Quad port Pfsense box - no switch VLAN setup help

[bingo600]

@orangehand

https://forum.netgate.com/post/944426

[Derelict]

Interfaces > Assignments - Add the VLAN to the physical interface
Interfaces > Assignments - Create the interface using the select list at the bottom
Edit the interface, enable it, number it
Put the desired firewall rules on the new interface
Enable DHCP servers, etc.
If you have (for some reason) enabled Manual Outbound NAT, add rules for the new interface's source addresses.

[orangehand]

@Derelict This is my interfaces list:

[Derelict]

OK?

You should see the VLAN in the Available network ports at the bottom like I described. Select it and hit add.

[orangehand]

@Derelict Nope!

[Derelict]

Then you haven't added the VLAN to the interface. Use the VLANs tab at the top of that page.

[orangehand]

@Derelict Not sure what else I can do beyond this!

[Derelict]

If you want to use VLAN 20 on the GuestNet interface you have already done that. Click on GuestNet, enable it, number it, add rules, DHCP servers, etc.

Whatever is connected to igb1 will need to be expecting traffic tagged with VLAN 20.

Tagged traffic will be on GuestNet. Untagged traffic will be on LAN.

[bingo600]

@Derelict

Dual topic ... See here
https://forum.netgate.com/topic/158698/port-tagging-on-apu2

I think it must be outbound nat , or something really weird.

Edit: He gets a Vlan20 (Guest ip) on his wifi guest.

He can (via Guest WiFi) ping Guest IF , he can ping devices on his Lan (def-gw works)
He cant ping 8.8.8.8 , or anything on INET

/Bingo

[pbshaan]

@Derelict - It worked as expected on the Macbook (must be config issue on my Linux laptop). Thanks.