Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLAN tag on more than 1 interface

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    22 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @ncm-com
      last edited by

      @ncm-com said in VLAN tag on more than 1 interface:

      So I think I have to create a LAGG in order to sent traffic through both interfaces? any idea how to do this? I guess I have to create the firewall rules as I can't add the existing VPAN in this case?

      Perhaps you'd better describe what exactly you want to do.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        @JKnott said in VLAN tag on more than 1 interface:

        just did that. I created VLAN 3 on my WAN interface, which I already had on my LAN interface.

        That is not the same vlan... that is the same vlan ID.. Not the same vlan.. And even if pfsense doesn't stop you from doing that.. Its a horrible IDEA..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @johnpoz
          last edited by

          @johnpoz

          Yes, I am aware of that and know there is no data connection between them, unless set up in routing. However, the way you wrote what you said left the question open. Regardless, we still need to find out what he wants to do. Earlier on, I got the impression he wanted VLANs on more that one interface, which is certainly possible, even with the same VLAN ID.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • N
            ncm-com @johnpoz
            last edited by

            @johnpoz
            3ce5ef90-9b22-4798-9e9d-14f2cb80b0f3-image.png

            Please see the above scenario,

            I can use LAN1 interface goes to VLAN switch and LAN2 interface to the non-manage switch so the bandwidth will use both interfaces?

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @ncm-com
              last edited by

              @ncm-com

              So, you want the unmanaged switch to be on VLAN 20? If so, then you'd have to create a bridge between LAN 1 & LAN 2. However, the better way would be to just configure a port for VLAN 20 on the managed switch, which would then connect to the unmanaged one.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by johnpoz

                @ncm-com said in VLAN tag on more than 1 interface:

                so the bandwidth will use both interfaces?

                But your pfsense is virtual... You handle the physical interfaces in esxi... let it do the tagging.. All pfsense needs to know is that its the "lan" and on vnic x

                vmx is internal and would be 10ge interface to pfsense..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                JKnottJ N 2 Replies Last reply Reply Quote 0
                • JKnottJ
                  JKnott @johnpoz
                  last edited by

                  @johnpoz said in VLAN tag on more than 1 interface:

                  But your pfsense is virtual...

                  Forgot about that.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  1 Reply Last reply Reply Quote 0
                  • N
                    ncm-com @johnpoz
                    last edited by

                    @johnpoz
                    I actually connect them to physical adaptors from the esxi
                    92463f65-aeef-4c05-8b5a-91c725dbfa4f-image.png
                    they are gigabit interfaces

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by johnpoz

                      Also what is the bandwidth getting you? Is where this traffic going more than 1 gig? Your wan, multiple other vlans?

                      Traffic between devices on the same network traffic doesn't even flow through pfsense... So why do you think you need more bandwidth and more than 1 connection into pfsense to leverage that more bandwidth?

                      Connect both of the physical nics to the same vswitch/port group..

                      This makes ZERO sense to setup..

                      makesnosense.jpg

                      What exactly do you think that accomplishes???

                      Connect your physical nics to same vswitch, and then break out your different vlans via port groups.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      N 1 Reply Last reply Reply Quote 0
                      • N
                        ncm-com @johnpoz
                        last edited by

                        @johnpoz
                        the pfsense is a VM on the host, and I'm trying to send traffic out to different physical adaptors let say vmnic 2 and vmnic 3

                        Connect both of the physical nics to the same vswitch/port group..
                        I tried the above but no luck

                        I got it, I could untag VLAN 20 using the Vswitch connected to the vmnic2,

                        but let say if the traffic between VLANs reaching 500mbps it will create a bottleneck on one interface that would not be the case if the traffic using two ports?

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          @ncm-com said in VLAN tag on more than 1 interface:

                          and I'm trying to send traffic out to different physical adaptors let say vmnic 2 and vmnic 3

                          For what purpose? The connect vmnic2 and 3 to the same vswitch and setup whatever load balancing or load sharing you want in esxi..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @ncm-com
                            last edited by johnpoz

                            @ncm-com said in VLAN tag on more than 1 interface:

                            but let say if the traffic between VLANs reaching 500mbps it will create a bottleneck on one interface that would not be the case if the traffic using two ports?

                            And how does putting 2 interfaces in the same vlan solve that problem?

                            but let say if the traffic between VLANs reaching 500mbps it will create a bottleneck on one interface that would not be the case if the traffic using two ports?

                            Use different uplinks for your difrerent vlans.. vmnic 2 vlan X, vmnic 3 vlan Y... Putting vlan X on both vmnic 2 and 3 does what?? Put all your vmnics into same vswitch.. Use your port groups to break out the vlans. setup lagg of these 4 nics to your switch from esxi

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.