Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SG-3100 LAGG

    Scheduled Pinned Locked Moved
    Official Netgate® Hardware
    4
    11
    2.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      What are you seeing?

      What are you trying to do?

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • R
        rebooteur
        last edited by

        Hi.

        I want to use the 1st and 2nd port of the switch as a single lagg interface.
        For the moment I use the 2nd port as a ''backup'' of the 1st one (simply by plugging them on the same lan, with STP capable switches).
        Is there a way to do real LAGG? (the screenshot in the mentioned thread confuses me because I don't have a LAGGs menu in the Interface-->Switch section (pfSense 2.4.4)) Or is it the only way to have a backup link on my lan side ?

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by Derelict

          What you do is set two ports to the same VLAN configuration then, on the Interfaces > Switches, Ports tab you can click on the LAGG on each port and set an unused ID, Such as 1 on the LAGG ports.

          Note that this is a Loadbalance type lagg, not LACP, etc.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • R
            rebooteur
            last edited by

            ok, thanks for your answer.
            It's what I tried, but when I do that my pings stop and never recover. Is it a normal behavior with a loadbalance lagg ? (I've only used LACP on xg-7100 for the moment, with two real physical iface)?
            Does this have something to do with the sg-3100 having only one mac address for the 4 switched ports ?

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              A layer 2 lagg should not care about MAC addresses.

              You have to be sure you're connecting it to a switch in a compatible configuration.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • M
                mikej47
                last edited by

                Is it possible to do a LACP LAGG on a SG-3100? I have seen conflicting information on the pfSense forums.

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  @mikej47 said in SG-3100 LAGG:

                  Is it possible to do a LACP LAGG on a SG-3100? I have seen conflicting information on the pfSense forums.

                  Using WAN + OPT1, Yes, using pfSense LAGG.

                  On the switch ports, No.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • M
                    mikej47
                    last edited by

                    Greetings,

                    Thank you for the clarification.

                    I have read through lots of documentation and still when I try to create a LAGG I don't have any parents interfaces to choose from. I have multiple VLANs created, dot1q enabled, etc. and simply can't get interfaces to show up in the parent interface section when trying to create a LAGG.

                    Can anyone assist?

                    Also, is the limitation of not being able to do LACP on the SG-3100 switch ports something that Netgate could add in the future with a software update?

                    Thank you,

                    M

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      You can only create a pfSense lagg on unassigned interfaces, so if mvneta0 and mvneta2 are assigned to interfaces under Interfaces > Assignments then those will have to be deleted first or at least moved to something else so you can retain all of the configuration. For instance you could create a couple of throwaway VLANs on mvneta1, temporarily assign WAN and OPT1 to those, thus freeing up mvneta[02] to make the lagg, then add VLANs to the lagg, etc and reassign WAN and OPT1 to the lagg interface/VLANs. Then delete the throwaway VLANs from mvneta1.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • GrimsonG
                        Grimson Banned
                        last edited by

                        Make sure you have working console access, in case you accidentally remove all network access to the WebUI.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post