Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Vlan setup?

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 2 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Mad Professor
      last edited by

      I'm out of slots on my pfsense box, need to add another lan to my network.

      I'm trying to do a vlan I think I'm going about it the wrong way.

      I have GS105E 5 port switch which is vlan capable, I configured it as this

      PORT 1,2 > vlan 1 > 24 port layer 2 switch
      PORT 3,4,5 > vlan 2 > patch panel > 3 different switches.

      in pfsense:

      The LAN interface currently holds xl1 nic

      I want to assign all vlans to xl1 as the parent interface and reassign LAN to vlan 1 and assign Lan 2 to vlan 2.

      but when I do this I lose my connection to the webgui and have to login via the dmz interface.

      How can I do this?

      1 Reply Last reply Reply Quote 0
      • N
        Nachtfalke
        last edited by

        Your ports on the 5 Port switch seems for me to be untagged ports.
        If you create vlan1 and vlan2 on the pfsense, then this are tagged ports.

        Try to create a trunk port on the switch which is allowed to handle vlan1 and vlan2 and than connect this port to your pfsense.

        If I am right I think your problem is tagged and untagged ports.

        1 Reply Last reply Reply Quote 0
        • M
          Mad Professor
          last edited by

          Thank you that's exactly what my problem was.

          what I did was I created 3 vlan ids on the switch.
          ID's–-PORTS--T/U
          vlan1 >  1 TAGGED to trunk on opt3 which is the parent interface on pfsense
          vlan2 > 2,3 untagged, add port 1 as tagged to this group
          vlan3 > 4,5 untagged  add port 1 as tagged to this group

          *Note: Not sure If I needed to add port 1 to vlan 2 and 3 but the damn thing is working.

          pfsense:
          You may have to login from another interface like wifi or a DMZ.
          What I did...

          Moved xl1 from LAN to opt3, gave 192.168.1.1 IP, NO DHCP server
          Assign vlan2 to LAN  already has 192.168.0.1 and dhcp server enabled
          Made and assign opt4 for vlan3, gave 192.168.2.1, enabled DHCP server, add rule similar to lan.

          And it works!

          vlanexam.jpg
          vlanexam.jpg_thumb
          vlanexam2.jpg
          vlanexam2.jpg_thumb

          1 Reply Last reply Reply Quote 0
          • M
            Mad Professor
            last edited by

            Now I can't get captive portal to work on LAN2/vlan3.

            If I type the ip and port 8000 I can reach the page but it doesn't redirect to the authorization page.

            How can I fix this?

            EDIT:

            Fixed!

            Set dns in dhcp server of lan 2 to gateway ip which is 192.168.2.1.

            1 Reply Last reply Reply Quote 0
            • N
              Nachtfalke
              last edited by

              Nice to hear!
              Thanks for your feedback. Have fun :-)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.