Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Network planing

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 3 Posters 482 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      zappata
      last edited by

      Hi guys,

      I have already setup my cisco managed switch with 3 VLANs : LAN, WLAN and Guest.
      I also configured the VLANs and their IP range, DHCP Server and RULES but I'm not sure if it's right.

      my IP adresses are switch: 10.1.10.1, firewall: 10.1.10.10, LAN(PCs, Printer, VOIP): 10.1.30.1, WLAN: 10.1.70.1, Guest: 10.1.110.1

      my questions are:

      1. what should i do to connect my pfsense to my switch ? (just from modem to WAN and from LAN to my switch)

      2. should i give my PCs in VLAN: LAN static ip dresses or will dhcp do that for me ?

      3. should i allow wlan to access in lan if i want that people can print through my access point ?

      4. how can i set up my firewall to do the routing and not the modem ?

      best regards

      1 Reply Last reply Reply Quote 0
      • NollipfSenseN
        NollipfSense
        last edited by

        @zappata:

        Hi guys,

        I have already setup my cisco managed switch with 3 VLANs : LAN, WLAN and Guest.
        I also configured the VLANs and their IP range, DHCP Server and RULES but I'm not sure if it's right.

        my IP adresses are switch: 10.1.10.1, firewall: 10.1.10.10, LAN(PCs, Printer, VOIP): 10.1.30.1, WLAN: 10.1.70.1, Guest: 10.1.110.1

        my questions are:

        1. what should i do to connect my pfsense to my switch ? (just from modem to WAN and from LAN to my switch)

        2. should i give my PCs in VLAN: LAN static ip dresses or will dhcp do that for me ?

        3. should i allow wlan to access in lan if i want that people can print through my access point ?

        4. how can i set up my firewall to do the routing and not the modem ?

        best regards

        1. (just from modem to WAN and from LAN to my switch)…yes!
        2. (should i give my PCs in VLAN: LAN static ip dresses or will dhcp do that for me ?) Not sure what you're seek...DHCP will do it's job...it's really up to you...
        3. That's up you...
        4. When you do (1.), PFSense default firewall will take over...when you learn enough from reading or visiting here to learn what others have done, you can create your own firewall setting for your personal needs.

        READ up some more...it's a continuous learning : https://doc.pfsense.org/index.php/Main_Page

        You'll find the answers to all your questions there and; when you want to address tweak your system, we can then help you.

        pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
        pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

        1 Reply Last reply Reply Quote 0
        • ?
          Guest
          last edited by

          1. what should i do to connect my pfsense to my switch ? (just from modem to WAN and from LAN to my switch)

          Internet –- Modem --- WAN Port pfSense --- LAN port pfSense --- LAN Switch --- WLAN APs and/or other equipment
          such PCs or whatever.

          1. should i give my PCs in VLAN: LAN static ip dresses or will dhcp do that for me ?

          About how many device we will talk here? Up to 20 devices I would give all of them static IP addresses
          and let only for the WLAN and/or VPN service run the dhcp server then.

          1. should i allow wlan to access in lan if i want that people can print through my access point ?

          You will be able to st up a VLAN onl for the printer and let them then connect to only that VLAN too and
          not to the other VLANs with your private stuff inside. Work with radius and certificates for the private wifi
          and st up the captive portal with voucher system for all your guests.

          1. how can i set up my firewall to do the routing and not the modem ?

          A pure modem is not able to do a routing job. Only a router will be able to do so. You could
          try out to bridge that router into the so called bridged mode and let the pfSense then routing
          tha entire WAN and LAN (VLAN) part. (Would be my way do realize it) only if you own a Layer3
          switch in your network, then that switch will be better for the entire internal LAN and VLAN routing
          it is mostly able to route it with wire speed and this too over all VLANs.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.