Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Single Nic install guide?

    Installation and Upgrades
    7
    14
    20881
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pollardhimself last edited by

      Any one know where a good tutorial is on a single nic setup? Just setting up a test network with our old switch at home and the pc i'm using only has a single nic connection  :(

      1 Reply Last reply Reply Quote 0
      • P
        pollardhimself last edited by

        Here's my 1st try - no luck so far..

        Switch port 2 set to vlan 2
        Switch port 3 set to vlan 3
        Switch port 4 set to trunk

        Pfsense
        em0 interface set to uassigned
        vlan 2 set as lan parent interface em0
        vlan 3 set as wan parent interface em0

        Do I have to define em0 as a trunk? If so how?

        1 Reply Last reply Reply Quote 0
        • Derelict
          Derelict LAYER 8 Netgate last edited by

          No.  A VLAN trunk port is essentially synonymous to a VLAN tagged port.  When you assign an interface to a pfSense VLAN interface, traffic for that interface will be tagged.

          Not sure what kind of switch you're using but you might need to specify the VLANs on the trunk port.

          Switch port 2 would go to your LAN.
          Switch port 3 would go to your DSL/Cable modem/WAN (preferably in bridge mode)
          Switch port 4 would go to pfSense

          Chattanooga, Tennessee, USA
          The pfSense Book is free of charge!
          DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • johnpoz
            johnpoz LAYER 8 Global Moderator last edited by

            So quick question does this PC not have any slots at all to add a nic?  You can pick up a cheap nic for under $10 at any computer store, online, etc.  Even a somewhat decent nic, even dual port for 40$

            http://www.amazon.com/Intel-PWLA8492MT-PCI-X-Server-Adapter/dp/B00006HX1V

            While sure you can do it with vlans, if your not clear on the setup why not just pick up another nic.  Get that working - then if you want to play with hairpin vlan configurations

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 23.01 | Lab VMs CE 2.6, 2.7

            1 Reply Last reply Reply Quote 0
            • P
              pollardhimself last edited by

              @johnpoz:

              So quick question does this PC not have any slots at all to add a nic?  You can pick up a cheap nic for under $10 at any computer store, online, etc.  Even a somewhat decent nic, even dual port for 40$

              http://www.amazon.com/Intel-PWLA8492MT-PCI-X-Server-Adapter/dp/B00006HX1V

              While sure you can do it with vlans, if your not clear on the setup why not just pick up another nic.  Get that working - then if you want to play with hairpin vlan configurations

              Not really trying to drop anything in it its just and old pc im using just to mock up what my new network layouts going to be before I implement it. - Still learning so I dont wanna on the fly with my offices network.

              1 Reply Last reply Reply Quote 0
              • johnpoz
                johnpoz LAYER 8 Global Moderator last edited by

                So your new network is going to use hairpinned vlans?  I one nic?  That seems unlikely, I sure wouldn't suggest it ;)

                Get a nic, the amount of time you have spent looking for how to do a hairpinned vlan setup prob more than the $10, Forgo the morning coffee from starbucks to fund it ;)

                You haven't even told us what switch your trying to use..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                1 Reply Last reply Reply Quote 0
                • P
                  pollardhimself last edited by

                  @johnpoz:

                  So your new network is going to use hairpinned vlans?  I one nic?  That seems unlikely, I sure wouldn't suggest it ;)

                  Get a nic, the amount of time you have spent looking for how to do a hairpinned vlan setup prob more than the $10, Forgo the morning coffee from starbucks to fund it ;)

                  You haven't even told us what switch your trying to use..

                  No definitely not!! I have a true server dell pe1750 with 2 nic's at the office running pfsense.

                  Just trying to mock some stuff up to pre-plan everything I thought I saw somewhere this single nic was possible so I figured I give it a go.

                  Test Setup at home

                  Old crap dell pc running pfsense single nic
                  powerconnect 3448 switch

                  Anywayz since its such a hassle ill spend the 10 bucks to add a second lan..

                  http://www.amazon.com/TP-LINK-TG-3269-1000Mbps-Gigabit-Network/dp/B0034CSUZ8/ref=sr_1_1?s=electronics&ie=UTF8&qid=1417641774&sr=1-1&keywords=Lan+card

                  1 Reply Last reply Reply Quote 0
                  • johnpoz
                    johnpoz LAYER 8 Global Moderator last edited by

                    Well looking at the manual for 3448, looks like page 299 goes over the vlan.. Via the gui you can do everything you need.

                    So the port on the switch that goes to em0 on pfsense would need to be Tagged for your vlans.  Trunk port vs access port - but looks like from the gui you can just pick your vlan, and then set ports to be untagged or tagged in that vlan.

                    So the ports that go to you lan would be untagged in your lan vlan, say vlan 20 for the number.  Port that goes to your wan, ie modem would be untagged say in vlan 30.  Now the port that connects pfsense would be trunked, or tagged with both vlan 20 and 30.

                    Then in pfsense you set your wan to vlan 30 and your lan to vlan 20.

                    Hope that helps - but in the long run, it is easier to just use a physical nic ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                    1 Reply Last reply Reply Quote 0
                    • stephenw10
                      stephenw10 Netgate Administrator last edited by

                      Mocking stuff up and testing in a safe environment when you're not doing it against the clock is how you learn about this stuff. I wouldn't run a 'router on a stick' config unless I was forced to either but I'd certainly like to think I could do it if pressed. If you're not familiar with VLANs this is your opportunity.  :D

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • johnpoz
                        johnpoz LAYER 8 Global Moderator last edited by

                        Agreed, which is why I suggest after he gets the 2nd nic he can play with the vlan stuff.  You get pfsense up and running, then you know that works and can actually play with it.  Then you can play with putting vlans on your lan side, or running the hairpin setup, etc.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                        1 Reply Last reply Reply Quote 0
                        • D
                          daniev last edited by

                          @pollardhimself:

                          Any one know where a good tutorial is on a single nic setup? Just setting up a test network with our old switch at home and the pc i'm using only has a single nic connection  :(

                          I don't have a tutorial , but it can be done. When you first setup pf you are presented with the option to create VLANs. Lets say you make VLAN 99 the WAN and VLAN 11 is LAN off of interface EM0. On your switch you need to remember ingress is what you assign to the PVID and egress is what you either tag or untag depending on what the port is connected to. So, the port used for WAN would be PVID 99, Untagged. The port used for LAN would be PVID 11, untagged. The port used for the trunk connected to pfSense would be PVID 11 -  then tag it VLAN 99 AND tag it for VLAN 11.

                          1 Reply Last reply Reply Quote 0
                          • H
                            hmishra last edited by

                            @pollardhimself:

                            Any one know where a good tutorial is on a single nic setup? Just setting up a test network with our old switch at home and the pc i'm using only has a single nic connection  :(

                            Read the following thread. The OP in that case was myself  ;). Anyway, you will find the answer embedded among the replies in middle to last portion of the entire thread.

                            https://forum.pfsense.org/index.php?topic=28379.0

                            1 Reply Last reply Reply Quote 0
                            • S
                              santhony last edited by

                              I've been running pfsense with a single NIC, using VLAN's, for several years.. Works great…. Just have to have a switch that supports VLAN's as well...

                              1 Reply Last reply Reply Quote 0
                              • johnpoz
                                johnpoz LAYER 8 Global Moderator last edited by

                                "Works great."

                                What would depend on what your looking to accomplish and what kind of performance you want out of it.. If you want to save couple of bucks on a nic and get lower performance then sure works great ;)  Hairpinning any sort of connection would never be my first choice to be sure.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 23.01 | Lab VMs CE 2.6, 2.7

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post