VLANs on multiple NIC ports on firewall

[jphilebiz]

Hi everybody,

I'm reconfiguring my home network and would like to (if it makes sense) to use vlans on multiple NICs on the firewall. Let me explain:

• I have a 6-port Topton firewall w/ I-226v ports
• I wish to deploy 3 VLANs: A) main B) visitors (for WiFi) and C) IoT
• The house has 3x Unifi APs coming in the closet via two Ethernet outputs (or cables)
• I have the Topton ports configured as is: ETH0 is WAN, ETH1-5 are LAN in a bridge in OPNSense

So can I make a VLAN work on multiple ports on the firewall? On all? If yes I think I need to create a bridge to do this correct? Am I allowed to configure two bridges (or more)? Same with the IoT network. Would I need to configure a bridge for vlans and one for IoT?

If my approach does not make sense please do tell me :)

Thanks!

[dseven]

You can create a bridge that has VLAN devices (subinterfaces) as members.

What you can NOT do is have a base NIC (i.e. untagged) be a member of a bridge and also have VLAN subinterfaces on that NIC at the same time.