Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLan installation

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    9 Posts 3 Posters 2.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Sensi
      last edited by

      I need to install pfSense to take over from pf on FreeBSD.

      I can install it fine and use it as a gateway to the internet.

      But, the problem is that I need to use the vLan facility.  I can get it all working and DHCPing correctly for the local aspect - but it doesn't allow access to the WAN (and that applys to all of the vLans).

      Help!!

      1 Reply Last reply Reply Quote 0
      • W
        wallabybob
        last edited by

        Please describe your configuration in a bit more detail. You have multiple VLANs on the one physical interface? You have a VLAN capable switch? Your WAN connection is … and it is connected to pfSense by ...

        Do any of your VLANs work?

        One of the physical interfaces on my pfSense box is shared by two VLANs: one to a single server and one to an ADSL modem by ppp. I have a Procurve 1700-8 VLAN capable switch which presents multiple LANs to the computers downstream of my pfSense box.

        1 Reply Last reply Reply Quote 0
        • M
          Metu69salemi
          last edited by

          Assumption: your vlans work already, like dhcp and dns etc

          Normally only lan has access to any.
          Any other interface you should give the access.

          1 Reply Last reply Reply Quote 0
          • S
            Sensi
            last edited by

            The switch I'm playing on is a ZyXEL1528.  Once I've got it working, I'm going to replace the current firewall which is connected to a 3Com 4200 (both are vLan switches).

            I think it looks like a simple case of having to create firewall rules that allow the vLans out?  Am I right/  Are these 'simple' forwards/rules - or are they more complicated?

            1 Reply Last reply Reply Quote 0
            • S
              Sensi
              last edited by

              I think I've found it - well, some of it!!

              On the interface page I simply enter the gateway as 'none'.

              Interestingly, the 10.3.x.x vLan can still access the pfSense server which is at 10.1.0.1 and it can ping 10.1.0.1.  Does this mean that there is no inter-vLan security?

              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                Easy rules:

                1. interfaces:assign:vlans …
                2. after it's static with ip and etc
                3. firewall:rules:vlan number: add your rules

                depends your rules how the interfaces work

                1 Reply Last reply Reply Quote 0
                • S
                  Sensi
                  last edited by

                  It's a real pain that I can't import the conf file for the pf firewall!

                  1 Reply Last reply Reply Quote 0
                  • M
                    Metu69salemi
                    last edited by

                    Everybody has it's crosses to carry ;)

                    Sorry, but can't help with that.

                    1 Reply Last reply Reply Quote 0
                    • S
                      Sensi
                      last edited by

                      Oh!!!

                      Thanks anyway

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.