Would this do well as a managed switch to create vlans from?
-
For your config no additional smart switches needed.
Modem > (wan)pfsense(lan) > old switch with all user |(opt1) V One server in DMZWait, so if I got another card in my router, that runs on subnet 10.10.10.0 and my main stuff runs on 192.168.1.0 they can't communicate? I thought they would be able to, and that's what the point of the vlan is. Atleast I think that's what you're saying?
Even if that would work theoritically, I want to use a manged switch, someone is buying me one for free ;D As long as I give them 24/7 remote access to a computer. (That is why I want it separated).
Also I don't want it dmz'd just want a few ports open.
-
All communcation between interfaces (subnets) will be managed by pfSense. If you wish you can allow everything between these interfaces, or conversly - disable any communication allowing everybody access to Internet. What is your point of separation?
-
All communcation between interfaces (subnets) will be managed by pfSense. If you wish you can allow everything between these interfaces, or conversly - disable any communication allowing everybody access to Internet. What is your point of separation?
That seems like it work amazingly well, except I want to make it unnescairly complicated since I can get a managed switch out of this 8)
So lets say I use a manged switch, can anyone recommend me a particular setup that would work with vlans and that switch(8 port one)?It would be nice getting some experience out of vlans as well.
I sort of had something like this in mind http://wan2.cheesyboofs.co.uk/home.htm
-
Hmm I might just screw the managed switch. So if I just have 3 nic cards in pfsense. One from wan, one for lan, and another for that isolated computer. I can set the lan and the isolated computer to not talk to each other right? (Different subnets). If so where would I do that?
-
I can set the lan and the isolated computer to not talk to each other right? (Different subnets). If so where would I do that?
May be I was not clear… yes you cen. You doby managing pfSense' rules.
-
I can set the lan and the isolated computer to not talk to each other right? (Different subnets). If so where would I do that?
May be I was not clear… yes you cen. You doby managing pfSense' rules.
Hot I get to save them a lot of by doing that :D with just 3 nic cards in pfsense instead of a managed switch.
So here is how it goes: 3 nic cards in pfsense, one of them is reserved for wan obviously, then my whole network goes in one nic card, so that's using 2 nic cards there. Then the third one is where the isolated computer gets directly connected to in pfsense.
How would I tell pfsense that I DO NOT, want them to communicate with each other? On the interfaces tab?
-
Read and learn before you start.
Switches do not do what pfSense does and vice versa.
Good luck! -
Read and learn before you start.
Switches do not do what pfSense does and vice versa.
Good luck!Read what though? Does that I have planned sound functional?
I know switches are layer 2 and routers are layer 3 on the OSI model, but what else is there to know :P ? -
I know switches are layer 2 and routers are layer 3 on the OSI model, but what else is there to know :P ?
Firewalls!. The pfSense firewall rules can be used to control communication between interfaces/subnets. The pfSense firewall capability is based on the BSD pf firewall facility so you could do some reading on that to better understand what can be done with pfSense.
-
Firewalls!. The pfSense firewall rules can be used to control communication between interfaces/subnets. The pfSense firewall capability is based on the BSD pf firewall facility so you could do some reading on that to better understand what can be done with pfSense.
Never used the freebsd firewalls before, I only am familiar with iptables. I will do reading :D