Single NIC…it works.
-
You have the identical switch that I have. Basically leave all ports untagged, with the exception of the trunk port(s). For the trunk port, tag that port with all the VLAN's you want included in that trunk.
What you have done sounds right, port 12 is your trunk with VLAN 10 and 11 going though it and that plugs into your pfsense.
I'd like a bit more info though. How many physical interfaces are on your pfsense? Just a WAN and the trunk? What are the rest of the ports doing on the switch?
-
ok…I Fiddled around with the Vlans and I got it working, well sort of.
when I plugged the AP directly to the switch the Vlan works fine, when I plug the ap into the switch then into the nortel, it work. when I plug in the other line from the switch into the Nortel it works fine, but (here is the big but :P) when I activate the opt1 interface on the PF box the switch freezes. it gets confused :(
so my question is this... is it posible to take one line from an AP and split it into 2 lines for Vlaning. or how would this be posible with one managed switch? its odd because it doesnt do a broadcast storm because the 2 ports cant talk but the switch just freezes.
any thoughts or other req'ed HW?
-
so my question is this… is it posible to take one line from an AP and split it into 2 lines for Vlaning. or how would this be posible with one managed switch?
No, unless your AP has two IP address and supports 802.1q tagging. You can only go from one VLAN to another via a router.
-
I think I figured it out ;D
I now know why the dumb switch was dieing… I had 2 ports that were going to the same MAC address so it froze. the way to work around that would be to spoof a Mac on the Opt1 interface so the switch thinks it is a different device and doesnt get all confused. both vlan 10 and 11 pointed to the PF box even though the 2 ports couldnt talk to eachother the switch saw 2 ports with the same MAC. Yippy it works :)
my AP is just being a transparent bridge. I can access both networks on the other side. the AP isnt even on the same network (the are in the 10.x network. thx alot peeps :)