Public IPs on the DMZ with VLAN tagging

  • Hey,

    first, the picture:

    OK. I have a /27 IP range on the WAN side (NOT routed) and I would like everything on the "LAN" side to have public IP addresses and pfSense to do some firewalling and to add VLAN tags so I can separate vlans on the switch.

    How can I achieve this using pfSense? Do I have to give a public IP to each opt/vlan interface and use it as a gateway on the corresponding hosts? Do I also have to add Virtual IPs (since they are not routed)?