📘 Creating a VLAN in pfSense

Written by: Dylan Barrett
Steps Recorded on: July 20, 2025

🔧 VLAN Creation

1. Navigate to Interfaces → VLANs in the pfSense web GUI.
2. Click Add.
3. Set the following:
   • Parent Interface (e.g., em0, ix0, etc.)
   • VLAN Tag
   • (Optional) VLAN Priority
   • Description for the VLAN
4. Click Save, then Apply Changes.
   

📑 Assign the VLAN to an Interface

5. Go to Interfaces → Assignments.
6. Use the last dropdown to select the VLAN you just created and click Add.
   

⚙️ Configure the New Interface

7. Click the interface name (e.g., OPT1, VLAN10) to edit it.
8. Enable the interface.
9. Select Static IPv4 or DHCP:
   • If static, assign an IP (e.g., 192.168.10.1/24)
10. Click Save, then Apply Changes.
    

📡 Enable DHCP for VLAN

11. Go to Services → DHCP Server.
12. Select the interface you just configured.
13. Check Enable DHCP Server on this interface.
14. Set the Address Range (e.g., 192.168.10.100 to 192.168.10.200).
15. Click Save, then Apply Changes.
    

🔐 Create Basic Firewall Rules

16. Navigate to Firewall → Rules, select the VLAN interface tab.
17. Add rules to allow the necessary outbound traffic for the devices.

Here are the default rules I typically add to new interfaces:

⚠️ These are basic allow rules for HTTP, HTTPS, and DNS. You should restrict access further for guest or IoT VLANs.

✅ Next Steps

• Test connectivity from a client device on the VLAN.
• Add additional firewall rules for DNS, NTP, ICMP, or inter-VLAN access as needed.
• Set up VLAN tagging on switches and APs if applicable.

🔙 Back to pfSense Docs