Configuring the Switch Ports

This optional guide shows the steps required to configure the 4 switched Ethernet ports as discrete ports.

The following attributes are used in this configuration guide but can be changed to suit other requirements:

• SG-3100 Ethernet Port: LAN4

• IP Address Assignment: 192.168.100.1/24

• VLAN Tag: 4084 (VLAN tags should be 4081-4084 for LAN Ports 1-4)

Note

When connecting to the GUI, do NOT connect to any port being configured during this procedure or the device will lose connectivity to the GUI.

1. Open the pfSense^® Plus software GUI and log in.

2. From the menu, navigate to Interfaces > Assignments.

   

3. Go to the VLANs tab.

   

4. In the lower right-hand corner of the screen, click + Add.

5. Choose mvneta1 (MAC Address) - lan from the Parent Interface drop-down menu.

   

6. Set the VLAN Tag to 4084. Type Lan port 4 as the Description. Click Save.

   

   Note

   This guide uses 4084 as an example. The value for the tags must be unique for each VLAN and must be between 1 and 4094. Avoid using values that are already in use. Best practice is not to use 1.

7. Go to the Interface Assignments tab.

8. Ensure Available network ports: is correct. It is VLAN 4084 on mvneta1 - lan (Lan port 4) in this example. Click on + Add.

   

9. Click on OPT2. This is the Interface that matches the new VLAN being created.

   

10. Check the Enable Interface check-box.

11. Change the IPv4 Configuration Type from None to Static IPv4.

    

12. Scroll down and make the IPv4 Address 192.168.100.1/24 (in this example).

    

13. Click Save.

14. Click Apply Changes.

    

15. Go to Interfaces > Switches.

    

16. Go to the VLANs tab. Click in the Enable 802.1q VLAN mode check-box and click Save.

    

    The table will change to reflect the new mode.

17. Click + Add Tag.

    

18. Type 4084 for the VLAN Tag and 4 for Member(s). This represents LAN4 (port 4) and tagged should be unchecked.

    

19. Click + Add Member to add the LAN Uplink, 5. This member should be tagged as shown.

    

20. Click Save.

21. Click on beside VLAN group 0.

    

22. Click Delete beside Member(s) 4. This will remove LAN4 from this VLAN group.

    

23. Click Save.

24. Go to the Ports tab.

    

25. Click on Port VID 1 beside LAN4. Backspace through 1 and insert 4084, the new VLAN ID.

    

26. Click Save.

This completes the configuration of a discrete port on the SG-3100.

By default all traffic is blocked. Create the appropriate firewall rules to allow the traffic. Go to Firewall > Rules and then the OPT2 tab (in this example) to configure the firewall rules.

Enable DHCP if necessary by going to Services > DHCP Server, OPT2 tab (for this example).