Force Untagged traffic to specific VLAN on mixed port

[Sensler3000]

Hi all,

iam new to OPNSense and have a question if following setup is possible:

i have a virtual machine host connected with 1 Physical NIC to the firewall. The host automatically tags the traffic of the VMs with a specific VLAN tag, all fine. However the host itself does send untagged traffic. Since i dont want to have untagged traffic at all my idea was to assign 2 VLANs to the physical NIC.

igp 1 VLAN10 for the VMs
igp 1 VLAN9 for the host

Both on the same physical NIC. VLAN10 is clear and will be send tagged by the host no problem. However will OPNSense assign the untagged traffic from the host itself to VLAN9 than or what will happen with the untagged traffic ?

thanks for the help!

[Sensler3000]

So i did some testing and it looks like it does not work. If i only have 2 VLANs on the interface the router simply does not interact with the client if no VLAN tag is send.

You also cannot set a VLAN without a Tag or 0 so i most likely have to deal with untagged and tagged traffic on the same interface.

Is there any way for OPSense to tag incoming (untagged) traffic with an VLAN ID ?