Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    XG-7100: Break Out ETH1 for WAN

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    xg-7100vlans xg-7100lagg
    4 Posts 2 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pfnewb2016
      last edited by

      I would like to configure:

      • ETH1 for WAN1

      • ETH2 for WAN3

      • VLAN1 untagged on Eth3-8

      • VLAN 10,20,30 tagged on ETH3-8

      Does this require Port VLAN mode because this is creating 3 switches?

      If 802.1q mode, then does the Interface-->Switch-->VLANs setup look like this:

      VLAN Grp: 0
      VLAN ID: 1
      Members: "empty"
      Descript: Default System VLAN

      VLAN Grp 2
      VLANID: 4091
      Members: 3,4,5,6,7,8,9t,10t
      Description: LAN

      VLAN Grp 3
      VLAN ID: 4081
      Members: 1,9t,10t
      Description: ETH1-WAN1

      VLAN Grp 4
      VLAN ID: 4082
      Members: 2,9t,10t
      Description: ETH2-WAN2

      Then Add the VLANs under interfaces and assign them:

      WAN1-->VLAN4081 on LAGG0
      WAN2-->VLAN4082 on LAGG0
      LAN --> VLAN4091 on LAGG0
      VLAN10-->VLAN4091 on LAGG0
      VLAN20-->VLAN4091 on LAGG0

      Thank you for your help.

      P 1 Reply Last reply Reply Quote 0
      • P
        pfnewb2016 @pfnewb2016
        last edited by

        Figured this out. Connect to any of port ETH5-8 to make these changes. May want to set a fw rule to allow https to WAN as a failsafe while making the changes.

        I want to have a 2nd port available for each of WAN1 & WAN2 for testing or a failed port without having to reconfigure the entire unit in production.

        ETH1 & ETH2: WAN1 (not a LAGG, connect 1 port at a time)
        WAN1: Internal VLAN 4090
        Ports: 1,2,9t,10t

        ETH3 & ETH4: WAN2 (not a LAGG, connect 1 port at a time)
        WAN2: Internal VLAN 4089
        Ports: 3,4,9t,10t

        ETH5-8: LAN
        LAN Internal VLAN 4091
        Ports: 5,6,7,8,9t,10t

        Assign VLAN 4089 to LAGG0, leave the other 2 VLANs on LAGG0.

        pfsense_xg7100_Switch_VLANs.jpg

        pfsense_xg7100_Switch_Ports.jpg

        1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott
          last edited by

          @pfnewb2016 said in XG-7100: Break Out ETH1 for WAN:

          VLAN1 untagged on Eth3-8

          How are you planning on doing that? I assume by eth3-8 you mean VLAN 8 on eth 3. When you do that, you need a tag for the VLAN. Or is that a typo and you meant VLAN1 untagged on Eth3?

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          P 1 Reply Last reply Reply Quote 1
          • P
            pfnewb2016 @JKnott
            last edited by pfnewb2016

            @jknott

            Yes typo, thank you.
            S/b: VLAN 1 untagged on ETH5-8.

            I have since added all the VLANs I need and VLAN1 works untagged and the rest are tagged and working on ETH5-8.

            pfsense_xg7100_Switch_VLANs.jpg

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.