Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Reconfig pfsense interface LAGG, how to do without destroying firewall rules

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 749 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      FlashEngineer
      last edited by

      Ok, here's my current setup:

      LAGG0 igb2,igb3,igb4,igb5,igb6,igb7

      lagg0 10 VLAN
      lagg0 20 VLAN
      lagg0 70 VLAN
      lagg0 90 VLAN
      lagg0 100 VLAN
      lagg0 110 VLAN
      lagg0 130 VLAN

      All those are setup in interface assignments.

      What I want to do is create 2 LAGG from the single one I have.  So I want this:

      LAGG0 igb2,igb3,igb4,igb5
      LAGG1      igb6,igb7

      Then vlan:

      lagg0 10 VLAN
      lagg1 20 VLAN
      lagg1 70 VLAN
      lagg1 90 VLAN
      lagg1 100 VLAN
      lagg1 110 VLAN
      lagg1 130 VLAN

      So I'm not changing any vlans itself just putting VLAN10 into LAGG0 and rest of vlan into LAGG1

      Is the best way doing this, just backing up the config, then manually editing the config to change the LAGG and VLAN assignments, then restoring the config, which forces a reboot and doesn't remove any firewall rules etc?

      otherwise I think if I edit the LAGG, it will mess up the whole setup because I think I have to remove the vlans and interface assignments etc.

      1 Reply Last reply Reply Quote 0
      • I
        InQuize
        last edited by

        I have a similar setup.
        Basically, rules are tied to interfaces. And interfaces are virtual based on VLANs. So, if you won't remove VLANs, rules should be fine too. You just need to:

        1. remove igb6, igb7 from the lagg
        2. create lagg1
        3. add igb6, igb7 to lagg1
        4. reassign interface on vlan10  from lagg0 to lagg1
          Done. All rules should be untouched. No reboots, not even a downtime.
          But certainly perform a config backup prior to changes.
        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.