Network planing



  • Hi guys,

    I have already setup my cisco managed switch with 3 VLANs : LAN, WLAN and Guest.
    I also configured the VLANs and their IP range, DHCP Server and RULES but I'm not sure if it's right.

    my IP adresses are switch: 10.1.10.1, firewall: 10.1.10.10, LAN(PCs, Printer, VOIP): 10.1.30.1, WLAN: 10.1.70.1, Guest: 10.1.110.1

    my questions are:

    1. what should i do to connect my pfsense to my switch ? (just from modem to WAN and from LAN to my switch)

    2. should i give my PCs in VLAN: LAN static ip dresses or will dhcp do that for me ?

    3. should i allow wlan to access in lan if i want that people can print through my access point ?

    4. how can i set up my firewall to do the routing and not the modem ?

    best regards



  • @zappata:

    Hi guys,

    I have already setup my cisco managed switch with 3 VLANs : LAN, WLAN and Guest.
    I also configured the VLANs and their IP range, DHCP Server and RULES but I'm not sure if it's right.

    my IP adresses are switch: 10.1.10.1, firewall: 10.1.10.10, LAN(PCs, Printer, VOIP): 10.1.30.1, WLAN: 10.1.70.1, Guest: 10.1.110.1

    my questions are:

    1. what should i do to connect my pfsense to my switch ? (just from modem to WAN and from LAN to my switch)

    2. should i give my PCs in VLAN: LAN static ip dresses or will dhcp do that for me ?

    3. should i allow wlan to access in lan if i want that people can print through my access point ?

    4. how can i set up my firewall to do the routing and not the modem ?

    best regards

    1. (just from modem to WAN and from LAN to my switch)…yes!
    2. (should i give my PCs in VLAN: LAN static ip dresses or will dhcp do that for me ?) Not sure what you're seek...DHCP will do it's job...it's really up to you...
    3. That's up you...
    4. When you do (1.), PFSense default firewall will take over...when you learn enough from reading or visiting here to learn what others have done, you can create your own firewall setting for your personal needs.

    READ up some more...it's a continuous learning : https://doc.pfsense.org/index.php/Main_Page

    You'll find the answers to all your questions there and; when you want to address tweak your system, we can then help you.



    1. what should i do to connect my pfsense to my switch ? (just from modem to WAN and from LAN to my switch)

    Internet –- Modem --- WAN Port pfSense --- LAN port pfSense --- LAN Switch --- WLAN APs and/or other equipment
    such PCs or whatever.

    1. should i give my PCs in VLAN: LAN static ip dresses or will dhcp do that for me ?

    About how many device we will talk here? Up to 20 devices I would give all of them static IP addresses
    and let only for the WLAN and/or VPN service run the dhcp server then.

    1. should i allow wlan to access in lan if i want that people can print through my access point ?

    You will be able to st up a VLAN onl for the printer and let them then connect to only that VLAN too and
    not to the other VLANs with your private stuff inside. Work with radius and certificates for the private wifi
    and st up the captive portal with voucher system for all your guests.

    1. how can i set up my firewall to do the routing and not the modem ?

    A pure modem is not able to do a routing job. Only a router will be able to do so. You could
    try out to bridge that router into the so called bridged mode and let the pfSense then routing
    tha entire WAN and LAN (VLAN) part. (Would be my way do realize it) only if you own a Layer3
    switch in your network, then that switch will be better for the entire internal LAN and VLAN routing
    it is mostly able to route it with wire speed and this too over all VLANs.


Log in to reply