Netgate 7100 - Additional Resources; Netgate Training

Security Gateway Manual XG-7100
(continued from previous page)
VLAN group 7, Port 7, Members 5,6,8
VLAN group 8, Port 8, Members 5,6,7
With this configuration in place, ETH1-8 now function like so:
// SWITCH-A
PORT 1 = ETH1
PORT 2 = ETH2
PORT 3 = ETH3
PORT 4 = ETH4
PORT 9 = UPLINK 1
PORT 10 = UPLINK 2
// SWITCH-B
PORT 5 = ETH5
PORT 6 = ETH6
PORT 7 = ETH7
PORT 8 = ETH8
SWITCH-A
ETH1-4 can talk to each other and to the LAGG uplink. PORT9-10 are members of this switch...this is required for
this switch to have uplink to pfSense
®
Plus.
SWITCH-B
ETH5-8 can talk to each other but because PORT9-10 are not included as members, clients connecting to ETH5-8 can
only talk to other clients on ETH5-8. They will not be able to reach the SoC where ix2 and ix3 are defined, so they
never reach the pfSense
®
Plus software. This can be useful to allow a device other than pfSense
®
Plus to act as the
primary uplink for those connected clients.
Since WAN and LAN are assigned to lagg0.4090 and lagg0.4091, if Port VLAN Mode is enabled, be sure to
update the LAN and WAN interface assignment to reference the appropriate VLAN. Also remember to create the new
VLANs with lagg0 as the parent interface.
If Port VLAN Mode is being used to handle untagged traffic, the lagg0 interface should be added, enabled, and
configured under Interface Assignments.
See also:
For more information on how to configure the switch ports, see Configuring the Switch Ports.
3.2 Additional Resources
3.2.1 Netgate Training
Netgate training offers training courses for increasing your knowledge of pfSense
®
Plus products and services. Whether
you need to maintain or improve the security skills of your staff or offer highly specialized support and improve your
customer satisfaction; Netgate training has got you covered.
https://www.netgate.com/training
© Copyright 2024 Rubicon Communications LLC 79