Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    LAGG parent interface for VLAN

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    8 Posts 3 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      A Former User
      last edited by

      Currently, I have an unassigned em2 parent interface for my VLANs (em0 is WAN and em1 is LAN). I also have an unused 4th port in the nic.

      Question: If I create a LAGG interface (LAGG0), with an LACP protocol, utilizing em2 and em3, is there any benefit if I used LAGG0 as the parent interface for the vlans?

      1 Reply Last reply Reply Quote 0
      • NogBadTheBadN
        NogBadTheBad
        last edited by

        You have to use LAGG0 as the parent interface if you create a LAGG.

        Andy

        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

        1 Reply Last reply Reply Quote 0
        • ?
          A Former User
          last edited by

          I should provide more details.

          Currently, port 1 of the switch (US-16-150W) is used as the trunk port. It physically connects to em1 (LAN). EM2, the parent interface for the VLANs, is not physically connected (to the switch or any other device).

          If I create a LAGG with em2 and em3, will there be any benefit if those ports are not physically connected to the switch?

          NogBadTheBadN 1 Reply Last reply Reply Quote 0
          • NogBadTheBadN
            NogBadTheBad @A Former User
            last edited by NogBadTheBad

            @surfshack66 said in LAGG parent interface for VLAN:

            I should provide more details.

            Currently, port 1 of the switch (US-16-150W) is used as the trunk port. It physically connects to em1 (LAN). EM2, the parent interface for the VLANs, is not physically connected (to the switch or any other device).

            If I create a LAGG with em2 and em3, will there be any benefit if those ports are not physically connected to the switch?

            You'll need to create a LAGG on your US-16-150W as well, not exactly sure why you'd create a LAGG one end and trunk the other.

            IIRC you can't set up LACP without a minimum of two lan ports.

            Andy

            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

            1 Reply Last reply Reply Quote 0
            • ?
              A Former User
              last edited by

              You'll need to create a LAGG on your US-16-150W as well, not exactly sure why you'd create a LAGG one end and trunk the other.

              IIRC you can't set up LACP without a minimum of two lan ports.

              Two lan ports or two physical ports?

              I can create a LAGG on the switch using ports 2 and 3, for example, but still confused on the following:

              1. Port 2 and 3 on the switch need to physically connect to em2 and em3?
              2. Leave port 1 on the switch connected to em1 (lan)?

              Ultimately, I don't want to mix tagged and untagged traffic on the same interface.

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                You can set up LACP with just one port to get it going then add more ports.

                Usually adding ports is nearly hitless. Removing ports from the group is usually not. Many switches require you to tear down the lagg to remove a port.

                Yes, you can leave em1 connected to the switch as well. You would likely want that one a different VLAN on the switch than anything tagged to the lagg.

                You could easily move LAN to the lagg too. Say you had:

                em1 (LAN) untagged to the switch. The switch port is untagged VLAN 20.

                tag VLAN 20 on the switch lagg
                create VLAN 20 on the pfSense lagg0
                In Interfaces > Assignments change the assignment from em1 to VLAN 20 on lagg0

                Everything about LAN on pfSense now reaches VLAN 20 over the lagg instead and em1 is available for assignment to other things.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                ? 1 Reply Last reply Reply Quote 0
                • ?
                  A Former User @Derelict
                  last edited by

                  @derelict said in LAGG parent interface for VLAN:

                  You can set up LACP with just one port to get it going then add more ports.

                  Usually adding ports is nearly hitless. Removing ports from the group is usually not. Many switches require you to tear down the lagg to remove a port.

                  Yes, you can leave em1 connected to the switch as well. You would likely want that one a different VLAN on the switch than anything tagged to the lagg.

                  You could easily move LAN to the lagg too. Say you had:

                  em1 (LAN) untagged to the switch. The switch port is untagged VLAN 20.

                  tag VLAN 20 on the switch lagg
                  create VLAN 20 on the pfSense lagg0
                  In Interfaces > Assignments change the assignment from em1 to VLAN 20 on lagg0

                  Everything about LAN on pfSense now reaches VLAN 20 over the lagg instead and em1 is available for assignment to other things.

                  Thanks.

                  Can you explain the recommendation to change em1 (LAN) to a different VLAN on the switch?

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    It's not a recommendation. It's an example.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.