is actually a LAG of 2 hardware ports connected to a switch. How would I need to enable/setup the interfaces?
Is this wrong? Then why? What am I not getting right about vlans?
-
@hannibalking If you created a lag, then you would put the vlan on the lag interface.
-
@johnpoz, I got it now. I don't really know why it took me this long to comprehend that. thank you!
-
@johnpoz said in 2 different hardware ports onto the same vlan:
If you created a lag, then you would put the vlan on the lag interface.
Actually how about enabling the interfaces? Do I set the IP configuration type for the VLAN that uses the hardware port, and then for the other one that uses the LAG I just enable it with the default configuration? It seems if I do it this way, the devices connected to that VLAN through the LAG don't get connected to the network unless I bridge the VLAN from the LAG with the one from the hardware port on the pfsense hardware
-
@hannibalking if these are different interfaces pfSense handles them as different networks. bridging combines networks. Typically with VLANs a smart switch would handle directing VLAN packets from various ports and they arrive at the router on the expected port.
-
@steveits said in 2 different hardware ports onto the same vlan:
@hannibalking if these are different interfaces pfSense handles them as different networks. bridging combines networks. Typically with VLANs a smart switch would handle directing VLAN packets from various ports and they arrive at the router on the expected port.
So the best way is to leave the empty hardware port on the pfsense alone and set it up on the switch instead. Right?
-
@hannibalking yes I’d say so. Otherwise bridging because pfSense or any router assumes interfaces are unique networks. So without bridging they’d need to be two different subnets but could talk if allowed by firewall rules.
-
@hannibalking not sure what your asking.. You created a lag, yes the interface should be enabled.. But NO you wouldn't put any config on the interface.. It is now part of the lag.. The lag is the interface..
