Do pfSense VLAN interfaces pass traffic as tagged or untagged?
-
When configuring 802.1q VLANs on a switch you can then configure port(s) as untagged (accepts untagged inbound traffic and tags it, untags tagged outbound traffic) or tagged (expects inbound traffic to already be tagged and blocks any untagged traffic or traffic for other VLANs, passed outbound traffic with the tag intact) for that VLAN.
If I configure a VLAN on pfSense (Netgate 6100 in case it is relevant), and make an interface a member of that VLAN, then does that interface behave as an untagged or tagged port in terms of the above? Bizarrely I can't seem to find this in the docs...
-
@ChrisJenk said in Do pfSense VLAN interfaces pass traffic as tagged or untagged?:
and make an interface a member of that VLAN, then does that interface behave as an untagged or tagged port in terms of the above?
Tagged. As long as your appliance has no built-in switch.
-
@Bob-Dig Thanks! That is what I thought but I wanted to be sure. Surprised the docs don't seem to mention it.
-
@ChrisJenk said in Do pfSense VLAN interfaces pass traffic as tagged or untagged?:
Surprised the docs don't seem to mention it.
No it is not, you seem to have a knowledge gap there.
Also reading your question again regarding the "port", the port will carry all the tagged VLANs on it and the parent interface untagged if you will. But the parent interface has no and is no VLAN, it doesn't need to be.
-
@Bob-Dig said in Do pfSense VLAN interfaces pass traffic as tagged or untagged?:
@ChrisJenk said in Do pfSense VLAN interfaces pass traffic as tagged or untagged?:
Surprised the docs don't seem to mention it.
No it is not, you seem to have a knowledge gap there.
Sorry, not with you?
Also reading your question again regarding the "port", the port will carry all the tagged VLANs on it and the parent interface untagged if you will. But the parent interface has no and is no VLAN.
Yes, of course.
-
@ChrisJenk What he meant was of course it's tagged. The parent (or trunk port if you're more familiar) will carry the untagged traffic. Any vlan on it will have to be tagged.
