Pfsense SPAN port setup with multiple vlans

Networking & Firewalls
1

Need advice setting up a SPAN port from multiple VLANs from 1 physical interface. I can’t setup 1 bridge with multiple interface members to the span port as that traffic traverses the vlans.

  1. Can I setup 1 vlan per bridge to the span port to accomplish this? (Ie. 1 bridge = Lan vlan -> Span , another bridge = IOT vlan -> span, another bridge = kids vlan -> span)

  2. Do I include the WAN port to the span port?

  3. Is a span port on a switch a better option & where is the ideal placement for this switch to monitor all traffic going in and out across all vlans?

2

I would do it on the switch. When you mirror the port from the switch it should contain all the traffic.