Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense Layer 2 interface

    General pfSense Questions
    3
    6
    4.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      el02154
      last edited by

      Hello,

      is there any way to use some ports of pfsense as layer 2 interfaces? I want to throw a switch in my deployment and replace it by using some ports of pfsense as layer 2 ports?Is this feasible?

      Best Regards.

      1 Reply Last reply Reply Quote 0
      • P
        podilarius
        last edited by

        not sure exactly what you are asking, but if you setup a bridge and add interfaces to it, it is essentially a layer 2 with filtering. For a true switch, set an allow rule with no states.

        1 Reply Last reply Reply Quote 0
        • E
          el02154
          last edited by

          Maybe the attached image can help about what I wish to do. If you have any idea if this is feasible I will appreciate it.

          pfsense.jpg
          pfsense.jpg_thumb

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Yes you can do that with bridging as Podilarius suggested. The result will be much lower performance than a real switch however, even after moving bridge filtering. If that's not a problem and you have spare NICs you can probably save a few Watts.  ;)

            See: http://forum.pfsense.org/index.php/topic,48947.msg269592.html#msg269592

            Steve

            1 Reply Last reply Reply Quote 0
            • E
              el02154
              last edited by

              @stephenw10:

              Yes you can do that with bridging as Podilarius suggested. The result will be much lower performance than a real switch however, even after moving bridge filtering. If that's not a problem and you have spare NICs you can probably save a few Watts.  ;)

              See: http://forum.pfsense.org/index.php/topic,48947.msg269592.html#msg269592

              Steve

              Thank you for your answer. Why the performance will be much lower? And a last question, I will bridge the layer 2 interfaces that I will create with the layer 3 interface or on their own?

              1 Reply Last reply Reply Quote 0
              • P
                podilarius
                last edited by

                Switches are designed to move packets. They are simple things really. pfsense will have processing to do and adds a bit a time for that. So, what happens is that you will get less than line speed. Generally that is not a problem except in highly utilized networks.

                Use this as a comparison.

                http://forum.pfsense.org/index.php/topic,53185.0.html

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.