Default LAN - is it possible to tag as x VLAN?
-
Just trying to figure out - is it possible to tag the default LAN as a specific VLAN say VLAN 10, tag LAN as VLAN 10 or any VLAN number besides 1 or 0?
Or do you need to create a VLAN interface to accomplish that? If you do create an interface for a default VLAN - we'll say 10 for argument sake, can you delete the LAN interface and use VLAN10?
-
@d2freak82 What are you trying to accomplish? Are you trying to connect a switch that's currently using a VLAN to a pfSense LAN port and be able to access the LAN from the switch's access ports?
-
I don't want my LAN on the default VLAN?
-
@d2freak82 said in Default LAN - is it possible to tag as x VLAN?:
I don't want my LAN on the default VLAN?
Very reasonable. So the canonical approach to do this is to begin by setting up your switch so that it doesn't use the default VLAN for anything. Next, on the switch, dedicate however many VLANs you need to partition your LAN appropriately. Then also on the switch, allocate access ports for them as needed. Then add a trunk port that carries all the VLANs that need routing through pfSense (e.g., internet access).
Now in pfSense, create the corresponding trunk interface, create the VLANs, create an interface for each VLAN (allocating IP addresses appropriately to avoid collisions), and assign the interfaces to their corresponding VLANs. You might need some firewall rules on the interfaces, too. Also check NAT if any of your VLANs need to access anything (e.g., internet) via the WAN.
-
@bpsdtzpw While I do appreciate the advice, and the response. I am well aware of how to configure my switches, they're setup already.
What I'm trying to figure out is can I tag the LAN interface on the router? And if not can I create a VLAN as a default and disable the LAN interface? -
@d2freak82 create a vlan on pfsense, and then set your lan interface to use the vlan on parent interface that is your lan.
-
@johnpoz said in Default LAN - is it possible to tag as x VLAN?:
@d2freak82 create a vlan on pfsense, and then set your lan interface to use the vlan on parent interface that is your lan.
Thank you! That's exactly what I was after
