Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Sub-networks?

    Scheduled Pinned Locked Moved General pfSense Questions
    22 Posts 6 Posters 5.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      you can pick up a smart gig switch for 100 bucks gs108tv2 for example does vlans

      Or I doubt your internet is gig.  So just put managed switch that does vlan between pfsense and your other switches..

      so you would be on 1 switch with your hardware, your roomate would be on their switch with their hardware and your managed switch would be what handles the vlans connected to pfsense.  This way your downstream switches don't need to understand vlans.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • I
        ieatfish
        last edited by

        @johnpoz:

        you can pick up a smart gig switch for 100 bucks gs108tv2 for example does vlans

        Or I doubt your internet is gig.  So just put managed switch that does vlan between pfsense and your other switches..

        so you would be on 1 switch with your hardware, your roomate would be on their switch with their hardware and your managed switch would be what handles the vlans connected to pfsense.  This way your downstream switches don't need to understand vlans.

        That looks to be the best option. Thanks guys.

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          The Netgear GS105E is even cheaper and does VLANs. The drawback is it requires a Windows only program to configure it. If you don't need to reconfigure it often, which you probably don't, it should do the job.

          Steve

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            This windows program…  Might it run under WINE?

            1 Reply Last reply Reply Quote 0
            • I
              ieatfish
              last edited by

              @stephenw10:

              The Netgear GS105E is even cheaper and does VLANs. The drawback is it requires a Windows only program to configure it. If you don't need to reconfigure it often, which you probably don't, it should do the job.

              Steve

              Awesome, thanks!

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                @kejianshi:

                Might it run under WINE?

                Don't know, never tried. I'm sure someone has though.  ;)

                Steve

                Edit: There's this: https://code.google.com/p/gsconf/

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  I keep ONE windows VM up for myself for crap just like this…  Begrudgingly.
                  I have found that as long as I keep the VM screen locked and no one ever uses it or its web browsers except me and nothing ever gets installed on it ever and its firewalled from most everything, that is reliably rivals my Linux/BSD installs.  ;D

                  1 Reply Last reply Reply Quote 0
                  • I
                    ieatfish
                    last edited by

                    I ordered the Netgear GS108E. Then I'll put my wireless router and dumb switch on a couple ports and use a second wireless router on another port for my roommate. With separate VLANs, we shouldn't have to worry about our devices interacting at all. If down the road we need to share something between us, I can make a third VLAN and have it viewable by our two.

                    Does that sound right?

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      @stephenw10:

                      @kejianshi:

                      Might it run under WINE?

                      Edit: There's this: https://code.google.com/p/gsconf/

                      I think its nice that he does TRY not to brick our hardware.  Thats a comforting statement. 
                      (I know he means well with the statement)

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        I usually try not to brick stuff but that hasn't stopped it happening in the past!  ;)
                        I try to see it as a learning opportunity.  ;D

                        The fact that he has written the code sort of implies it doesn't run under WINE. I couldn't find any references to anyone else doing it either. Like you I always have a Windows box or two lying around for such occasions. I think this laptop can dual boot into Vista though it's such a long time since I tried I'm not sure now.
                        It's inconvenient having to use a Windows only config program but on a desktop switch like that how often are you really going to be changing it?

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          I'd buy one of the ones that use straight HTML for config first, but if someone were to stumble onto one of these cheap, it would be nice.  Plus, me and you are in the minority.  Most people are hooked on things like artificial sweetners, high fructose corn syrup, Ritalin and Windows.  All things that at first brush seem to work for you but actually work against you.
                          This would work fine for most people.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            @ieatfish:

                            If down the road we need to share something between us, I can make a third VLAN and have it viewable by our two.

                            You could certainly make a third VLAN interface in pfSense and equivalent port on the switch. Then add firewall rules to allow both of you to access that new subnet. You could has a NAS device in that subnet to share files for example.

                            Depending on how you use your various devices you may want to have additional segregation. I have my wireless access point on a separate interface here at home for example. That way I can happily allow internet access to guests without worrying about what they may be carrying in their laptops. With that switch you could potentially have 7 isolated subnets.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • I
                              ieatfish
                              last edited by

                              @stephenw10:

                              @ieatfish:

                              If down the road we need to share something between us, I can make a third VLAN and have it viewable by our two.

                              You could certainly make a third VLAN interface in pfSense and equivalent port on the switch. Then add firewall rules to allow both of you to access that new subnet. You could has a NAS device in that subnet to share files for example.

                              Depending on how you use your various devices you may want to have additional segregation. I have my wireless access point on a separate interface here at home for example. That way I can happily allow internet access to guests without worrying about what they may be carrying in their laptops. With that switch you could potentially have 7 isolated subnets.

                              Steve

                              Awesome, this will definitely open my setup up for lots of options. Thanks.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.