OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: chris.walker01 on June 24, 2023, 08:03:59 AM

Title: Suricata with LAGG - Which interface?
Post by: chris.walker01 on June 24, 2023, 08:03:59 AM
Hi all,

I'm using vlans on a lagg interface.

When using VLANs, the doco says to select the physical interface (lan) in the Suricata settings. I can't see anything mentioned about what to do with LAGG interfaces though.

Both LAN and the two physical interfaces appear in the drop down list of interfaces within the Suricata settings.

Do I continue to choose LAN, which is the lagg interface, or do I select the two physical interfaces that are in the lagg?