We also assume that you have a working knowledge of the concepts, and purposes, of IP addresses, gateways, switches, and routers. Note: while we have tried to make the whole exercise of setting up a VLAN as simple as possible, it is assumed that you, the reader, have a basic grasp of network configuration. In this article, we will see how you can create a VLAN and then configure it to allow data packets from another VLAN to cross over into it. The LAN part indicates that we are partitioning physical hardware while the virtual part indicates we are using logic to accomplish it. Note I have ordered 2 Intel NICs for the pfSense machine but would still like to keep the VLANs for that configuration.A Virtual Local Area Network or VLAN is a way of partitioning computers on a network into cluster groups that serve a common business purpose. However I can’t connected to the pfSense via VLAN_LAN on ether6. So I get and IP for WAN on the pfSense and the Mikrotik says ether2 is connected to both VLANs. With a dhcp server with pool 192.168.77.10-192.168.66.254 on bridge1(although I know this is unnecessary as I could set a static IP on the WAN interface of the pfSense machine. This is the configuration that isn’t working: I would like to change that so the firewall gets an address from the default LAN network on the Mikrotik. I’ve had it running previously but with the “WAN” as a VLAN with it’s own DHCP to give the pfSense an address.

throughput is not an issue since I only have 50Mbps internet downstream and the servers in DMZ have Gigabit between each other).

I have a Mikrotik RB2011UiAS-2HnD routing my traffic currently but would like to set up a pfSense machine on a device with 1 network port.

If so, please point me in the right direction! On to my issue. I’m not used to the whole forum thing so forgive me if this is in the wrong place or with wrong formatting.

Mikrotik vlan firewall