Update:
I've created a pfsense VM, bridged to vmbr0 and it's not picking up VLAN tag traffic, only untagged.
EDIT: that was my fault. "Vlan aware" was unchecked from vmbr0. VLAN 20 works with pfsense virtualized, but not with the physical box.
EDIT2:
SOLVED. I've tagged only the pfsense...