Solved Question about bridges and vlans

[wolffnx]

The question is very simple and sounds nebwie..
Its posible to make vlans under one network interface?
If I assing an diferent ip range to diferents devices on my network,for example:

Cameras > 192.168.3.0/24
Computers > 192.168.4.0/24

Will be possible to process it trough PF as a VLANS?

I know,the ideal setup will be have a managed switch and make the vlans there,but I am poor

Thanks guys

 

[SirDice]

Its posible to make vlans under one network interface?

That's the whole point of a vlan(4). For example, I have one em1 "physical" ethernet interface with one single ethernet cable to my switch. Then run multiple VLANs over it, em1.10 is on VLAN 10, em1.20 is on VLAN 20, etc.

,the ideal setup will be have a managed switch and make the vlans there

You need a switch that's VLAN aware, the typical run-of-the-mill cheap, unmanaged, switch usually isn't. That said, an 8 port managed switch won't break the bank nowadays. They're a bit more expensive than the unmanaged ones, that's for sure, but it's not THAT much more expensive.

IEEE 802.1Q - Wikipedia

en.wikipedia.org

Will be possible to process it trough PF as a VLANS?

It's an ethernet interface, like every other.

pass in on em1.10 from any to any

Not much different from:

pass in on em1 from any to any

 

[kent_dorfman766]

Yeah, what SirDice said...

 

[wolffnx]

That's the whole point of a vlan(4). For example, I have one em1 "physical" ethernet interface with one single ethernet cable to my switch. Then run multiple VLANs over it, em1.10 is on VLAN 10, em1.20 is on VLAN 20, etc.


You need a switch that's VLAN aware, the typical run-of-the-mill cheap, unmanaged, switch usually isn't. That said, an 8 port managed switch won't break the bank nowadays. They're a bit more expensive than the unmanaged ones, that's for sure, but it's not THAT much more expensive.

IEEE 802.1Q - Wikipedia

en.wikipedia.org

It's an ethernet interface, like every other.

pass in on em1.10 from any to any

Not much different from:

pass in on em1 from any to any

you answer is more than clear,
I need "marked" packets comming from a managed switch(tagged or port based vlan), but I need a managed switch
then I can manage in PF and(before) create the bridges , for now that is the perfect solution,but for now even I cant buy a 6/8 managed switch,so move on
Thanks!