Table of Contents
PFSense - Install pfSense - Create VLANs
VLANs are assigned to a specific parent interface.
The parent interface refers to the physical interface that will transfer the VLAN tagged traffic.
NOTE: Historically the best practice was to leave the parent interface unassigned due to undefined, unpredictable or inconsistent behaviour by some hardware, depending on the manufacturer.
There was a chance that tagged traffic could be stripped of its tags and end up allocated to the parent interface introducing a security risk.
Nowadays, this should no longer be an issue, as the system ensures that only VLAN capable interfaces will be shown. In this setup, all VLANs are configured against the LAN interface.
Create Clear VLAN
Navigate to Interfaces → Assignments.
Click VLANs.
- Click Add.
- Parent Interface: LAN Interface. Choose whichever interface you want here.
- VLAN Tag: 50.
- VLAN Priority: 0
- Description: CLEAR.
- Click Save.
Create IOT VLAN
- Click Add.
- Parent Interface: LAN Interface. Choose whichever interface you want here.
- VLAN Tag: 70.
- VLAN Priority: 0
- Description: IOT.
- Click Save.
Create Guest VLAN
- Click Add.
- Parent Interface: LAN Interface. Choose whichever interface you want here.
- VLAN Tag: 99.
- VLAN Priority: 0
- Description: GUEST.
- Click Save.
Return to Install pfSense or continue to Create Interfaces.