Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Get Internet through WAN and VLAN

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 3 Posters 870 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      Infinity_bg
      last edited by

      Hello to all! Sorry for the question but i am total noob about VLANs.

      I work in one firm and they use a very old version of FreeBSD on a router. Now we need to change it and think to use PFsense of course.

      So the ISP provides us Internet via VLAN. I know the ID tag of VLAN, know the their IP address (from their side 194.141.xxx.66), my IP too 194.141.xxx.65. The network is 194.141.2.0/24  What i need to do. How to configure the WAN port.

      Thank You for any help!

      1 Reply Last reply Reply Quote 0
      • A
        AIMS-Informatique
        last edited by

        Interface->WAN :
        Set Type to : "Static IP"
        Put your WAN IP and Mask : "194.141.xxx.65" "/24"

        Put the Upstream Gateway : click "add a new one"
          Default : Checked
          GW Name : WANGW (or whatever else)
          GW IPV4 : 194.141.xxx.66
          Description : What.ever
        SAVE GW.

        You can check "Block private and bogon nets" if you are sure that you will only go on the Internet with this link. Don't check if there are local services being used.

        Go to Firewall -> Rules, click your LAN tab, and make sure you let pass the trafic.

        think it's all.

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          If they send the traffic to you tagged, you need to create a VLAN on the interface you're using for WAN.

          For this I am going to act like your WAN interface is em1 and the VLAN tag is 100:

          Interfaces->Assign->VLANs

          Click the + to add a VLAN

          Parent Interface: em1
          VLAN Tag: 100
          Description: Tagged WAN

          Save

          Back into Interfaces->Assign

          Change WAN to Network port: em1_vlan100 ETA: it'll show in the pulldown as "VLAN 100 on em1 (Tagged WAN)"

          Save and you're done.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • I
            Infinity_bg
            last edited by

            Thank you all for Answers!

            But may be no need to use VLANs at all. Get the config file form the old GW and don't see any VLAN configurations there. May be ISP admins think that they have active VLAN.

            First Ill tray IP configuration without VLAN.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.