I Need some guidance on getting my lab networking configured. Any support is appreciated.

My Lab consists of:

2 cisco switches: 2960s(access layer 2) and 3750X(ip routing/layer 3) 
Xenserver with PFsense 6 eth ports

4 Vlans on the cisco switch configured:

vlan1   svi 
vlan100 svi
vlan200 svi
vlan600 svi (transit network L3 to Pfsense)

I am working on setting up Intervlan routing, but cant see the vlan interfaces in PFsense...

Would I need a trunkport with 801.q, a /30 vlan, or a routed non-switchport connected to PFsense LAN/OPT?

Im following this guide but not able see VLan interfaces or establish communication with the Firewall and switch.


Thanks for your time.

  • How is the switch connected to the firewall?
    – Ron Trunk
    Jul 19 '20 at 20:24
  • @RonTrunk I have tested two ways..One using a non switch port from the switch to the PFsense LAN port. Another way was using a switch access port with a /30 subnet for a transit network
    – BocajNET
    Jul 20 '20 at 5:28
  • We need a simple diagram to know how you have connected your 4 devices.
    – Ron Trunk
    Jul 20 '20 at 11:56
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer.
    – Ron Maupin
    Dec 17 '20 at 18:57
  1. In case if you are using Cisco3850 or any other layer3 switch

You can create svi in layer3 switch and connect firewall inside interfàce(LAN) to layer3 switch (no-switchport interface ) Configure firewall inside interface with ip address and switch interface leave as it is For example Switch(config)# int f0/1 Switch(config)#no shutdown /*This interface ip will be vlan1 ip that is this switch interface will connect to firewall LAN interface

Have a default route in layer3 switch

In layer3 switch

Ip route (pointing towards firewall inside interface gateway

In firewall add route

ip route 192.168.68 .1

ip route Ip route Ip route

Remaining configuration as usual in firewall configuration.....natting , default route in firewall pointing towards isp gateway for internet access and for reverse traffic for incoming traffic

In layer3 switch

Svi configurations , DHCP pool configuration if required , access-list configuration to restrict traffic among vlans , spanning -tree configuration..

. 2) In case if your are using C2960 layer2 switch

If your are using c2960 switch then this switch is layer2 switch you should create subinterface in firewall and connect switch 2960 and configure switch port as trunk connectiing firewall . ....

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.