<![CDATA[Bridge firewall, bridge two vlans]]>I have two untagged vlan interfaces on my switch, a VLAN 50 port which is connected to the WAN port of pfsense firewall and a VLAN5 port which is connected to the LAN port of the pfsense firewall.  Traffic flow is out the VLAN50 and back in on VLAN5 where my LAN hosts live on VLAN 5. 
The switch is a Cisco 3550. 
I see pings working, mostly but with high packet loss.  I believe the switch is getting confused becasue it sees the firewall WAN and LAN MAC's on the same port due to the bridge.
If I put the WAN port on a separate switch it works fine. Any ideas how to make this work?
I want to use only one switch and simply loop out one port into the firewall and then back in, obviously with the ports on different VLAN's to prevent a switch loop. 
Incidently, I don't see and loops in the switch log or spanning tree complaints in this configuration.

]]>https://forum.netgate.com/topic/13079/bridge-firewall-bridge-two-vlansRSS for NodeFri, 16 Oct 2026 08:59:55 GMTWed, 28 Jan 2009 13:54:30 GMT60<![CDATA[Reply to Bridge firewall, bridge two vlans on Thu, 29 Jan 2009 10:06:11 GMT]]>You may be able to get some pointers from my setup - Obviously I have a procurve switch and not a Cisco but the principles are the same,

http://www.cheesyboofs.co.uk/home.htm

procurve.jpg
procurve.jpg_thumb

]]>https://forum.netgate.com/post/189494https://forum.netgate.com/post/189494Thu, 29 Jan 2009 10:06:11 GMT<![CDATA[Reply to Bridge firewall, bridge two vlans on Thu, 29 Jan 2009 10:11:19 GMT]]>Dont use untagged traffic.
If you want multiple VLANs to the same switch, just create multiple VLANs on the same card and assign these VLANs.
DONT assign the real card itself.

This thread might help you:
http://forum.pfsense.org/index.php/topic,11193.msg62084.html#msg62084
(Screenshots from a setup with a Netgear switch)

]]>https://forum.netgate.com/post/189404https://forum.netgate.com/post/189404Thu, 29 Jan 2009 10:11:19 GMT