Routing VLAN's into specific servers

SyRenity

Hi.

I have a deployment where multiple VLAN's with overlapping IP's connected to machines, each one physically.
I'm looking to a way to concetrate them on managed switch, and route to specific servers and backwards.

So, is it possible to define routing rules, so particular VLAN will go to a specific server (perhaps according to MAC)?

Also, is it possible to have only a portion of traffic originating from server, going through these VLAN, and rest going to WAN (perhaps according to IP's)?

I.e.:

<–----------> switch <------> WAN
server <---> pfsense
<------------> switch <------> VLAN

Thanks.

clarknova

@SyRenity:

So, is it possible to define routing rules, so particular VLAN will go to a specific server (perhaps according to MAC)?

MAC-based vlan is possible but my limited experience suggests that most vlan-capable switches don't support it. Find a switch that will do MAC-based vlans and I don't think pfsense will be a problem.

Also, is it possible to have only a portion of traffic originating from server, going through these VLAN, and rest going to WAN (perhaps according to IP's)?

pfsense will route traffic according to the firewall rules you create and then according to its routing table. What are you trying to accomplish?

SyRenity

Hi.

Thanks for your reply.

MAC-based vlan is possible but my limited experience suggests that most vlan-capable switches don't support it. Find a switch that will do MAC-based vlans and I don't think pfsense will be a problem.

I actually meant according to server MAC, meaning every VLAN will be routed to proper MAC address (perhaps via trunking?).

pfsense will route traffic according to the firewall rules you create and then according to its routing table. What are you trying to accomplish?

I will explain in a bit more detail.

Today we have several LAN's with overlapping IP addresses, so they connected each to it's own server. This means every LAN takes single NIC per server for it's purposes. What we look at, is to still have these LAN's be bound to server, but instead of being connected to it, use pfSense trunking capabilities, and have possibly several LAN's over single server.

This means the LAN will be connected to managed switch, and will belong to specific VLAN, which then will be routed by pfSense to proper server. Is such configuration possible?

Thanks.

clarknova

I'm not sure I understand you fully, but this is what I think you mean:

You have a single layer 2 network, basically a bunch of servers (and possibly other hosts) connected to a switch or series of switches that are not split into vlans. On this L2 network you have configured multiple subnets, so for example you have a server whose address is 192.168.1.100/24 and another that is 172.16.0.200.

Now you want to change things, such that each server actually sits on a separate vlan and can reach the other hosts only through pfsense.

Am I close? Can you provide a diagram of how things are and how you want them to be? You can do this for free on gliffy.com.