<![CDATA[7100 External VLAN Trunk / Seperate Networks]]>I've been reading the documents and forums, but I can't figure out how to make the following work.

I want to have the WAN port on IX0.

I would like to take a trunk into the 7100 on IX1. That trunk would have multiple VLANs, let's say VLANS 10, 11, 12

The trunk for IX1 is coming from a CISCO 3750, and the interface is already set up as a trunk with those VLANs on it.

Each VLAN would have its own network and DHCP and be NATed to the WAN.

For example:

VLAN 10 would be 192.168.10.0/24
VLAN 11 would be 192.168.11.0/24
VLAN 13 would be 192.168.12.0/24

I want to manage the 7100 on one of the ETHs (I know how to do this, I got it working on some 1100s). just figured I'd include this to be thorough.

Thanks for any help!

]]>https://forum.netgate.com/topic/182840/7100-external-vlan-trunk-seperate-networksRSS for NodeFri, 11 Sep 2026 08:21:09 GMTThu, 14 Sep 2023 15:29:53 GMT60<![CDATA[Reply to 7100 External VLAN Trunk / Seperate Networks on Thu, 14 Sep 2023 18:40:25 GMT]]>Yup, exactly. Then assign them and add dhcp servers and firewall rule etc.

]]>https://forum.netgate.com/post/1125578https://forum.netgate.com/post/1125578Thu, 14 Sep 2023 18:40:25 GMT<![CDATA[Reply to 7100 External VLAN Trunk / Seperate Networks on Thu, 14 Sep 2023 18:37:06 GMT]]>@stephenw10

So just make the vlans and assign them to ix1?

]]>https://forum.netgate.com/post/1125576https://forum.netgate.com/post/1125576Thu, 14 Sep 2023 18:37:06 GMT<![CDATA[Reply to 7100 External VLAN Trunk / Seperate Networks on Thu, 14 Sep 2023 18:33:57 GMT]]>Still nope. 😉

The switch uses ix2 and ix3 so would not be involved.

]]>https://forum.netgate.com/post/1125575https://forum.netgate.com/post/1125575Thu, 14 Sep 2023 18:33:57 GMT<![CDATA[Reply to 7100 External VLAN Trunk / Seperate Networks on Thu, 14 Sep 2023 18:24:02 GMT]]>@prioret

Thanks for your help!

Reading the docs I got the impression that this would only work if I go to "port mode" as documented below. Are you saying I don't need to use port mode?

Port Mode
https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100/switch-overview.html

]]>https://forum.netgate.com/post/1125571https://forum.netgate.com/post/1125571Thu, 14 Sep 2023 18:24:02 GMT<![CDATA[Reply to 7100 External VLAN Trunk / Seperate Networks on Thu, 14 Sep 2023 18:19:26 GMT]]>ix0 and ix1 are not connected via the switch so you should not have to make any changes to the switch config.

]]>https://forum.netgate.com/post/1125569https://forum.netgate.com/post/1125569Thu, 14 Sep 2023 18:19:26 GMT<![CDATA[Reply to 7100 External VLAN Trunk / Seperate Networks on Thu, 14 Sep 2023 18:13:31 GMT]]>@stephenw10

Thats, reading the docs I got the impression that this would only work if I go to "port mode" as documented below. Are you saying I don't need to use port mode?

Port Mode
https://docs.netgate.com/pfsense/en/latest/solutions/xg-7100/switch-overview.html

]]>https://forum.netgate.com/post/1125565https://forum.netgate.com/post/1125565Thu, 14 Sep 2023 18:13:31 GMT<![CDATA[Reply to 7100 External VLAN Trunk / Seperate Networks on Thu, 14 Sep 2023 17:25:22 GMT]]>Yes, that should be relatively straight forward. Doing that doesn't involve the on-board switch at all so simplifies things.

What have you tried so far?

Steve

]]>https://forum.netgate.com/post/1125544https://forum.netgate.com/post/1125544Thu, 14 Sep 2023 17:25:22 GMT<![CDATA[Reply to 7100 External VLAN Trunk / Seperate Networks on Thu, 14 Sep 2023 15:50:43 GMT]]>Other than VLAN numbers mine is the same. Kind of weird.
I left the switched ports as LAN, this is my anti-lockout strategy.

Change the WAN interface to ix0. This can be done under interfaces.
When you create the other VLANs, you assign them to ix1.

When I am home I can add screen shots it you would like me to.

https://docs.netgate.com/pfsense/en/latest/vlan/configuration.html

]]>https://forum.netgate.com/post/1125523https://forum.netgate.com/post/1125523Thu, 14 Sep 2023 15:50:43 GMT