Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Single Nic install guide?

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    14 Posts 7 Posters 21.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pollardhimself
      last edited by

      Here's my 1st try - no luck so far..

      Switch port 2 set to vlan 2
      Switch port 3 set to vlan 3
      Switch port 4 set to trunk

      Pfsense
      em0 interface set to uassigned
      vlan 2 set as lan parent interface em0
      vlan 3 set as wan parent interface em0

      Do I have to define em0 as a trunk? If so how?

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        No.  A VLAN trunk port is essentially synonymous to a VLAN tagged port.  When you assign an interface to a pfSense VLAN interface, traffic for that interface will be tagged.

        Not sure what kind of switch you're using but you might need to specify the VLANs on the trunk port.

        Switch port 2 would go to your LAN.
        Switch port 3 would go to your DSL/Cable modem/WAN (preferably in bridge mode)
        Switch port 4 would go to pfSense

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          So quick question does this PC not have any slots at all to add a nic?  You can pick up a cheap nic for under $10 at any computer store, online, etc.  Even a somewhat decent nic, even dual port for 40$

          http://www.amazon.com/Intel-PWLA8492MT-PCI-X-Server-Adapter/dp/B00006HX1V

          While sure you can do it with vlans, if your not clear on the setup why not just pick up another nic.  Get that working - then if you want to play with hairpin vlan configurations

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • P
            pollardhimself
            last edited by

            @johnpoz:

            So quick question does this PC not have any slots at all to add a nic?  You can pick up a cheap nic for under $10 at any computer store, online, etc.  Even a somewhat decent nic, even dual port for 40$

            http://www.amazon.com/Intel-PWLA8492MT-PCI-X-Server-Adapter/dp/B00006HX1V

            While sure you can do it with vlans, if your not clear on the setup why not just pick up another nic.  Get that working - then if you want to play with hairpin vlan configurations

            Not really trying to drop anything in it its just and old pc im using just to mock up what my new network layouts going to be before I implement it. - Still learning so I dont wanna on the fly with my offices network.

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              So your new network is going to use hairpinned vlans?  I one nic?  That seems unlikely, I sure wouldn't suggest it ;)

              Get a nic, the amount of time you have spent looking for how to do a hairpinned vlan setup prob more than the $10, Forgo the morning coffee from starbucks to fund it ;)

              You haven't even told us what switch your trying to use..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • P
                pollardhimself
                last edited by

                @johnpoz:

                So your new network is going to use hairpinned vlans?  I one nic?  That seems unlikely, I sure wouldn't suggest it ;)

                Get a nic, the amount of time you have spent looking for how to do a hairpinned vlan setup prob more than the $10, Forgo the morning coffee from starbucks to fund it ;)

                You haven't even told us what switch your trying to use..

                No definitely not!! I have a true server dell pe1750 with 2 nic's at the office running pfsense.

                Just trying to mock some stuff up to pre-plan everything I thought I saw somewhere this single nic was possible so I figured I give it a go.

                Test Setup at home

                Old crap dell pc running pfsense single nic
                powerconnect 3448 switch

                Anywayz since its such a hassle ill spend the 10 bucks to add a second lan..

                http://www.amazon.com/TP-LINK-TG-3269-1000Mbps-Gigabit-Network/dp/B0034CSUZ8/ref=sr_1_1?s=electronics&ie=UTF8&qid=1417641774&sr=1-1&keywords=Lan+card

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Well looking at the manual for 3448, looks like page 299 goes over the vlan.. Via the gui you can do everything you need.

                  So the port on the switch that goes to em0 on pfsense would need to be Tagged for your vlans.  Trunk port vs access port - but looks like from the gui you can just pick your vlan, and then set ports to be untagged or tagged in that vlan.

                  So the ports that go to you lan would be untagged in your lan vlan, say vlan 20 for the number.  Port that goes to your wan, ie modem would be untagged say in vlan 30.  Now the port that connects pfsense would be trunked, or tagged with both vlan 20 and 30.

                  Then in pfsense you set your wan to vlan 30 and your lan to vlan 20.

                  Hope that helps - but in the long run, it is easier to just use a physical nic ;)

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Mocking stuff up and testing in a safe environment when you're not doing it against the clock is how you learn about this stuff. I wouldn't run a 'router on a stick' config unless I was forced to either but I'd certainly like to think I could do it if pressed. If you're not familiar with VLANs this is your opportunity.  :D

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Agreed, which is why I suggest after he gets the 2nd nic he can play with the vlan stuff.  You get pfsense up and running, then you know that works and can actually play with it.  Then you can play with putting vlans on your lan side, or running the hairpin setup, etc.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • D
                        daniev
                        last edited by

                        @pollardhimself:

                        Any one know where a good tutorial is on a single nic setup? Just setting up a test network with our old switch at home and the pc i'm using only has a single nic connection  :(

                        I don't have a tutorial , but it can be done. When you first setup pf you are presented with the option to create VLANs. Lets say you make VLAN 99 the WAN and VLAN 11 is LAN off of interface EM0. On your switch you need to remember ingress is what you assign to the PVID and egress is what you either tag or untag depending on what the port is connected to. So, the port used for WAN would be PVID 99, Untagged. The port used for LAN would be PVID 11, untagged. The port used for the trunk connected to pfSense would be PVID 11 -  then tag it VLAN 99 AND tag it for VLAN 11.

                        1 Reply Last reply Reply Quote 0
                        • H
                          hmishra
                          last edited by

                          @pollardhimself:

                          Any one know where a good tutorial is on a single nic setup? Just setting up a test network with our old switch at home and the pc i'm using only has a single nic connection  :(

                          Read the following thread. The OP in that case was myself  ;). Anyway, you will find the answer embedded among the replies in middle to last portion of the entire thread.

                          https://forum.pfsense.org/index.php?topic=28379.0

                          1 Reply Last reply Reply Quote 0
                          • S
                            santhony
                            last edited by

                            I've been running pfsense with a single NIC, using VLAN's, for several years.. Works great…. Just have to have a switch that supports VLAN's as well...

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              "Works great."

                              What would depend on what your looking to accomplish and what kind of performance you want out of it.. If you want to save couple of bucks on a nic and get lower performance then sure works great ;)  Hairpinning any sort of connection would never be my first choice to be sure.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.