User Tools

Site Tools


pfsense:install_pfsense:create_vlans

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
pfsense:install_pfsense:create_vlans [2020/11/30 22:39] – created peterpfsense:install_pfsense:create_vlans [2020/12/16 11:58] (current) – [PFSense - Install pfSense - Create VLANs] peter
Line 1: Line 1:
 ====== PFSense - Install pfSense - Create VLANs ====== ====== PFSense - Install pfSense - Create VLANs ======
 +
 +VLANs are assigned to a specific parent interface.
 +
 +The parent interface refers to the **physical interface** that will transfer the VLAN tagged traffic.
 +
 +<WRAP info>
 +**NOTE:**  Historically the best practice was to leave the parent interface unassigned due to undefined, unpredictable or inconsistent behaviour by some hardware, depending on the manufacturer.
 +
 +There was a chance that tagged traffic could be stripped of its tags and end up allocated to the parent interface introducing a security risk.
 +
 +Nowadays, this should no longer be an issue, as the system ensures that only VLAN capable interfaces will be shown.  In this setup, all VLANs are configured against the **LAN** interface.
 +
 +</WRAP>
 +
 +
 +
 +----
 +
 +
 +===== Create Clear VLAN =====
 +
 +Navigate to **Interfaces -> Assignments**.
 +
 +Click **VLANs**.
 +
 +  * Click **Add**.
 +  * Parent Interface:  **LAN Interface**.  Choose whichever interface you want here.
 +  * VLAN Tag:  **50**.
 +  * VLAN Priority: 0
 +  * Description:  **CLEAR**.
 +  * Click **Save**.
 +
 +{{:pfsense:install_pfsense:pfsense_-_interfaces_-_vlan_-_clear.png?800|}}
 +
 +----
 +
 +===== Create IOT VLAN =====
 +
 +  * Click **Add**.
 +  * Parent Interface:  **LAN Interface**.  Choose whichever interface you want here.
 +  * VLAN Tag:  **70**.
 +  * VLAN Priority: 0
 +  * Description:  **IOT**.
 +  * Click **Save**.
 +
 +{{:pfsense:install_pfsense:pfsense_-_interfaces_-_vlan_-_iot.png?800|}}
 +
 +----
 +
 +===== Create Guest VLAN =====
 +
 +  * Click **Add**.
 +  * Parent Interface:  **LAN Interface**.  Choose whichever interface you want here.
 +  * VLAN Tag:  **99**.
 +  * VLAN Priority: 0
 +  * Description:  **GUEST**.
 +  * Click **Save**.
 +
 +{{:pfsense:install_pfsense:pfsense_-_interfaces_-_vlan_-_guest.png?900|}}
 +
 +----
 +
 +Return to [[PFSense:Install pfSense|Install pfSense]] or continue to [[PFSense:Install pfSense:Create Interfaces|Create Interfaces]].
 +
 +----
  
pfsense/install_pfsense/create_vlans.1606775956.txt.gz · Last modified: 2020/11/30 22:39 by peter

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki