Switch configuration

Here is a summary of the configuration for the L3 switch:

1. Create the VLANs, including a transit VLAN that will only be used for the pfSense device
2. Make the port of the pfSense device an untagged member of the transit VLAN (i.e. an access port)
3. Configure the VLAN membership of the other ports
4. Configure the Port VLAN ID (PVID) for each port
5. Enable inter-VLAN / L3 routing
6. Create an L3 interface for each VLAN and corresponding subnet
7. Create a default route to the pfSense device for all external traffic
8. Configure the DHCP service on the L3 switch or a relay to the dedicated DHCP server

The L3 switch has a default route for 0.0.0.0 pointing to the IP address of the pfSense device. What this does, is that all routing is local to the layer 3 switch, and only external networks are routed to the pfSense box.

At this point, from your switch, you should be able to ping 10.0.1.1 and get a response back.

Next: pfSense configuration

1 2 3