Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Multiple VLANS across physical Interfaces

    Firewalling
    3
    3
    3339
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      B3Technology last edited by

      I am trying to setup a pfSense box that has 4 physical Interfaces (em0 - em3). The first Interface (em0) goes to the Internet. The second (em1) and third (em2) Interfaces go to separate managed switches. Each of these switches has various VLANs configured but for the ease of describing my problem lets limit it to 3 VLANs (VLAN2, VLAN3 and VLAN4). We are using the pfSense firewall for all DHCP services.

      NOTE: We will also be adding a third switch on the forth (em3) interface that will only need access to the other 2 switches via VLAN3.

      What I need to do is have all three VLANs traverse to the Internet and have VLAN3 traverse between switches via the firewall. I also would like PC1 and PC2 to be able to pull from the same DHCP server.

      I was able to creatre the VLANs for VLAN2 and VLAN4 and route these to the Internet. I am having issues correctly setting up VLAN3 between the 2 different interfaces and still use the same DHCP service and Firewall RULES. It seems that I have to handle these under separate Interfaces.

      –---              -----
              | PC1 |            | PC2 |
              /-----/            /-----/
              -----              -----
                |                  |
          -----------          -----------
        | Switch #1 |        | Switch #2 |
          -----------          -----------
        VLan    \                /  VLan
        2 & 3    \              /    3 & 4
                  \ em0    em1/
                    ------------
                  | pfSense FW |
                    ------------
                        |
                      -------
                    | Modem |
                      -------

      Any thoughts would be helpful.

      1 Reply Last reply Reply Quote 0
      • jahonix
        jahonix last edited by

        You can have each VLAN on one physical interface/trunk only in pfSense.
        Put a managed core-switch in front of your pfSense and distribute the VLANs on dedicated trunks to each access-switch.

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          Yeah that is not how you would do that..

          Use a switch to distribute the vlans to access switches.  The connection to pfsense can be a trunk with all the vlans on it, or from the distribution switch you can have uplinks for every vlan to physical or mix and match depending on what your intervlan traffic will be - you wouldn't want intervlan traffic having to hairpin, etc.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

          1 Reply Last reply Reply Quote 0
          • First post
            Last post