Disable LAN interface?

[bhjitsense]

I used to just use a WAN/LAN setup on my 3100. I now have several VLANs. The original LAN interface (mvneta0) is no longer being used. But all the VLANs are on this mvneta0 port. I realized if I disable the LAN interface (interfaces > LAN > uncheck enable interface) then nothing works. I had to restore from a backup (autoconfig backup is nice btw!) If I no longer need this LAN interface, but need mvneta0 up, what can I do?

[JKnott]

I don't think you can have VLANs on a disabled interface. By disabling it, you block everything, including VLANs.

[netblues]

You can always remove ip on interface making it non existent on L3. Obviously, if you disable interface (just like removing cable), no vlans too.

[chris-1028]

@bhjitsense

A late reply, and I hope you got your issues resolved long ago.
…just wanted to share my recent discovery in case you didn’t already discover it yourself.

I got my 3100 a few days before your first post, and then spent three miserable months trying to bludgeon the 3100 into the shape I wanted.

8 days ago I re-configured the 3100 mvneta1 4-port switch (default-installs as “LAN”) to 802.1Q mode.
Et voila: 4 independent ports perfectly happy to talk 802.1Q and easy to configure as (Cisco-speak) Trunk or Access ports to carry your choice of VLAN(s) tagged/untagged. (I’m using two Trunk ports, two Access ports).

I made more progress with my config in 3 hours using 802.1Q-mode than I had made in 3 months with Switch-mode.

…in 802.1Q mode, make sure you have SSH & GUI access from somewhere not-LAN, then Interfaces/LAN: un-tick Enable and it is GONE!

The “sparsely” documented 802.1Q mode for 3100 mvneta1 is much better than truly wonderful!

Chris

[johnpoz]

Looks pretty documented to me
https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/switch-overview.html

https://www.youtube.com/watch?v=NgRy14rYhV8
Configuring Netgate Appliance Integrated Switches on pfSense 2.4.4

[chris-1028]

@johnpoz
I said "sparsely ", not "un-"

I found your first url, I did (+/-) as it said, it worked perfectly: so yes "documented" ...but you have to look hard to find that page.

Your second url: old folk like me don't take our "documentation" from youtube: printable words are good, they allow calm reflection and filing in our internal documentation.

802.1Q mode for 3100 mvneta1 is excellent! Wish I had found the "documentation" months ago.

Chris