PFsense Trunking Questions

pollardhimself

First time setting up vlans in pfsense need a little guidance.

Do I leave nic 2 unassigned in pfsense?
I am assuming I need todo the "multiple subnets on one interface" thing.

Any other things I need to be aware of?

nic 1 wan/internet
nic 2 Trunk

Pfsense Settings
WAN - NIC 1
LAN - VLAN 1
OPT 1- VLAN 2

Goal

dotdash

@pollardhimself:

Do I leave nic 2 unassigned in pfsense?

I am assuming I need todo the "multiple subnets on one interface" thing.

Yes, leave the vlan parent interface unassigned.
No, each vlan is it's own interface.

Derelict

If you're really talking about VLAN 1 and 2 and not using 1 and 2 to represent VLAN A and B, you need to get off of VLAN 1.

Use, say, VLANs 100 and 101.

VLAN 1 is the default, untagged VLAN in most switches and will correspond to the main, untagged pfSense interface (eg em1).

You want to leave that unassigned and use, for example, em1_vlan100 and em1_vlan101.

Those would show in Interfaces->Assign as "VLAN 100 on em1" and "VLAN 101 on em1"

pollardhimself

@Derelict:

If you're really talking about VLAN 1 and 2 and not using 1 and 2 to represent VLAN A and B, you need to get off of VLAN 1.

Use, say, VLANs 100 and 101.

VLAN 1 is the default, untagged VLAN in most switches and will correspond to the main, untagged pfSense interface (eg em1).

You want to leave that unassigned and use, for example, em1_vlan100 and em1_vlan101.

Those would show in Interfaces->Assign as "VLAN 100 on em1" and "VLAN 101 on em1"

Yeah right now im using vlan 2 and vlan 3

Unable to ping the pfsense with em0 plugged into the trunk port 48 or 1/g1

So enabled port 14 on vlan 2 and tried to get my home router to assign an ip to the pc plugged into port 2 with no luck.

Guess i need to read up more on setting my switch up first…

Pfsense is setup like this

My Power connect 3448 - currently using just for testing

console# show vlan

Vlan Name Ports Type
–-- -------------------------------- --------------------------- ------------
1 1 1/e(1,4-13,15-48),1/g(1-2), other
ch(1-6)
2 2 1/e(2,14) permanent
3 3 1/e3 permanent

console# show run
interface range ethernet 1/e(2-4,14)
switchport mode general
exit
interface range ethernet 1/e48,1/g1
switchport mode trunk
exit
vlan database
vlan 2-3
exit
interface ethernet 1/e2
switchport general pvid 2
exit
interface ethernet 1/e3
switchport general pvid 3
switchport general allowed vlan add 3
exit
interface ethernet 1/e14
switchport general pvid 2
exit
interface ethernet 1/e2
switchport general allowed vlan add 2 untagged
exit

Derelict

console# show vlan

Vlan Name Ports Type
–-- -------------------------------- --------------------------- ------------
1 1 1/e(1,4-13,15-48),1/g(1-2), other
ch(1-6)
2 2 1/e(2,14) permanent
3 3 1/e3 permanent

If I'm understanding you correctly, " trunk port 48 or 1/g1" are the same port?

Neither of them are members of vlan 2.

Try this:

interface range ethernet 1/e48,1/g1
switchport mode trunk
switchport trunk allowed vlan add 2
exit

Sorry I'm not familiar with the dells. That's what I'd do on a cisco. You want to put VLAN 2 tagged out the switchport connected to em0.

pollardhimself

48 and 1/g1 are two different ports it has 2 gigabit ports for up-links I guess. I was thinking something might need to be configured different on those so I tired port 48 as a trunk also.

So I have to define which vlans are allowed on which trunks? Ill give that a try

pollardhimself

Helps when you read instructions! Its up now :)

http://en.community.dell.com/support-forums/network-switches/f/866/t/19445142