✅ pfsense on 1 network/ethernet port PC using VLANS
HTML-код
- Опубликовано: 5 авг 2024
- Complete setup of pfsense 2.4.2 on single port nic PC, VLAN configuration on pfsense and Cisco SG-200 8 port gigabit switch. All info is provided. Using Dell Optiplex 3050 as an example but you can now use any single port PC as your router!
Subscribe and Nick will answer your questions!
NOTE: BIOS Changes required to install pfsense from default Dell shipped configuration.
=================CREDITS====================
Tech Live Kevin MacLeod (incompetech.com)
Licensed under Creative Commons: By Attribution 3.0 License
creativecommons.org/licenses/b... 
Наука
My most popular video! if you like videos like this and would like to see more please like and subscribe. It really encourages me to give it that extra effort and do better.
What are the advantages of your specific pfsense setup what other setup is it superior to whats the goal of your accomplishment ?
Simple and to the point. Well Done. I have the same series switch and could follow along using an old Atom netbook for the PfSense box. Worked a treat.
Setting up pfsense that way is actually pretty neat. I only need something for VLAN setup and routing, but I didn't want to replace my router for...reasons. I don't need a firewall either.
The way you have shown is a concept most IT people seem to not understand, when it comes to pfsense being involved.
Thank you so much. I picked up that exact switch a little bit ago off ebay and I had a micro PC that I wasn't using any more that I wanted to turn into a pfsense router. I was going to just use a USB ethernet adapter but a lot of people said they get a lot of errors from them so I scrapped that idea. I banged my head against the wall for a while trying to set up the VLANs for this until I stumbled across your vids. Very easy to follow and I got things set up quickly. Liked and subbed. Keep up the good work!
that's great...thanks for the kind words.
My MAN, THANK YOU for this, I finally have a solid use for my old laptop
Thanks! I did this with a TL-SG108E. 2 WAN inputs and everything worked fantastically. I'm so pleased!
hey i know i’m 2 years late but is the gui any different from the cisco one, could you show me on how to get it working before i buy that switch
Just wanted to say thanks. I had started a pfsense project using a NUC I had purchased for another project. Decided to give it a shot and realized that one gig port could be an issue. Some of the NUCs are lucky enough to get an add on card from a vender called GoRite. Bummer they don’t seem to make one for my older NUC. So I have a gig router I’m not using and have to admit I got a little excited. Rain forecasted for the weekend so the grass is out. Be in my shack if anyone is looking for me. Thanks again for the video.
Thank you. I've done this with a MiniPC T11 & a Netgear managed switch. Works a treat! I'm not too familiar with VLANs but managed to translate your settings to the Netgear ones. Been running for 3 weeks flawlessly.
Hi David would you mind to share which type of switch you are using? I have a layer 2 unmanaged switch it doesnt get an ip address. I'm looking to buy a small manage switch
Excellent video on using pfSense with a single NIC.
Awesome video and got me much better in understanding VLAN capabilities. I used some old junk laptop for the PoC pfSense box and successfully did this with Netgear ProSafe, an older Ubiqiti ToughSwitch 8 and some super-old Dell switch. When trying to do this with new Unifi switch though, it definitely didn't appreciate having 2 connections to my dumb switch (one for WAN and this PoC and the other separate for other PC's plugged into the switch) and all with VLAN's assigned to the 3 ports. To be fair, when I just plugged in WAN, pfSense and a LAN computer with nothing else on the switch, it certainly worked. My guess is that RSTP or STP is messing with me when it comes to loop detection but even with them disabled, could not get the Unifi switch to stop tripping out. I guess back to the older/cheaper switches for PoC work like this.
This is exactly the info I was looking for. Thank you so much for your clear and concise information!
I'm glad it helped you out. thanks for the sub!
Where was this video when I was trying to figure this out? Great work! I was looking for a video like this about 2 years ago, asked for help in pfsense forums and got talked down to because I didn't understand how to set it up. Thank you for this video.
Just 3 days ago. Glad i could help. The pfsense forums are sometimes not very welcoming to certain types of questions. I think pfsense is great piece of software and everyone should be allowed to configure it the way they want if it solves their problem.
Most people like Top from Lawrence and others show it with setting up with both wan and lan. But most of us as using it for homelab only have 1 port. This was especially useful. I only realized it after setting it up and getting into pfsense that we can use vlan to separate the port. This makes it so much clearer. LOL thanks!!!
This is EXACTLY what I was looking for. Thank you!
That's pretty amazing. A router with just single port with VLANs. Impressive.
This is so helpful, even 4 years later, as many people will be running into the issue of greater than 1Gbit Internet access and how to accept/distribute it without spending a fortune.
this just helped solve a problem i've had for over 2 years now. thank you for this!
Perfect. No waffle. Just info.
Best video with full step-by-step instructions. Thank you very much. I was able to setup my pfSense firewall router on a stick using a managed switch and VLANs. Without your help, I wouldn't be able to do it by myself. Thanks again.
Great to hear!
@@ITVOIP What do you think about OPNsense?? pfSense 2.5 has a lot of issues and after looking at some of the reddit posts I am planning to switch to OPNsense.
Thank you very much. That's what I call step by step instruction
Excellent guide. I never taught to use single port for pfsense
Awesome video. Thanks so much. This helps a ton for someone like me still just getting started with VLANs. I didn’t think doing something like this was possible, but makes a ton of sense and opens a lot more possibilities with single port micro PCs!
especially those ultra-small form factor units like a Dell Optiplex 9020! i5-4590S processor, 4gb Ram, throw in a small SSD and you have a beast of a router for about $200 max and extremely compact and reliable and I daresay being a corporate device it might just outlast those aliexpress units. If your upload + download speeds on the WAN link is less than 1Gbps you're all good to go in terms of not having this setup bottleneck your Internet bandwidth. those multiport units in aliexpress can be overpriced for what they offer vs the performance of the CPU.
@@porkbelly872 hi there. i have 800 down and 200 up internet connection. will this setup work? and not bottleneck overall network connectivity?
@@i1mran92 you will get 400 down/100 up because the WAN and LAN interface share a 1gbit link.
thank you so much man, i was suck on one part and this helped get it all working finally!
Excellent info, this can save $ for folks who wants to pfsense with single-LAN boxes available at cheaper than the purposely built multi-LAN boxes.
Thank you very much for sharing your knowledge. You have helped me tremendously. I just set up the router successfully following your instruction! Many thanks! :D
These are SOLID instructions. Great job.
Thanks for doing this. I found it really helpful. I'm setting up on a Mac mini with a Netgear 4port managed switched.
It's your basic router on a stick setup, I didn't know pfsense supported virtual interfaces. Very cool.
Thank you, i never trought about doing this. Im going to use a old Mikrotik router instead of a managed switch.
Thank You!!! Works great an old acer veriton l460 pc with an sg200-08 switch.
Best I've seen this week using my SANdisk Cruiser install media was 1007 files/sec.. Nice video buddy :D
Excellent and timely info, please keep up the good work.
Thanks - much appreciated.
I agree with xeress! informational and fast walk through without unnessary "crap talk". Keep up the good work Nick
Legend man! I literally have the same optiplex micro and wanted to use it as a pfsense router and I have a tp link switch but no idea how to vlan.
thank you! this is a very simple to understand guide
glad you liked it.
Nick, unfortunately couldn't get this running on my Netgear Prosafe GST108, but... for fun tried your dual USB 3.0 gigabit adapters on my 4th gen i3NUC, worked but wasn't too stable, just got in my Cisco SG-200, and OMG... Running like a champ!!! Thank you SO MUCH for these tutorials, appreciate your work, time and effort u put in to these for enthusiasts / tinkerers like myself. Speeds from wired and wireless APs (WiFi6 / ax) running circles around my recently purchased Ubiquiti USG. If u have a Patreon, etc, please direct me to that. Thanks again!!!
Hey I am glad everything worked out. thanks for the donation offer but i am good, i have day job.
great video, well made and clear
Awesome video sir, thank you
Nice video tutorial, thanks for sharing!!!
super helpful. thanks for making this.
Great video. Clear instructions and straightforward. Question: do you have to give the switch a static IP?
Helpful thanks. this is a great way to repurpose mini/micro PC hardware it's just a shame that they don't come with 10Gb.
Nice one. Thanks
nice video man keep them up
I actually bodged a second NIC into my Dell Optiplex using the internal mini-PCIe slot. I was planning on trying to modify the case to make the port external, but ended up just having a cat5e cable coming out of the hole for the wifi antenna (which I don't have) which is plugged into the nic inside the case. I didn't know about VLANs at the time. This way is probably easier, but my way is probably cheaper.
You are amazing!
Great video !
Very Cool !
Bonjour, merci pour cette vidéo qui m'a permis de comprendre comment faire. J'ai le même pc !.
excellent video
lol so obvious but it never occurred to me to do it !! thanks and have a subcriber
I was really wondering if I really needed to buy extra NICs or not. I've got a 10G nic and a 10G switch, there's probably not much need to buy anything else. Thanks for the video.
Hello, very good explanation. Quick question: can you use the USB ports as additional lan ports using USB/RJ45 dongle?
it will work nice solution but, to prevent packet collisions from not having separate WAN LAN, in order to rx and tx simultaneously, on one port, it has to receive and store and send if its clear, or the Ethernet will work half the duplex for each network or even 1/4 duplex, since it has to handle 4 lanes, 2 lane WAN tx/rx, and 2 lane lLAN rx/tx, the NIC has still the same principle right. nice solution, but it cannot be a standard, or everyone should only buy a 4 port smart switch for a 8 port or even 16 port requirement. nice video
Dude, I really wish you used a HP switch for this great tutorial. Trying to convert what you're doing in the CISCO config to HP is giving me a headache.
I have an older single port Celeron powered NUC and a HP ProCurve 1810G-8 that I 'thought' would be fun to setup with pfsense.
I recently came into a hp procurve myself! How has it been working out for you?
Hi there, why you didn't use wifi as secend lan port option??
Man, you are mashing that enter key, what did it ever do to you? Jokes aside, great vid!
Thanks
Why did we select 10 as our VLAN instead of just one? Great video!
Excellent tutorial, I don't need it (have SG-4860) but wanted to see and understand your configuration. if you spin up the "interface statistics" widget, do you seem many errors or collisions when the system is under high load?
I don't have this anymore. But I know there was some issues with the realtek network drivers that were used in the base bsd that pfsense used.
Thanks.
this is clever. plus you can use that dell's wifi (i'm guessing that's a wifi antenna port at the back) as an AP and will make it a solid setup. definitely be doing this kind of rig.
unfortunately the wifi isn't detected.
i tried this, and yes mine was not detected as well. :)
for some who might want some further reading about supported wireless cards:
docs.netgate.com/pfsense/en/latest/wireless/supported-wireless-cards.html
@@zeusuki7328 Wifi NICs are not suited for use as an AP but if you have an old wireless router sitting around most likely it can be used in AP mode. In the past I've used an Archer C9 and Asus RT-AC68U and they worked well.
Is there any performance drop doing this? I would ask if it could handle 200 Mbps internet connection
Is there any performance loss? i.e. I have gigabit ethernet, would your setup make it single duplex? or only 500mbps? Could you put a PC on the wan side and run a throughput test and see if you get full gigabit? Thanks!
I can add this to my list of things to check...but yes there is a performance hit. if your internet (not ethernet) speed is more than 500Mb this setup is not good.
trying to follow your configurations and it seems to me it is similar to cisco inter vlan router on a stcik configuration. Im going to try it.
Nice!!! Probably missed the part where the cable from WAN coming? Did you have your ISP modem as bridged opassing through the connection or coming from the wall to the port8 and through that straight to the pfsense?? - in which case you didnt configure pfsense with your ISP credentials so how come and you have internet? (Pf sense doesnt have ero touch configuration to auto setup itself)
Am I missing something here?
WAN is on DHCP by default. WAN port was created as a vlan in the console mode section. you probably jumped directly into the GUI portion and missed this critical step.
ruclips.net/video/z59_MWWPL-Q/видео.html
I followed this video exactly with a tp link switch but pfsense isn't getting a WAN IP. Any idea what the issue could be?
Hi there , on your mini pc that you had setup as pfsense there was one lan and wifi card !! why you didn't use network card as WAN and wifi card as LAN?? ,so from network card you get internet from wifi card give internet to all your devices. then all your devices on your network can connect to your pfsense wirelessly and access to the internet, and you hadn't used vlan or use a switch ?????thankyou
For an intel nuc or such
Thank you very much for this guide. I get lost on setting port 8 as access point as I have a netgear gs908e. Any ideas?
in the manual it shows vlan usage but i am not entirely sure.
Any advice for running Pfsense on Proxmox? I cannot seem to get this setup going, and I suspect its down to not having the host or vm networking set up correctly. I lose access to Proxmox (and thus pfsense running in a VM) when I try.
This worked for me: www.dlford.io/pfsense-nat-how-to-home-lab-part-3/
Thanks for the video. can I use one of the remaining trunk ports for a access point?
yes...you can use the remaining ports on the switch plugin what ever you like.
Great video! It would have been easier and faster to use cli on the switch though ;)
I don't think this switch is capable of CLI.
@nicks hardware
How do you setup with a Cisco 2960 switch
Why did you get a private IP address allocated on your WAN interface?
Nick, I have an HP Procurve 1800-8 (J9029A). Do you know if that switch would work?
From the data sheet it looks possible.
I was looking for this thanks. My situation though I have those ISP provided (sagemcom fast 5250 ) wireless router/modem combo. I have FTTN 50/10 mbps connection DSL to modem; PFsense will be Dell inspiron 530 (1 nic). It will just be those 2 devices for now. PFsense box and ISP box, will this work? I want the ports on the ISP box to still work and use it for Wifi.
yes. you would need to put your is[ modem /router into bridge mode. yes wifi can still operate in this mode but you won't be able to route through it with pfsense. Your wifi will be completely on a separate network this way.
Your other option is to do a double NAT setup. and for any public port forwarding you would need to do this at 2 levels. the isp router and pfsense - really messy.
You can also use a standard soho router that is supported by openwrt and had vlan capable ethernet ports which luckily most of the router supports openwrt do.
thanks for the info. I I try to use what ever i have. If you have a combination of hardware that does the same thing please list it out for anyone else that might benefit.
nice vib
Thanks for this video. Help me a lot. Can you advise what are the Pros and Cons between pfsence on 1 network port PC and 2 network port PC?
2 is always better than 1. Easier to manage and more data you can route with 2 network cards. Some people want to use use these low powered single nic PC's - this gives them that option.
He brought the paper clip, bro.... 🙏🏽
You didn't talk about the compatibility of the NIC itself on the Dell - is yours 802.1q compatible or is there something nuanced that you left out?
The only thing i can add is if it is supported by freebsd drivers it should work. I didn't do anything outside of the video to make this setup work. There are times when certain hardware (network card or switch) that advertise supported features are still not compatible under certain operating systems. So going by 802.1q alone i can't say that every card that has this feature will work. Best is to try.
Can you do this on openwrt router act as a manage switch?
Does the WAN need any configuring or firewall rules set with this 1-port setup? Or, is pfSense set to its default - block any into WAN/allow any out from LAN - like it is on a 2-port setup? Thank you.
Once the Vlans are created, LAN & WAN interfaces are assigned. PFSense will treat the interfaces exactly as if they are hardware ports just like a 2 or more port setup. No other special configuration needed.
Will this work in docker? Thanks!
how secure is it compare to have 2 different nics?
Hi there, if we have laptop and we want to use wireless instead of the rj45 cable to connect to the pfsense then what should we do? In this case you have 1 pc, 1 switch and connect your laptop with rj45 cable to the switch, my question is we want 2 more laptops connect to network by wireless? In this case what should we do?
just plug a wireless access point in one the other ports
It's also worth nothing that, if you have a 1Gbit WAN connection or you plan on sharing files between seperate vlans, then you'll only be able to get 500Mbps out of it with this configuration, because upstream and downstream and both used at the same time and that hits the link speed max .
Thank God I read this comment before placing an order for this switch
I need some guidance, can you help
I'm pretty sure this is incorrect.
1 Gbit/s in full-duplex means that 1 Gbit/s can be sent and 1 Gbit/s can be received.
In other words: a 1 Gbit/s port can handle 1 Gbit/s incoming & 1 Gbit/s outgoing traffic -> you will be okay.
Only exception: you have a symetric 1 Gbit/s connection. Than you won't be able to fully saturate your connection in both directions at the same time.
I am having trouble with creating VLAN's, testing on VM with a NIC with single port, i did exactly the same thing as you, but when i try to get to the webConfigurator, i got timed out for no reason, tryed to reboot pfSense, but it doesn't respond. It just works if i don't create or configure a VLAN, what do i do? I have tested the same version as you and newest ones. (I am not using any switch)
This is definitely something different than what i am doing.
if you are working with VM's you can create an additional NIC for the VM. that would make more sense than vlans
Hi there, if we have pc mini with only 1 rj45 lan port, can we use normal switch or we must to use switch with vlan support?? Thnx
vlan switch
Hi im using pfsense in my vmware, but i couldnt get pfsense to detect my smart switch LAN interface when i plug it in. do you know why?
maybe you need to add an additional virtual nic in your vmware config.
Why is linking at 100 mbps? Gigabit PC and switch, I have same problem
Do you need a L3 switch for this to work or could a L2 switch with vlan work?
You can do routing on the router and/or via layer 3 switch.
I have layer 3 for internal VLAN routing (IP cams VLAN and LAN VLAN) and as well single interface access to VLANS IP CAM, Internet Modem and LAN) which requires routing on the PFSENSE (I actually use OPNSense)
In this way internal cam access is offloaded from the PFSENSE. The switch and PFSense are both gateways but the gateway in the switch uses the PFSense as it's default gateway so that the switch will be the internal gateway for all and anything not routable by the switch is passed to PFSense.
PFSense uses the switch as it's LAN gateway.
Super complex... Satisfies my IT guy max complexity requirements
Do you have video on how to setup a Cisco Catalyst 2960c 8 port?
no...not something i use in day to day setups.
Thanks. Very useful. I think you are not connecting pfsense PC directly to your ISP line, I mean there is another router or modem in between because your WAN IP is in the private IP range.
I bought a used sg300-28 switch and tried your way it worked.
However when I connected the pfsense PC directly to my ISP line, where I needed to enter some pppoe settings (ISP username & password), the vlan interface settings changed.
So sad to use my USB to NIC again !
Thanks again for the knowledge
for ppoe setup you need to go to INTERFACES -> WAN
switch the IPv4 configuration to PPPoE
Now scroll down to the PPPoE configuration section and enter your USERNAME and PASSWORD
and click the SAVE button at the bottom of the page.
If you you see apply changes at the top of the page hit that as well.
@@ITVOIP Thanks man. You are really kind.
Is this a bit like VM reverse engineering (sic)?
Is this still an option? Are you saying you no longer trust vlans? I was planning to use an old laptop to do this but now i'm not sure..please advise
Should work fine. - It does for me.
Great awesome video. I have tried puting a vlan on both lan and wan just our of curiosity and that does not work. Does anyone have a clue as to why this failed?
Correction : it worked but i had to reboot pfsense and make sure the port connected to the pfsense box was tagged to both VLANs used for LAN & WAN.
I'm trying to replicate what you did with D-Link DGS-1100 but still fail. Any idea how to do it with DGS-1100 ?
sorry...have not tried with dlink.
So WAN is port 8, it has to send it out over port 1, router receives it and routes the traffic, then has to send it back over the same interface, switch gets it back in on 1 then routes it over to the destination. I'm kind of new to this, help me understand, if there's local traffic within the same subnet the switch should be able to see the destination and just handle it right there without it needing to go over to the router, correct? However if multiple hosts are needing to route out to the WAN its all having to go over that single interface, is this fine since normal http traffic ect shouldn't bottleneck that?
vlan's are a compromise in a every solution that i have seen. you get a feature at the cost of something. In this case it's performance or full capacity of WAN/LAN speed. Yes it's possible to saturate the LAN/WAN if you have enough traffic. With 10 GB nic's now shipping with some PC's it becomes less of a problem.
@@ITVOIP I see, thank you.
Can you do the same thing using esxi instead of a switch? If so... how?
you should but i don't know my way around esxi.