I am a noob in networking so please correct me in any way if my understanding is incorrect. In many of Tom’s videos, he demonstrated using a netgate device (3100 etc) and a Unifi switch to plan out a small office/home VLANs. However, it seems that he would use only 1 LAN port from the netgate sg-3100 to pass through all VLANs to the switch’s trunk port and then select which switch port to which VLAN. (e.g. Office Network Design and Planning with VLANs, LLDP, Rules, IoT, Guest using UniFi & pfsense - YouTube )
My question is, Wouldn’t those VLANs share the (1Gbe) bandwidth? Why doesn’t he prefer to fully utilize the LAN/OPT ports of SG-3100? E.g. 1 LAN per LAN/OPT port so that the full bandwidth can be dedicated to that LAN. If he needs more VLANs than the ports, then he can share the trunk port.
Or is my understanding incorrect, and that the switching between LANs happen at switch level (unifi switch) despite having firewall rules at router (sg-3100) level? Does the firewall only establish connection and does not impede LAN-to-LAN traffic? If that’s true, can I use a 10 Gbe switch for LAN traffic with the same setup? Assuming NICs, switch and cables are 10Gbe, and just the router (3100) is 1Gbe.