Interface reassignments suggestions?

damianhl

Hello Team,

We have a new pfsense with 6 interfaces (2 onboard and 4 in a separated card), 4 of these are being used.
We have 3 WANs and a LAN interface with multiple VLANs on it
We need to move interfaces to arrange this, to leave 3 WANs together in the separated card and LAN in an onboard NIC
LAN: From igb3 to ixl1
WAN1: From ixl0 to igb3
WAN2: From igb0 to igb2
WAN3: It should be where it is now, in igb1

This server is in production, so it would be best to do this in the shortest amount of time and with little chance of failure
Any suggestion to accomplish this? It is better to use the reassignment function in the pfsense menu, or it is better to unassign an interface and configure the new interface from scratch?

Thanks in advance.
Regards,
Damián

stephenw10

If I was doing this I would definitely edit the config directly to make those changes and restore it. I have done that hundreds of times before though so I'm quite confident I could do it right first time!

If you use the gui you will need to first create all the VLANs on ixl1 so you can move the vlan interfaces from igb3.x to ixl1.x.
Then you will need to move the LAN first before you can move WAN1. You could easily lock yourself out at that point so I'd be sure to have some out-of-band access first.

Steve

damianhl

@stephenw10
Thanks Steve!

I will try by modifying the configuration file.
I just need to change the interface in the "Interfaces" section, right?
What happen if I am connected to pfsense from the LAN when I restore the backup?
I think I will lost connectivity until I rearrange the cables, but the restore process will continue although I lost connectivity?
How do I know when the restore is done?

Thanks in advance.
Regards,
Damián

stephenw10

You will also need to modify the <vlans> section to reflect the new parent interface.

I would want to have console access to do this. You will see when it has rebooted after the restore. You would also be able to roll-back from there should there be a problem.

You will obviously have to physically move the cable from igb3 to ixl1 before you can access the webgui again from any client on LAN.

Steve

damianhl

@stephenw10
Thanks a lot Steve!

michmoor

@stephenw10 If only there was some kind of video on youtube by netgate that can give an example on modifying the config.xml when porting it over to new hardware