hope you are fine and doing wll.
Would you like to learn how to configure the Pfsense Vlan feature? In this tutorial, we are going to show you how to perform a Vlan configuration on a Pfsense server.
Here is a list of the existent interfaces on our Pfsense server before our configuration:
• WAN - 192.168.10.17
• LAN - 192.168.1.1
In our example, we are going to create a VLAN sub-interface named OPT1 on the LAN Physical interface.
The sub-interface named OPT1 will be a member of the VLAN 10 and will use the IP address 192.168.2.1:
Here is a list of the interfaces on our Pfsense server after our configuration:
WAN - 192.168.10.17
LAN - 192.168.1.1
OPT1 - 192.168.2.1
Open a browser software, enter the IP address of your Pfsense firewall and access web interface.
In our example, the following URL was entered in the Browser:
[ Ссылка ]
On the prompt screen, enter the Pfsense Default Password login information.
• Username: admin
• Password: pfsense
After a successful login, you will be sent to the Pfsense Dashboard.
Access the VLAN tab and click on the Add button.
On the VLAN screen, perform the following configurations:
• Parent Interfaces - Select the Physical interface
• VLAN Tag - Enter the VLAN identification number
• Description - Optionally enter a description
Click on the Save button to create the pfsense Vlan.
On the Interface Assignments tab, select the new Vlan interface and click on the Add button.
In our example, The Vlan 10 was assigned to our Pfsense firewall using the name OPT1.
Access the Pfsense Interfaces menu and select the new Vlan interface name.
In our example, we selected the OPT1 interface.
On the General Configuration area, perform the following configuration:
• Enable - Yes
• Description - Optionally, you may change the name of the Vlan interface
• IPv4 Configuration Type - Static IPV4
• IPv6 Configuration Type - None
• Speed and Duplex - Default
On the Static IPv4 Configuration area, perform the following configuration:
• IPv4 Address - Configure the VLAN interface IP address and netmask
Click on the Save button.
Click on the Apply changes button.
Congratulations! You have finished the Pfsense Vlan configuration.
Keep in mind that you need to create firewall rules to allow the new VLAN interface to communicate.
Now, you need to perform the Vlan trunk configuration on the Network Switch.
In our example, we are going to show how to perform the Vlan configuration on a Cisco.
On the prompt screen, enter the administrative login information.
Use the configure terminal command to enter the configuration mode.
Switch
Switch enable
Switch# configure terminal
Create a new vlan, select an identification number and add a brief description.
Switch(config)# vlan 10
Switch(config-vlan)# name hadinetwork
Switch(config-vlan)# exit
Access the interface configuration mode and set the Switch port as a trunk.
Add the list of authorized Vlans to use this trunk.
Switch(config)# interface gigabit ethernet0/40
Switch(config-if)# switch port mode trunk
Switch(config-if)# switch port trunk native vlan 1
Switch(config-if)# switch port trunk allowed vlan add 1,10
Switch(config-if)# exit
Switch(config)# exit
In our example, the Switch port 40 was configured as a trunk.
The following Vlans were allowed to use this port as a trunk: 1 and 10.
Vlan 1 is the default native VLAN of Cisco Switches.
Don’t forget to save your Switch trunk configuration.
Switch# copy running-config startup-config
Connect the Pfsense LAN interface to the Cisco Switch port number 40.
Traffic coming from the Pfsense LAN interface will not have VLAN tag and will be a member of the Cisco Switch native VLAN 1.
Traffic coming from the Pfsense OPT1 interface will have the VLAN tag 10 and will be a member of the Cisco Switch VLAN 10.
thanks
#hadinetwork.com
CRS1xx, CRS2xx, CRS312-4C+8XG, CRS326-24S+2Q+, DISC, FiberBox, hAP, hAP ac, hAP ac lite, LDF, LHG, ltAP mini, mANTBox, mAP, NetBox, NetMetal, PowerBox, PWR-Line, QRT, RB9xx, SXTsq, cAP, hEX Lite, RB4xx, wAP, BaseBox, DynaDish, RB2011, SXT, OmniTik, Groove, Metal, Sextant, RB7xx, hEX PoE
RB3xx, RB600, RB8xx, RB1100AHx2, RB1100AH, RB1100, RB1200 cAP ac, CRS305-1G-4S+, CRS309-1G-8S+, CRS317-1G-16S+, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, DISC AC, hAP ac², LDF ac, LHG ac, RB4011, SXTsq (ac series), Wireless Wire, Chateau, RB3011, RB1100AHx4, RB450Gx4
hEX (RB750Gr3), hEX S, RBMxx
Ubiquiti Air Max 10dBi 2.4GHz DualOmni Antenna (AMO-2G10)
Ubiquiti Air Max 10dBi 5GHz DualOmni Antenna (AMO-5G10)
UBIQUITI airMAX® ac Beamwidth Sector Isolation Antenna Horn (PrismAP-5-90)
Ubiquiti Air Max 15dBi 2.4GHz Sector Antenna (AM-2G15-120)
Ubiquiti RocketDish 3G 26dbi
Ubiquiti RocketDish 34dbi , UBIQUITI Rocket 2AC airMAX® ac BaseStation with airPrism® Technology (R2AC)
UBIQUITI Rocket M5 Airmax

свернуть