@rennit I guess? With VLANs AFAIK there are two ways to get the VLAN assigned. Either something assigns it (AP, switch) or the device's network config has a VLAN. With the latter, someone with knowledge can change, add, or remove the VLAN tag. If the switch allows the new-VLAN packet on that port then it gets passed on. Normally that's blocked by a managed switch, but generally unmanaged gigabit switches will pass packets without regard for VLAN.

Otherwise something would need to be removing the tag from the packets, in order to cross over to another VLAN.

@iversa None of the Netgate devices have Wireless built in and there is a wireless function in pfSense but it is not well supported by FreeBSD and you should look at any other dedicated Wireless AP option instead.

As a company we do not have a specific recommendation of any particular product.

I can't speak for Netgate directly on this, I wasn't involved in that decision.

Personally I prefer Intel because you're not paying for features that pfSense can't use. Both in money and power consumption/heat. In FreeNAS that's different. I imagine they might well use the TCP offloading the Chelsio NICs offer. Though I've never looked into it.

More cooling never hurts!

Steve

Ah, sorry if I misunderstood.

re: network alias, that can be one IP by using a /32 mask.

On a Windows laptop you can indeed just use file explorer (smb) to connect to other Windows hosts and view their file shares.
You may need to enter the remote IPs directly. If you are passing a dns search domain to clients and pSense as a DNS server they may be able to resolve LAN side hostnames if pfSense is a the DHCP server there.
The hosts you are connecting to need to allow smb connections from the OpenVPN tunnel subnet of course.

Anything you can do from the Android phone locally on WIFI should also work over OpenVPN.
I don't know what you are trying there. I'm not sure I've ever tried to access smb fileshares on a phone. There may well be an app for that.

Steve

Did you get this working?

You should configure the switch to pass those VLANs if you need to use one of the LAN ports. Or you could use the OPT port to link to your switch.
By default the internal switch is in port based vlan mode which will pass the tagged traffic to the internal port but it's better to set it to 802.1q mode and specify which LAN port to use.

Steve

Indeed, I've never tried it and only recently became aware you could connect directly like that. I could see how it might be possible though.

Steve

Hi Mate.

Thanks for your response.

I don't think so , the wan is set up statically and supplied by a data centre. The connection will be coming from another firewall VLAN.

When we plugged the older pfsense in with the same config no issues were occurring.

Just trying to look through the logs using shell due to the fact they only show a certain time in the GUI.

Thanks