36 lines
1.6 KiB
Markdown
36 lines
1.6 KiB
Markdown
---
|
||
tags: [netzwerk, heimnetz, vlan]
|
||
---
|
||
|
||
# VLANs
|
||
|
||
**Tagged:** Ports, die VLAN-Traffic durchlassen.
|
||
**Untagged:** Ports für ein bestimmtes Gerät, weisen das VLAN zu.
|
||
|
||
## Definitionen
|
||
|
||
Parent-Interface aller VLANs: `igc0` (LAN-NIC OPNsense). Stand: 2026-05-25 aus OPNsense-Config.
|
||
|
||
| VLAN | OPNsense-IF | Gateway | DHCP-Range | Netz |
|
||
| ---------------- | ----------- | ----------- | --------------------------- | -------------- |
|
||
| 1 — default LAN | igc0 | 192.168.1.1 | 192.168.1.100 – .199 | 192.168.1.0/24 |
|
||
| 10 — USER | vlan01 | 10.10.0.1 | 10.10.0.50 – .199 | 10.10.0.0/16 |
|
||
| 20 — GUEST | vlan02 | 10.20.0.1 | kein DHCP | 10.20.0.0/16 |
|
||
| 30 — IOT | vlan03 | 10.30.0.1 | kein DHCP | 10.30.0.0/16 |
|
||
| 40 — SERVER | vlan040 | 10.40.0.1 | 10.40.0.50 – .199 | 10.40.0.0/16 |
|
||
| 41 — DOCKER_NAS | vlan041 | 10.40.10.1 | 10.40.10.50 – .128 | 10.40.10.0/24 |
|
||
|
||
DHCP-Backend: dnsmasq (Kea ist disabled). Domain: `internal` bzw. `internal.home` (LAN+DOCKER_NAS).
|
||
|
||
## Virtuelle IPs (auf lo0)
|
||
|
||
| IP | Zweck |
|
||
| -------------- | -------------------------------------------------- |
|
||
| 10.40.0.201/16 | HAProxy VIP `HAProxy40_lan_wan` (intern + extern) |
|
||
| 10.40.0.202/16 | HAProxy VIP `HAProxy40_lan` (nur intern) |
|
||
| 172.4.4.3/32 | HAProxy SSL-Server (Legacy, im Standard-Frontend) |
|
||
|
||
## Verwandt
|
||
|
||
- [[03 Bereiche/Heimnetz/Netzwerk/VLANs einrichten]]
|