Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Setting up VLANs

    Scheduled Pinned Locked Moved General pfSense Questions
    36 Posts 4 Posters 12.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      keith_opswat
      last edited by

      You only need one trunk per switch.. A trunk just carries information from multiple VLAN's accross it.

      I work with Cisco gear.. So I don't know exactly on yours.

      But for Cisco…

      int e0/0
      switchport mode trunk
      switchport mode trunk encap dot1q

      And that port is now trunking whatever VLAN's you have created on it... You can get a lot more advanced than that. But you basically set the port into trunk mode... give it an encap mode. And you have a basic trunk.

      If you only have 1 vlan there's nothing to trunk...
      So you need a minimum of 2 for a trunk to have a point.

      1 Reply Last reply Reply Quote 0
      • M
        Metu69salemi
        last edited by

        @Keith: I didn't mention that vlan1 should be used, I only mentioned that default vlan might be "must to use"-list. As Procurves allow to change default vlan to someone else..

        1 Reply Last reply Reply Quote 0
        • S
          Sleeps
          last edited by

          @Perry:

          Might help http://pfsense.site88.net/mysetup/switch/HP1800-8G_vlan_setup.htm

          Much appreciated. Looks simple and it was nearly the same sample (different switch) as in the book.

          Sleeps

          1 Reply Last reply Reply Quote 0
          • S
            Sleeps
            last edited by

            Created VLAN 10 and 20 (No trunk ports).  Using port 8 on the switch to connect to the Firebox but not getting an IP address via DHCP.  I have looked through the config and can't see anything wrong on the Firebox.   Not sure what I'm doing wrong.

            Sleeps

            1 Reply Last reply Reply Quote 0
            • M
              Metu69salemi
              last edited by

              That port 8 what is connected to pfsense needs to be trunk

              trunk means that it allows multiple vlans go in it, those cannot mixup, so thats why you have atleast OSI Layer 3 device to connect two vlans, in this case it's Pfsense.

              IN SHORT: switch port 8 trunk and both vlans in it

              1 Reply Last reply Reply Quote 0
              • S
                Sleeps
                last edited by

                I understand now will give it a go, thanks

                Sleeps

                1 Reply Last reply Reply Quote 0
                • S
                  Sleeps
                  last edited by

                  Just tried creating the trunks and the following msg is appearing.

                  Trunk member must Be in same Vlan and egress must be same each other. Error exists in entry 1.

                  Trunk 1 = 1234 Trunk 2 = 5678)  Vlan 10 = port 2 and 3 Vlan 20 = 4 and 5

                  Checked the ports.

                  I'm totally lost now.

                  Sleeps

                  1 Reply Last reply Reply Quote 0
                  • M
                    Metu69salemi
                    last edited by

                    Is it possible to have only one trunk?

                    but try this: switchport#1: trunk with vlan 10, vlan 20
                    switchport#2: access vlan 10
                    switchport#3: access vlan 20

                    Just don't setup more, test if it works, maybe your switch needs 2 trunk ports, 1st and 2nd half of interfaces

                    1 Reply Last reply Reply Quote 0
                    • S
                      Sleeps
                      last edited by

                      Natu69salemi

                      Can only create 2 trunk ports and it's configured through Gui.  Can I start from scratch and send you
                      screenshots.  Will pay for your time.  Let me know.

                      Sleeps

                      1 Reply Last reply Reply Quote 0
                      • M
                        Metu69salemi
                        last edited by

                        Send me images, but if you're willing to pay something to someone, plz consider to donate to this project

                        1 Reply Last reply Reply Quote 0
                        • S
                          Sleeps
                          last edited by

                          Thanks for agreeing to do this. I will definitely donate some money to this project.

                          Sleeps

                          1 Reply Last reply Reply Quote 0
                          • M
                            Metu69salemi
                            last edited by

                            Replied

                            1 Reply Last reply Reply Quote 0
                            • S
                              Sleeps
                              last edited by

                              Metu69salemi - Thanks for helping out with this.  I found some information about trunk groups.  http://www.brocade.com/support/Product_Manuals/ServerIron_SwitchRouterGuide/Trunking.4.2.html#78207 and it explains how to setup 2 or more trunk groups (Which you can do with the TL-SL2109 switch (Minimum 2 ports per Trunk)).  The 2 ports in a trunk group make a single logical link.  Therefore, all the ports in a trunk group must be connected to the same device at the other end.

                              My question is I have a Firebox with WAN, LAN and 4 OPT ports. (existing network connected to WAN, LAN and OPT1)  I have created 2 VLANS 10 and 20 on OPT2 on the Firebox.  Would it be possible to connect both cables/Trunks to OPT2 and OPT3 and bind OPT3 to OPT2 so that I will be able to use the VLANS

                              If this isn't possible what is the way forward?

                              Thanks in advance

                              Sleeps

                              1 Reply Last reply Reply Quote 0
                              • M
                                Metu69salemi
                                last edited by

                                @Sleeps

                                Only thing what bothers me is that I don't understand why trunk needs to be in group and why it requires to use more than one switchport.

                                I know what is the benefit of several trunking ports but i don't understand why this switch requires it(as an example procurve's dont require it but those support it), so how to add aironet access point with single interface to this switch.

                                edit: check lacp if you like to use several ports on pfsense

                                1 Reply Last reply Reply Quote 0
                                • K
                                  keith_opswat
                                  last edited by

                                  @Metu69salemi:

                                  @Keith: I didn't mention that vlan1 should be used, I only mentioned that default vlan might be "must to use"-list. As Procurves allow to change default vlan to someone else..

                                  Gotcha… Like I said I've mainly worked with Cisco so I wasn't aware that you couldn't change it.

                                  And like said above definitely donate money to PFSense. I just bought the Definitive Guide written by some of the PFSense creators & got it in 1.5 days off Amazon. It's a great way to donate some money because you get something extremely useful in return. When the official book for 2.0 comes out I'll also buy that. But the book for 1.2.3 is still extremely useful & well written

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    Sleeps
                                    last edited by

                                    I thought I was buying an easy to configure switch.  It does say "Enterprise Networking Solution" on the box.  I've now lost a port and I'm surprised that a feature like that is available on an eight port switch.

                                    Sleeps

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      keith_opswat
                                      last edited by

                                      What do you mean you lost a port? Lost it to what?

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        Sleeps
                                        last edited by

                                        @keith_opswat:

                                        What do you mean you lost a port? Lost it to what?

                                        I lost the port to a trunk port as this switch only allows a minimum of 2 trunks rather than 1 like the other smart switches.

                                        Sleeps

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          Sleeps
                                          last edited by

                                          Took a long time but finally got there and now its configured and working.  (Switch config was very confusing) especially the trunking section,which didn't need to be configured. Had to include an extra VLAN to act as the Trunk port.

                                          Metu69salemi thanks for all your help and time.  Will now be making a donation to the project.

                                          Sleeps

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            Metu69salemi
                                            last edited by

                                            np, clad to hear that you got it.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.