Pfsense 7100 switch Virtualization

Networking & Firewalls
1

Hello everybody,

I’m trying to figure out my network configuration with my pfsense 7100. In the 7100s UI there is a place to configure the switch that is built into the machine. I would like to make it so that only specific VLANs go over specific ports. I tried it on the physical machine and the layer 3 switch it’s plugged into started throwing STP errors.

In order to figure this out I generally like to use GNS3 to test everything before I put it out. I haven’t found the budget to buy two of everything. I have a project setup with a virtualized pfsense instance with a couple of vlans going to different clients. However it doesn’t seem to have the features of the 7100 where it manages a switch or a group of interfaces like a switch. Has anyone managed to do this before?

I tried digging through the 7100s system to see what its doing but all I can seem to find is it looks like it sets up a LAGG for each VLAN, including WAN and LAN. So I presume if I could recreate it that way? I tried searching through the file system but I cannot figure out where the config for the interfaces is actually stored. Which makes me think it’s generated on the fly when the config.xml changes.

Anybody got any ideas?

Thanks!

2

You have to do it via their config as it will wipe out changes done via the command line on reboot or reload of the XML file.

Been a while since I worked on one of those but they have the docs here:

3

thanks Tom. I know I have to do it via the web UI. I was thinking if I could figure out how the physical system is configured with the switch I could put that into a VM to recreate it and test out different configurations.

4

It’s specialized hardware so I doubt there is any way to simulate it, or at least I don’t know how.