[SOLVED] VLAN config with Managed Switch

[kwat]

HI All:

I am currently running latest version of Proxmox VE 7. My network configurations is as follows:

• All routing, firewall and VLAN configuration/management done by physical pfSense appliance. VLAN10 and VLAN52 are configured
• pfSense is connected to an physical 4-port managed switch via trunk port. VLAN10 uses ports 1 &2 and VLAN52 use ports 3 & 4.
• Proxmox VE is plugged into managed switch port 3 (VLAN52)

This configuration is up and running with no issues. What I want to do is to add another NIC to Proxmox and plug it into managed switch port 2 (VLAN10) and have the ability to create VMs and assign to either VLAN. Is this a simple as creating a new bridge in Proxmox and assign it to the new NIC or is there more involved?

Any help/suggestions would be greatly appreciated.

 

[Dunuin]

Is this a simple as creating a new bridge in Proxmox and assign it to the new NIC or is there more involved?

Yes.

But in my opinion that is wasted hardware. A single NIC can handle multiple VLANs over a single port. So that could all be done with just one NIC on the pfsense and PVE. Or you could bond those two NICs, letting both use both VLANs, so you get double the throughput.
And why use a 4 port switch at all when all you do with it is to connect your pfsense with your PVE? Then you also just could use two ethernet cables and directly connect your two pfsense NICs with the two PVE NICs. That way you don't need that managed switch.

 

[kwat]

Yes.

But in my opinion that is wasted hardware. A single NIC can handle multiple VLANs over a single port. So that could all be done with just one NIC on the pfsense and PVE. Or you could bond those two NICs, letting both use both VLANs, so you get double the throughput.
And why use a 4 port switch at all when all you do with it is to connect your pfsense with your PVE? Then you also just could use two ethernet cables and directly connect your two pfsense NICs with the two PVE NICs. That way you don't need that managed switch.

OK. How would I do this with a single NIC?

 

[Dunuin]

You work with tagged vlans instead of untagged vlans.
There are a lot of tutorials out there. First hit on google for example was this video: https://www.youtube.com/watch?v=ljq6wlzn4qo

 

[kwat]

You work with tagged vlans instead of untagged vlans.
There are a lot of tutorials out there. First hit on google for example was this video: https://www.youtube.com/watch?v=ljq6wlzn4qo

Implemented your suggestion and everything is working as expected.

Thank you for your help