Bridge/LAG/VLAN questions.

[kaseki]

Hello OPNsense fans, pre-newbie here.  I have two questions that bear on whether OPNsense (with Sensei) will be suitable for me to implement IPS between router and LAN switch.  My goal is an appliance that lurks over a communication path like a spider, chomping on only the bad critters in the traffic flow.

Background: The relevant part of my configuration is the trunk between a router (Ubiquiti ERPro-8) and an L2 smart switch (CISCO SG200-26).  The router is controlling two WANs in load balance mode, each WAN is fed by 1 Gbps GPON fiber.  The trunk from router to switch carries the untagged default VLAN stream, and that of three tagged VLANs.  Further, the trunk is operated as a two channel L2 hash LACP LAG, thus potentially approaching the bandwidth potential of the two WAN connections.

LACP VLAN Bridge question: I have read various descriptions and directions on this site that convince me that LAGs can be built, transparent bridges can be built, and VLANs can be included in data flows, although there may be a lingering question about mixed tagged and untagged VLANs.  What I haven't found is any indication that all three can work together -- the appliance/software performing as a transparent bridge (or even some configuration that accomplishes essentially the same result), while subjecting a LAG with VLANs to IPS and related security protection. Are there any known impediments to building this capability with OPNsense + Sensei using appropriate hardware such as displayed on this site.

Port question: The directions here for building a "Transparent Filtering Bridge" require an "OPT1" port to be established for management.  Am I correct in understanding that with my intended configuration that implies use of 5 physical ports on the OPNsense appliance.

Thank you for any help