Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    I need help...

    Scheduled Pinned Locked Moved General pfSense Questions
    20 Posts 4 Posters 803 Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jhmc93J Offline
      jhmc93
      last edited by

      Hello,
      I have a question can my WAN section on my pfsense act as a vlan server, but I also need help with some other network problems I have, I'd like to ask if someone can give me a hand with a network diagram I want to implement into my pfsense setup

      SteveITSS 1 Reply Last reply Reply Quote 0
      • SteveITSS Offline
        SteveITS Rebel Alliance @jhmc93
        last edited by

        @jhmc93 Define VLAN server? VPN?

        To upgrade, select your branch in System/Update/Update Settings. When upgrading, allow 10-15 minutes to reboot, or more depending on packages, CPU, and/or disk speed.
        Only install packages for your version of pfSense.
        Upvote ๐Ÿ‘ helpful posts!

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ Online
          johnpoz LAYER 8 Global Moderator @SteveITS
          last edited by johnpoz

          @SteveITS yeah 35+ years in the biz, never heard of a vlan server ;) I think you got it with typo for vpn server..

          @jhmc93 what do you need help with for diagram? Some software recommendations - are you looking for something to auto do it for you? I still just use my copy of visio from 2007.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

          1 Reply Last reply Reply Quote 0
          • stephenw10S Offline
            stephenw10 Netgate Administrator
            last edited by

            Inter-VLAN router maybe?

            jhmc93J 1 Reply Last reply Reply Quote 0
            • jhmc93J Offline
              jhmc93 @stephenw10
              last edited by

              @stephenw10 @johnpoz @SteveITS apologies... I wanna run pfsense WAN side as a vlan tagged server but I was wondering if the WAN ethernet cable will provide a VLAN tag to my managed switch but still have the wan provide access to the net, also I want to use that WAN tagged port talk to that switch and then connect the untagged section to my powerline adapter that goes up to my room and the vlan talk to my other switch upstairs which is also a VLAN capable switch. Hope this make sense...
              If not I'll provide a drawn diagram

              johnpozJ SteveITSS 2 Replies Last reply Reply Quote 0
              • johnpozJ Online
                johnpoz LAYER 8 Global Moderator @jhmc93
                last edited by

                @jhmc93 you can for sure use vlan tags on your "wan" interface on pfsense - and also run other vlans via that physical connection.

                A drawing never a bad idea.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

                jhmc93J 1 Reply Last reply Reply Quote 0
                • jhmc93J Offline
                  jhmc93 @johnpoz
                  last edited by

                  @johnpoz Untitled.jpg

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • SteveITSS Offline
                    SteveITS Rebel Alliance @jhmc93
                    last edited by

                    @jhmc93 It would be just another interface. Though since it's in WAN there's not really anything preventing access to that VLAN is there? I suppose the ISP would need to pass tagged packets, which may be unlikely. And hopefully the switches and adapter would not be accessible from the Internet.

                    Can you not just connect the powerline adapter to another port on the pfSense, though? Why WAN?

                    To upgrade, select your branch in System/Update/Update Settings. When upgrading, allow 10-15 minutes to reboot, or more depending on packages, CPU, and/or disk speed.
                    Only install packages for your version of pfSense.
                    Upvote ๐Ÿ‘ helpful posts!

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ Online
                      johnpoz LAYER 8 Global Moderator @jhmc93
                      last edited by johnpoz

                      @jhmc93 does the wan or internet come into the managed switch that is connected to pfsense I take it.

                      That wouldn't have to be tagged coming into that switch.. But sure you could tag it into pfsense wan interface.

                      Curious why you are untagged into that switch from the powerline adapter.. It shouldn't strip tags so you could run tagged from your bottom vlan capable switch into your top one via the powerline adapter.. This would allow you to run multiple vlans between them..

                      In your current drawing that bottom vlan switch would really only be able to see 1 network, all in the same vlan.

                      Also I take it pfsense only has that 1 interface? or you are out of ports on the top vlan switch? Or sure you could run multiple connections into pfsense vs into just your wan interface.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

                      jhmc93J 1 Reply Last reply Reply Quote 0
                      • jhmc93J Offline
                        jhmc93 @johnpoz
                        last edited by

                        @johnpoz So the internet is in my room and my pfsense box is downstairs under the stairs... as it runs my media centre and other things, so the powerline goes from the internet upstairs into the powerline downstairs and then into my pfsense box

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • johnpozJ Online
                          johnpoz LAYER 8 Global Moderator @jhmc93
                          last edited by

                          @jhmc93 so the internet comes into the bottom switch? But your running untagged. So you want to put everything behind pfsense? If not what is pfsense going to do.. If you have stuff on the internet network and stuff also behind pfsense you have an asymmetrical mess..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

                          jhmc93J 1 Reply Last reply Reply Quote 0
                          • jhmc93J Offline
                            jhmc93 @johnpoz
                            last edited by

                            @johnpoz yes on that picture internet goes into bottom left switch, I thought If I could VLAN I could separate some networks but ye

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ Online
                              johnpoz LAYER 8 Global Moderator @jhmc93
                              last edited by johnpoz

                              @jhmc93 you could do something like this

                              vlans.jpg

                              But with powerline adapters like that is going to be horrible performance most likely - what is is your internet speed? What speed do you see over your powerline adapters? Normally they are doing great if you can get 100mbps out of them.

                              You could then have things on your lan (behind pfsense) in either location.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

                              jhmc93J 1 Reply Last reply Reply Quote 0
                              • jhmc93J Offline
                                jhmc93 @johnpoz
                                last edited by

                                @johnpoz my net speed is 1GBPS and my poweline adapter are 1300mbps adapters

                                johnpozJ 1 Reply Last reply Reply Quote 0
                                • johnpozJ Online
                                  johnpoz LAYER 8 Global Moderator @jhmc93
                                  last edited by johnpoz

                                  @jhmc93 said in I need help...:

                                  my poweline adapter are 1300mbps adapters

                                  Which they are in no way going to actually provide ;) you would be lucky to see 600 over that to be honest.. And I would bet a large sum of money not even that.... Those are marketing numbers they use, like the PHY on wifi, you don't actually see those ;)

                                  Put a device on one side of the powerline, and another on the other side and do a iperf test, or copy a file.. What do you get??

                                  Can you run an actual wire, or maybe moca adapters (do you have coax that runs between the 2 locations) - while powerline do have use, and can work - they are never going to see the number on the box that is for damn sure.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

                                  jhmc93J 1 Reply Last reply Reply Quote 0
                                  • jhmc93J Offline
                                    jhmc93 @johnpoz
                                    last edited by

                                    @johnpoz they run at around 300mbps

                                    johnpozJ 1 Reply Last reply Reply Quote 0
                                    • johnpozJ Online
                                      johnpoz LAYER 8 Global Moderator @jhmc93
                                      last edited by

                                      @jhmc93 that is good to be honest, but no where near your gig internet.. So you could do such a setup, but your going to see a drastic drop in performance.

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

                                      jhmc93J 1 Reply Last reply Reply Quote 0
                                      • jhmc93J Offline
                                        jhmc93 @johnpoz
                                        last edited by

                                        @johnpoz so not the best idea then?

                                        johnpozJ 1 Reply Last reply Reply Quote 0
                                        • johnpozJ Online
                                          johnpoz LAYER 8 Global Moderator @jhmc93
                                          last edited by

                                          @jhmc93 no not really.. Unless you like paying for gig internet and getting like 300 ;)

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 26.03.1 | Lab VMs 2.8.1, 26.03.1

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S Offline
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Yeah you probably don't want to pass traffic over a powerline link that you don't have to. ๐Ÿ˜‰

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.
                                            Privacy Policy · Cookie Policy