Need help to reconfigure VLANs
-
Hi,
I need to reconfigure all my VLANs because right now I'm running my box with a slightly misconfiguration for not configuring a "dummy VLAN" first as demonstrated on this post: http://forum.pfsense.org/index.php/topic,14918.msg78736.html#msg78736
What is the correct way for the reconfiguration? Do I reset everything (delete them all) or there is an easier way for this.
Thanks in advance,
Richard
-
help please :)
-
What switch are you going to be using as you will need to setup a port between your switch and pfSense box as a trunk and create the same vlans on the switch as your pfSense box.
Create Vlan 1 as say 192.168.1.0 /24. Untagged on switch trunk. (management Vlan)
Vlan 2. 192.168.2.0 /24 Tagged on switch trunk
Vlan 3. 192.168.3.0 /24. Tagged on switch trunk. And so onMake sure that the Network card on your pfSense is compatible with Vlans like intel NICs.
Providing you can access the GUI of you pfsense you should be safe to delete all existing Vlans and start again
-
Hi, thanks for replying.
Previously I already setup similar to what you said but the problem with that setup, inter-vlan routing won't work.
I have searched and apparently a "dummy" vlan need to be setup.
I will try to add a new vlan and remove the previously created vlan from my current LAN.And yes i have vlan capable switch :)
-
You don't need a dummy vlan. In the post you linked, the poster is using a Netgear switch that doesn't allow you to delete vlan 1, so he left vlan 1 there but doesn't use it, and this is why he calls it a dummy vlan.
You don't need a dummy vlan for inter-vlan routing with pfsense either; maybe you read a how-to somewhere that uses it, but it's not required. Create your vlans and interfaces on pfsense, create the same vlans on the switch and trunk them to the port that pfsense is connected to, and then configure your other switch ports (probably as untagged or access ports) as desired.
By default pfsense will block packets between vlans (except from LAN), so create firewall pass rules to allow inter-vlan traffic as desired.
-
Thanks for the replies. I will try to recreate all the VLANs and rules because the previous setting is to complicated I think. I'm still learning pfSense and love the power so far ;D