Disable LAN interface?

bhjitsense

I used to just use a WAN/LAN setup on my 3100. I now have several VLANs. The original LAN interface (mvneta0) is no longer being used. But all the VLANs are on this mvneta0 port. I realized if I disable the LAN interface (interfaces > LAN > uncheck enable interface) then nothing works. I had to restore from a backup (autoconfig backup is nice btw!) If I no longer need this LAN interface, but need mvneta0 up, what can I do?

JKnott

I don't think you can have VLANs on a disabled interface. By disabling it, you block everything, including VLANs.

netblues

You can always remove ip on interface making it non existent on L3. Obviously, if you disable interface (just like removing cable), no vlans too.

chris-1028

@bhjitsense

A late reply, and I hope you got your issues resolved long ago.
…just wanted to share my recent discovery in case you didn’t already discover it yourself.

I got my 3100 a few days before your first post, and then spent three miserable months trying to bludgeon the 3100 into the shape I wanted.

8 days ago I re-configured the 3100 mvneta1 4-port switch (default-installs as “LAN”) to 802.1Q mode.
Et voila: 4 independent ports perfectly happy to talk 802.1Q and easy to configure as (Cisco-speak) Trunk or Access ports to carry your choice of VLAN(s) tagged/untagged. (I’m using two Trunk ports, two Access ports).

I made more progress with my config in 3 hours using 802.1Q-mode than I had made in 3 months with Switch-mode.

…in 802.1Q mode, make sure you have SSH & GUI access from somewhere not-LAN, then Interfaces/LAN: un-tick Enable and it is GONE!

The “sparsely” documented 802.1Q mode for 3100 mvneta1 is much better than truly wonderful!

Chris

johnpoz

Looks pretty documented to me
https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/switch-overview.html

https://www.youtube.com/watch?v=NgRy14rYhV8
Configuring Netgate Appliance Integrated Switches on pfSense 2.4.4

chris-1028

@johnpoz
I said "sparsely ", not "un-"

I found your first url, I did (+/-) as it said, it worked perfectly: so yes "documented" ...but you have to look hard to find that page.

Your second url: old folk like me don't take our "documentation" from youtube: printable words are good, they allow calm reflection and filing in our internal documentation.

802.1Q mode for 3100 mvneta1 is excellent! Wish I had found the "documentation" months ago.

Chris