• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

How I can assign same vlan to multiple interfaces

Scheduled Pinned Locked Moved General pfSense Questions
19 Posts 6 Posters 2.7k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • N
    NogBadTheBad @KpuCko
    last edited by NogBadTheBad Oct 20, 2020, 9:55 AM Oct 20, 2020, 9:54 AM

    @KpuCko said in How I can assign same vlan to multiple interfaces:

    @NogBadTheBad said in How I can assign same vlan to multiple interfaces:

    vlan X on your LACP trunk wouldn't be the same vlan X on another router port.

    Hm why not? The vlan tag is what all are interested in, so using same vlan tag, will carry same data. Or I have misunderstanding.

    pfSense is a router not a switch that's why, same with a Cisco router if you created a subinterface on g0/0.101 and g0/1.101 it would tag the packets as vlan 101 but they are two independent interfaces.

    The packets may contain the same vlan tag but they are on a different broadcast domain.

    Andy

    1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

    K 1 Reply Last reply Oct 20, 2020, 10:39 AM Reply Quote 1
    • K
      KpuCko @NogBadTheBad
      last edited by Oct 20, 2020, 10:39 AM

      @NogBadTheBad said in How I can assign same vlan to multiple interfaces:

      @KpuCko said in How I can assign same vlan to multiple interfaces:

      @NogBadTheBad said in How I can assign same vlan to multiple interfaces:

      vlan X on your LACP trunk wouldn't be the same vlan X on another router port.

      Hm why not? The vlan tag is what all are interested in, so using same vlan tag, will carry same data. Or I have misunderstanding.

      pfSense is a router not a switch that's why, same with a Cisco router if you created a subinterface on g0/0.101 and g0/1.101 it would tag the packets as vlan 101 but they are two independent interfaces.

      The packets may contain the same vlan tag but they are on a different broadcast domain.

      Good. Many thanks for the clarification.
      I really needed to understand how this works.

      1 Reply Last reply Reply Quote 0
      • S
        stephenw10 Netgate Administrator @KpuCko
        last edited by Oct 20, 2020, 11:24 AM

        @KpuCko said in How I can assign same vlan to multiple interfaces:

        In the Cisco world is much easier,

        Yup, that's only true in the world of Cisco switches.

        Steve

        1 Reply Last reply Reply Quote 0
        • O
          OGsadpanda
          last edited by Oct 20, 2020, 7:56 PM

          I'm looking for basically the same thing.

          Best I found was simple bridge vs assigned bridge
          https://www.netgate.com/resources/videos/wireless-access-points-with-pfsense.html
          around 38min mark

          but I'm not having much luck with it

          1 Reply Last reply Reply Quote 0
          • S
            stephenw10 Netgate Administrator
            last edited by Oct 20, 2020, 11:22 PM

            Yeah, as discussed, you need to bridge them but don't if you have any other option!

            O 1 Reply Last reply Oct 20, 2020, 11:54 PM Reply Quote 0
            • O
              OGsadpanda @stephenw10
              last edited by Oct 20, 2020, 11:54 PM

              @stephenw10 from what I'm getting here, it's worse than not being ideal... Bridging is broken/not even an option

              1 Reply Last reply Reply Quote 0
              • S
                stephenw10 Netgate Administrator
                last edited by Oct 21, 2020, 1:09 AM

                Between VLANs it may be. I don't ever seen one in reality.

                1 Reply Last reply Reply Quote 0
                • K
                  KpuCko
                  last edited by Oct 21, 2020, 6:43 AM

                  Just shooting in the dark, but I'm wondering how hard can be to implement Open vSwitch in pfSense?

                  1 Reply Last reply Reply Quote 0
                  • M
                    mackjone Banned
                    last edited by stephenw10 Oct 21, 2020, 3:54 PM Oct 21, 2020, 7:15 AM

                    This post is deleted!
                    K 1 Reply Last reply Oct 21, 2020, 7:28 AM Reply Quote 1
                    • K
                      KpuCko @mackjone
                      last edited by Oct 21, 2020, 7:28 AM

                      @mackjone said in How I can assign same vlan to multiple interfaces:

                      You can't traverse the equivalent vlan over different switch ports, vlan X on your LACP trunk wouldn't be the equivalent vlan X on another switch port.

                      Sure I've got it, so how they do it?
                      For example:

                      In Mikrotik you can create a bridge, then create all the vlans you need to work with, and set it as follow:

                      vlans: 1,2,3 should be tagged on port 2,4,5
                      vlan: 4, should be untagged on port 1,3,5

                      We already discussed Cisco, and how they do it.
                      The question is what they use under the hood?

                      N 1 Reply Last reply Oct 21, 2020, 7:38 AM Reply Quote 0
                      • N
                        NogBadTheBad @KpuCko
                        last edited by Oct 21, 2020, 7:38 AM

                        @KpuCko

                        You can bridge in pfSense, I’d advise against it.

                        FYI Open vSwitch isn’t a pfSense thing.

                        https://docs.netgate.com/pfsense/en/latest/bridges/index.html

                        Andy

                        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                        1 Reply Last reply Reply Quote 0
                        • J
                          johnpoz LAYER 8 Global Moderator
                          last edited by johnpoz Oct 21, 2020, 12:26 PM Oct 21, 2020, 12:20 PM

                          @KpuCko said in How I can assign same vlan to multiple interfaces:

                          afterwords vlan support for bridge was invented and Mikrotik implemented

                          What specific mikrotik are you talking about? For example many of their devices have built in switch. Not discrete interfaces.

                          mik.png

                          I fail to understand why users continue to insist on forcing the square block into the round hole.. If you want a switch in your router, then get hardware that does that. There are few models of netgate boxes that have switches built in.

                          While bridging has its uses sure.. But your desire to use a interface port as a switch port via bridging is not one of them..

                          If you want a switch, use a switch.. If unused ports on your router are driving your OCD into overdrive. Use them in a lagg, or use them as intended, and actual interface for network(s) you want to route.

                          If you want all your ports to be used for all your vlans to quiet your OCD of seeing a port with nothing in it.. Then put them all in a lagg, and throw your vlans on the lagg..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          O 1 Reply Last reply Oct 21, 2020, 1:52 PM Reply Quote 0
                          • O
                            OGsadpanda @johnpoz
                            last edited by Oct 21, 2020, 1:52 PM

                            @johnpoz

                            again total n00b here but I thought the whole point of these intel dual/quad port NICs was that they ARE switches... Are they not?

                            (check out schematic layout):

                            82580 REFERENCE DESIGN

                            options list according to ifconfig:
                            RXCSUM, TXCSUM, VLAN_MTU, VLAN_HWTAGGING, JUMBO_MTU, VLAN_HWCSUM, TSO4, TSO6, LRO, VLAN_HWFILTER, VLAN_HWTSO, RXSUM_IPV6, TXSUM_IPV6

                            I'm not trying to be difficult... Just trying to learn.

                            1 Reply Last reply Reply Quote 0
                            • J
                              johnpoz LAYER 8 Global Moderator
                              last edited by johnpoz Oct 21, 2020, 2:09 PM Oct 21, 2020, 2:06 PM

                              @OGsadpanda said in How I can assign same vlan to multiple interfaces:

                              ntel dual/quad port NICs was that they ARE switches... Are they not?

                              No they are not switches... They are 2 or 4 discrete interfaces on the same card.. Not switches..

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • K
                                KpuCko
                                last edited by Oct 21, 2020, 2:20 PM

                                I know some of the models has a switch built in, but not all of them.

                                So some of the processing power is handled by the main processor, but the other one by the switch processor and so on. But nevermind.

                                My thoughts are I expect to be able to do switching and routing with one device, but it seems this doesn't apply here.

                                1 Reply Last reply Reply Quote 0
                                • J
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by johnpoz Oct 21, 2020, 2:35 PM Oct 21, 2020, 2:25 PM

                                  @KpuCko said in How I can assign same vlan to multiple interfaces:

                                  My thoughts are I expect to be able to do switching and routing with one device

                                  You can - just get a box that has switch ports in it, that does routing.. SG3100 has switch ports, the new sg2100 has switch ports. The 5100 for example does not..

                                  My sg4860 does not.. I didn't want switch ports on it, because switching should be done on your "switch" ;) Not your router..

                                  Keep in mind that with routers with switches, the uplink into the routing is going to be limited.. Look at the above block diagrams for example.. Notice the 1gbps and 2.5gbps uplinks from the switches..

                                  The proper tool for the job.. Do you go buy the hammer at the store, when you need to hammer in a nail? Or do you pound on nails with your screwdriver?

                                  Switches are not expensive these days... You could pick up a 8 port gig smart switch for like $40.. Or get a 16.. Or 24 if what you are after are switch ports. I would always suggest if you think you need a 5 port switch, get an 8 or 16.. That way when your needing another port - you don't start eyeing your router interfaces thinking you can use them as switch port ;)

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 2
                                  13 out of 19
                                  • First post
                                    13/19
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                    This community forum collects and processes your personal information.
                                    consent.not_received