====== Create VLANs on pfSense ======

^ Version  ^ Status        ^ date      ^ Author        ^ URL  ^
| 0.1     | First draft  | 03 Mar 2023  | Fabio Pagotto  |      |

===== 1. abstract =====

This tutorial covers how to install VLANs on a pfSense.

It describes how to:

  * Create a VLAN
  * Add VLANs as an interface to a port.
  * Set up the VLAN interface for use.

===== 2. tutorial =====

==== 2.0 Important preliminary information ====

The following items are required to complete this tutorial:

  * A fully installed pfSense
  * Access to the web interface

==== 2.1 Create VLANs ====

Once you have logged into pfSense, it will look like this.

{{technische-dokumentationen:tutorials:pasted:20230322-104000.png? 800}}

Now click on **"Interface"** and, in the drop-down menu, on **"Assignments"**. After you have reached the next menu,
click on **"VLANs"**. In the next menu, you must now click on the green **"+ Add"** button. You will now be taken to the VLAN
configuration interface, which looks like this.

{{technische-dokumentationen:tutorials:pasted:20230322-133845.png? 800}}

Here is a brief description of the 4 setting options.

  * **Parent Interface:** Specifies on which port the VLAN should run. \\ A VLAN can only be configured on one port 

  * **VLAN Tag:** Which number the VLAN should have. Usable range between 1 and 4094 

  * **VLAN Priority:** Defines the priority of the VLAN. Usable range between 0 and 7. \\ (Unless required, it is recommended to ignore this field) 
  
  * **Description:** Description of the VLAN (not required for creation, but recommended)

To create a VLAN, you must set the above fields appropriately and then click on the blue **"Save"** button.
The VLAN is now created. It should be listed in the VLANs tab.

{{technische-dokumentationen:tutorials:pasted:20230322-141903.png? 800}}

==== 2.2 Configure VLAN as interface ====

So that it also works on the specified **"Parent Interface"** you must click on the tab **"Interface Assignments" tab** tab.

Once there, select in the drop-down menu next to **"Available network ports:"** select your VLAN. Then click on it, on **"+ Add"**.

Your VLAN should now appear as an interface in the Interface Assignment list.

{{technische-dokumentationen:tutorials:pasted:20230427-152759.png? 800}}

Now click on the blue text of the newly created interface. You will now be taken to the configuration settings of the VLAN interface.

This looks as follows:

{{technische-dokumentationen:tutorials:pasted:20230427-154536.png? 800}}

Make the following settings,

Click on **Enable Interface**to switch on the interface (VLAN).

It is best to enter the same description as for the VLAN.

For **IPv4 Configuration Type** **Satic IPv4** from. 

Now enter the following under **Static IPv4 Configuration** enter the IP address for the VLAN. For the subnet, use the same number as the VLAN.
Select the subnet mask /24.

This should then look as follows:

{{technische-dokumentationen:tutorials:pasted:20230427-160621.png? 800}}

This means that IP addresses on the VLAN can also be used on other devices.

Then click on **Save**

When prompted, click on **Apply Changes**

Your VLAN is now fully set up. You can now configure rules and much more with the VLAN.

===== 3. source directory =====

Listed below are the sources that were used to create the documentation

Official documentation from Netgate:

https://docs.netgate.com/pfsense/en/latest/vlan/configuration.html \\
https://docs.netgate.com/pfsense/en/latest/config/interface-configuration.html#config-interface-configuration-basics