====== PFSense - Install pfSense - Create VLANs ======

VLANs are assigned to a specific parent interface.

The parent interface refers to the **physical interface** that will transfer the VLAN tagged traffic.

<WRAP info>
**NOTE:**  Historically the best practice was to leave the parent interface unassigned due to undefined, unpredictable or inconsistent behaviour by some hardware, depending on the manufacturer.

There was a chance that tagged traffic could be stripped of its tags and end up allocated to the parent interface introducing a security risk.

Nowadays, this should no longer be an issue, as the system ensures that only VLAN capable interfaces will be shown.  In this setup, all VLANs are configured against the **LAN** interface.

</WRAP>



----


===== Create Clear VLAN =====

Navigate to **Interfaces -> Assignments**.

Click **VLANs**.

  * Click **Add**.
  * Parent Interface:  **LAN Interface**.  Choose whichever interface you want here.
  * VLAN Tag:  **50**.
  * VLAN Priority: 0
  * Description:  **CLEAR**.
  * Click **Save**.

{{:pfsense:install_pfsense:pfsense_-_interfaces_-_vlan_-_clear.png?800|}}

----

===== Create IOT VLAN =====

  * Click **Add**.
  * Parent Interface:  **LAN Interface**.  Choose whichever interface you want here.
  * VLAN Tag:  **70**.
  * VLAN Priority: 0
  * Description:  **IOT**.
  * Click **Save**.

{{:pfsense:install_pfsense:pfsense_-_interfaces_-_vlan_-_iot.png?800|}}

----

===== Create Guest VLAN =====

  * Click **Add**.
  * Parent Interface:  **LAN Interface**.  Choose whichever interface you want here.
  * VLAN Tag:  **99**.
  * VLAN Priority: 0
  * Description:  **GUEST**.
  * Click **Save**.

{{:pfsense:install_pfsense:pfsense_-_interfaces_-_vlan_-_guest.png?900|}}

----

Return to [[PFSense:Install pfSense|Install pfSense]] or continue to [[PFSense:Install pfSense:Create Interfaces|Create Interfaces]].

----