Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Routing networks correctly.

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 3 Posters 873 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      Trinni100
      last edited by

      Hello

      I have a question in regards to the correct way to have multiple networks on one pfsense box. (Meaning assigning the correct subnet and IP's.

      I have Pfsense setup with 2 wans (TW 50/5) and (ATT 18/3) along with one LAN.  The Lan connects to a Cisco 3750G switch, then all my stuff is connected to the switch.

      So my question is if I want 2 networks: Home and Lab is it better to run this thru the switch with vlans or thru pfsense? Both works from what I read.

      Example 1: From Pfsense

      Lan1: 10.0.10.1/24
      Lan2: 10.0.20.1/24

      or

      Example 2: From switch

      Pfsense : 10.0.0.1/16

      Switch Vlan 10: 10.0.10.1/24  - Home
      Switch Vlan 20: 10.0.20.1/24 - Lab

      I would like to use example 2 because I can just have the one switch instead of 2.  But other question will be what address will I give the switch?

      10.0.0.x/16 or 10.0.10.x/24 or 10.0.20.x/24?

      1 Reply Last reply Reply Quote 0
      • T
        timthetortoise
        last edited by

        Depends. Do you want to be able to control access in pfSense, or via ACLs in the Cisco box? Keep in mind that you can assign VLAN interfaces within pfSense just like you would on a Cisco router/switch. Cleanest way, in my opinion, would be to tag VLANs on the port connected to pfSense, and route within pfSense. That way you have a simple logical configuration. If it were a situation where you absolutely needed the best performance possible, I'd say route it at the switch.

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          A third VLAN as a management VLAN is another option.  Or choose one and use that as your management VLAN.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.