Public IPs on the DMZ with VLAN tagging

[Dark00]

Hey,

first, the picture:

OK. I have a /27 IP range on the WAN side (NOT routed) and I would like everything on the "LAN" side to have public IP addresses and pfSense to do some firewalling and to add VLAN tags so I can separate vlans on the switch.

How can I achieve this using pfSense? Do I have to give a public IP to each opt/vlan interface and use it as a gateway on the corresponding hosts? Do I also have to add Virtual IPs (since they are not routed)?

Thanks,
Darko