Tutorial: pfsense LAGG & LACP & Setup

Подписаться 335 тыс.

Просмотров 59 тыс.

50% 1

Connecting With Us
---------------------------------------------------
+ Hire Us For A Project: lawrencesystems.com/hire-us/
+ Tom Twitter 🐦 / tomlawrencetech
+ Our Web Site www.lawrencesystems.com/
+ Our Forums forums.lawrencesystems.com/
+ Instagram / lawrencesystems
+ Facebook / lawrencesystems
+ GitHub github.com/lawrencesystems/
+ Discord / discord
Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 lawrence.video/swag
AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 www.amazon.com/shop/lawrences...
UniFi Affiliate Link
🛒 store.ui.com?a_aid=LTS
All Of Our Affiliates that help us out and can get you discounts!
🛒 lawrencesystems.com/partners-...
Gear we use on Kit
🛒 kit.co/lawrencesystems
Use OfferCode LTSERVICES to get 5% off your order at
🛒 lawrence.video/techsupplydirect
Digital Ocean Offer Code
🛒 m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
🛒 hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
🛒 www.privateinternetaccess.com...
Patreon
💰 / lawrencesystems
⏱️ Timestamps ⏱️
0:00 pfsense lagg and lacp intro
1:16 pfsense what is link aggregation
3:52 pfsense how to create a LAGG LACP interface
5:18 pfsense LAGG Protocol Types
7:22 pfsense LAGG for Layer 2 Redundancy
7:54 pfsense Assign LAGG interface
8:16 pfsense Assign IP to LAGG interface
8:42 pfsense LAGG interface Firewall Rules
8:59 pfsense LAGG interface DHCP Server
9:37 LAGG LACP Switch Setup
14:26 Testing LAGG LACP Failover
15:40 pfsense LAGG VLANS
17:28 adding more physical interfaces to an existing LAGG
#pfsense #Firewalls

Наука

Опубликовано:

12 авг 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 102

@tekhead 3 года назад

You are like a mind reader. I was learning in depth about LACP last night. I love your videos. Thank you for the great work. Cheers from Canada!

@pkvalsvik 3 года назад

These tutorials are really great! Sincesrly, thank you Tom, and to the rest of your crew!

@LAWRENCESYSTEMS 3 года назад

You're very welcome!

@MichaelKaufman257 3 года назад

Just set up my pfsense box last weekend using your guide, now I’ll be following this guide too! Thank you!!!

@voodoovinny7125 3 года назад

I just watched your TrueNas Core LAGG video and this video seems to have more correct information concerning LACP with its different modes of LACP especially the 802.3ad mode.

@berndeckenfels 3 года назад

A good demo is using iperf with multiple connections (threads), they typically add up to the full bandwith - but only if the hashing is on the correct protocol level (tunnels and vlan require a different hashing on deeper levels besides the normal level 2 ip+port)

@LAWRENCESYSTEMS 3 года назад

Yup

@SchoolforHackers 3 года назад

Because of the vlan tagging?

@berndeckenfels 3 года назад

School for Hackers actually I am not sure about the vlan, i might be wrong there. At least I had problems with the xmit hash policy (layer3+4) not working for gre tunneled links (it was not distributing the tcp connections inside the tunnels). Might be not a problem for normal VLANs, maybe for Vxlan tunnels. For the typical NAS I guess distributing the layer3 clients is more than enough load balancing.

@SchoolforHackers 3 года назад

Yeah it gets a mile deep here, doesn’t it?

@EyeOfMaat 3 года назад

I havent tested with pfSense specifically, but if you only have 2 available port and your connected via the LAN, you can create a LAGG using the single available port, then swap your PC to the LAGG, then delete the LAN, then add the free LAN port to the LAGG. this way you dont lose connection while making the switch, and dont need to connect to the WAN port. This worked on old FreeNAS Corral, so I assume it will work with pfSense

@ffmattypemt 3 года назад

Great video. I have two lag setups between two UAP HDs and 24 port 250W Poe switch and lag between switch and Netgate Sg-3100. One note is that you have to setup lag downstream device before upstream lag or the connection breaks.

@Basis213 5 месяцев назад

As always, great video tutorial! I watched a few of your clips before and I was wondering that I haven't subscribed yet...But I did this time ;)

@andreavergani7414 3 года назад

As always well done! Good job Tom

@notsure7874 3 года назад

The hero I needed! Setting up a VPN device for about 50 users on one of those i3 4 port fanless 4 port machines. Now - I don't NEED link agregation, but it helps!

@homeassistantiptv8068 3 года назад

Thanks for the video! I have a issue that popped up as of lagging 2 connections. I can no longer access any of my haProxy sites on LAN (sometimes they start working but when they do it takes approx 5 mins for the page to come up and sometimes it just timesout); i can only access them from the WAN. I have been going through your videos trying to find a fix. Before the lagg config. I also notice when i restart my unifi switch port for the lag - the sites will work fine via LAN as well BUT only for a few mins.

@viaujoc 3 года назад

Thanks for the video. It demonstrates that LAGG is not that complicated to set up. It is just a shame that pfSense does not allow the creation of a LAGG interface in the console. That would have help me many times when doing the initial install a new pfSense box.

@scottluebke5012 2 года назад

It's easy to set up because he's using a Unifi switch, and Unifi switch configuration is SO easy. Doing LAGG on most switches is not easy.

@psycl0ptic 10 месяцев назад

@@scottluebke5012 hmmm...it's easy on others. unifi is confusing for vlans and lagg since they do things non standard. eg LACP on HPE Aruba and Dell OS 10 switches is easy.

@tinohappyface 6 месяцев назад

@@psycl0pticfacts. My switch freaked out and wanted to be adopted.. I lost all DNS.. it was scary.. just went back and gonna think this over.

@logicawe 3 года назад

Such a neat video! Thanks for the quality content 👍

@LAWRENCESYSTEMS 3 года назад

Glad you enjoyed it!

@hayzeproductions7093 3 года назад

Ben using an HP Procurve 24 port switch and have 0 problems running it with a 4 channel LAGG LACP setup. Did some testing using a proxmox with lacp setup, and ISCSI drive with FreeNAS. Ran a virtual machine on that ISCSI drive and linux drive speed test was able to read close to 7gb/s write 3.5gb/s. I just slapped it all together and freenas had 8 ssd drives in raid 0. There was no production running on it. I love my procurve switch, but it took me a couple days to figure out how to get it setup as there are no options in the web interface it had to be configured via putty and console cables.

@doveshouse 11 месяцев назад

So what is also effectively create a bridge for those two ports I'm assuming centering they both have one IP address and are on the same subnet of course?

@jeffm2787 2 года назад

What I've found with cable failures is 99.9% of the time a person is nearby when the cable 'fails', they then walk away and come back to deal with the 'failed' cable. i.e. People cause most cable 'failures'. Now if you use cheaper then cheap cables and gear YMMV. Cheap is not always about what it costs.

@MrFurriephillips 3 года назад

I've definitely seen switchPORT failures, which is why I always try to make use of a LAG, when possible.

@dontmakemelaugh8502 3 года назад

Great content, Love It, Thank you !!

@jaycahow4667 Год назад

I have no Parental Interfaces listed in the box when trying to setup a LAG so I cannot select my OPT1 and OPT2 interfaces. What do I need to do to get the Parental Interfaces listed?

@jlficken 2 года назад

That only thing that I really wish Untangle had was the ability to create a LAGG for the switch uplink. I should set up a pfSense box sometime just to play with it.

@doveshouse 11 месяцев назад

I assume this could get a little dicey in an ipv6 world no? Or maybe some additional configuration steps would be needed. I assume reports would share the same link local and global addresses eh?

@fredapril8384 Год назад

wondering if I could split my Fiber 3go internet to two 1go ports on my pfsense to leverage that internet speed to all the house (2 swicthes, 3 WIFI routers, IPcam)...(I wish my pfsense box had 2.5 of 10 go ports but it don't) Advises, opinions welcomed.

@FinderX 3 года назад

Nice tutorial, the only thing absent was some practical use cases, you mentioned but not showing some.

@LAWRENCESYSTEMS 3 года назад

Got to save something for the next videos ;)

@FinderX 3 года назад

@@LAWRENCESYSTEMS Oh, great! well, time to wait then the next one.

@stephenbuchanan7282 3 года назад

We need a way for you to make "choose your own adventure" versions of the videos. I needed this exact information last night...but for an SG-3100, not a 5100. I'm starting to suspect that LAGG is not supported for the built-in switch ports on the 3100 (LAN1..LAN4), only actual interfaces (LAN, OPT1, WAN). Can anyone confirm?

@looseycanon 3 года назад

I really don't understand why would anyone lagg to a router. Sure, betwene switches? Absolutely. From a switch to a storage or app server? Certainly. I did exactly that. But from a router to a switch? Usually link beyond the router has the least bandwidth avaliable to the network, so it would seem useless for most applications... Given that VRRP would serve as better solution (because you also plan for HW failiure).

@EyeOfMaat 3 года назад

In my case, my switch is rather basic so traffic between VLAN's goes to pfSense then back out to the other VLAN. If there is alot of traffic going across different VLAn, it will help. LAGG could allow my PC to connect to my NAS at 1gbps whilst allowing other traffic to flow smoothly. In my case i use a seperate port/cable/VLAN for iSCSI traffic, but a LAGG could achieve a similar result.

@qwerty74 3 года назад

You are a blessing.

@penguinairlines 3 года назад

Hmm... I really want that Cat6 reinforced cable, but they're totally out of stock on the affiliate link :/ I found the them on the monoprice site though.

@cfbc3440 2 года назад

do you have something like this for lacp trunk link pfsense to a dell powerconnect 5448

@MatthewHill 3 года назад

Interesting. I've tried almost this exact thing a couple of times in the past in my home lab with several different switches, with and without lacp, but without much luck. Each time things worked well for an hour or two, I saw the improved throughput (from multiple clients) and redundancy, but after that my network always started to get unstable. Random dropped pings, even between machines on unaffected switches, pairs of hosts that couldn't communicate (but could communicate with other hosts), DHCP failures, lots of entries in the ARP caches, etc. In each case, removing the lagg returned everything to normal almost instantly. Still haven't figured out what I was doing wrong.

@homeassistantiptv8068 3 года назад

have you figured or discovered anything with this issue? I am having the same issue

@andyrandy0815 Год назад

Have you activated LACP or used Link Aggregation without LACP (which is not as stable in case of misconfiguration)

@JuanLopez-db4cc 3 года назад

Excellent!

@AnthonyCelata Год назад

Hey, love your videos. I have a question if I may, is multi-WAN the same as WAN aggregation? I have a Motorola MB8600 and a multi gig subscription and would like to use WAN aggregation to achieve the higher throughput from my modem to my soon to be built pfsense box and then out of that to a multi gig switch. But I cant find a definitive answer to is WAN aggregation the same as multi-WAN.

@LAWRENCESYSTEMS Год назад

Not the same more details here: ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-YjhEjWs8YzE.html

@AnthonyCelata Год назад

@@LAWRENCESYSTEMS Thank you! I'm sitting here trying to figure it out. thanks!

@MatthewMcNair 3 года назад

Found this video after playing with this earlier today. Got everything configured this morning and everything was great for about an hour then everything lost connectivity. The only way to get back up was to login to pfSense locally and restore a backup.

@homeassistantiptv8068 3 года назад

Did you ever find a fix for this?

@MatthewMcNair 3 года назад

@@homeassistantiptv8068 I did get it working. After I restored my previous configuration I set it back up and it worked without any issue the second go round. It's been running without issue for 3 months now. I think the issue I was having may have been with the ports I had originally chosen on my switch to setup the LAGG.

@homeassistantiptv8068 3 года назад

@@MatthewMcNair Thanks, i got mine up and running as well! I had done it as per the video but then what i did was delete the lagg setup on PF and re-did it and as soon as i hit Save - that did the trick. So almost the same as you where it took it the 2nd time.

@Simran1004 3 месяца назад

How can I access gui via Lag Interface IP ?

@tubastud06 3 года назад

I HATE that the console port on the XG6 switch is right next to port 1. I know it's a small device and not a lot of options as to where to put it, but dang Ubiquiti, move it more over to the edge or something.

@LAWRENCESYSTEMS 3 года назад

Yeah, accidentally sticking in the wrong whole is annoying.

@georgelza 11 месяцев назад

Tom, I have some open ports on my pfSense. Switch is a 24port Unifi. Is it possible to configure LACP on pfSense and on Unifi and then move the vLan's onto the newly created trunk pair. with a matching setup on the unified side ? like to trunk 2 x 1GbE ports on both sides.

@LAWRENCESYSTEMS 11 месяцев назад

Yes

@georgelza 11 месяцев назад

@@LAWRENCESYSTEMS found your video from last year... just now need to develop "bravery" to action on my setup.

@alexanderclara3406 3 года назад

I don’t understand how to bring em1 (LAN) to em3 and create LAG with em1+2. just get kicked out of web GUI

@vaughnbay 5 месяцев назад

No, I wouldn't like to hire you Tom but I would like to see you produce videos on OPNsense and IPV6. Interesting that you don't, isn't it?

@LAWRENCESYSTEMS 5 месяцев назад

Use what makes you happy, but since OPNSense is slow on security updates compared pfsense lawrence.video/opnsense it's not really something I am interested in.

@tinohappyface 6 месяцев назад

DNS stopped working.. any idea?

@drcamp8843 2 года назад

Would you assign 3 VLANs to 3 single interfaces or create a LAGG and assign all 3 VLANs to this one?

@LAWRENCESYSTEMS 2 года назад

it depends on your use case.

@veshapidze Год назад

Can this only work with a switch or can we aggregate pFsense with a NAS that supports LACP (e.g. Synology)?

@LAWRENCESYSTEMS Год назад

Probably but I don't recommend routing storage.

@LVLouisCyphre 2 года назад

Where did you get those short cables? The shortest I've been able to find commercially is 0.5 ft. It appears to me those cables are shorter.

@LAWRENCESYSTEMS 2 года назад

Those are .5 kit.co/lawrencesystems/homelab-rack-build/monoprice-cat6-ether

2 года назад

How about WAN?

@mikejakubik 3 года назад

This only provides redundancy on cabling, what about a config for pfsense with multiple switches which themselves are linked via MLAG?

@LAWRENCESYSTEMS 3 года назад

yes, for better redundancy use multiple switches.

@mikejakubik 3 года назад

@@LAWRENCESYSTEMS I'm just hoping carp will run on a LACP interface (im planning on using two Netgate devices in HA mode), from what the pfsense guys tell me it should be doable.

@katdaddychap 3 года назад

I need to learn how to do this with an old cisco 3750 switch

@DementiaAcerbus 3 года назад

It's not too bad at all. Lots of videos about it on youtube too. Doing it with a 2960G and my pfsense box now. Basically in Cisco you would just create an etherchannel bond with LACP as active and connect it over. (make sure to only do it in powers of 2 though, so like 2 ports, 4 ports, 8 ports, etc). Cisco's algorithm with LACP doesn't get along with other configurations of number of ports.

@katdaddychap 3 года назад

@@DementiaAcerbus Thanks, good to know. I have 2 cisco 24port SW stacked. I plan on creating the etherchannel on the SPF ports on SW1 and SW2. I need to config them as trunk also. The change the config on the UDM-pro as well. I'm a noob to all of this and not an IT person by no means.

@SB-qm5wg 3 года назад

< all about the fibre bonds

@LAWRENCESYSTEMS 3 года назад

It's good to have plenty of fiber in your diet. :)

@KeshavSreekumar 3 года назад

Is there any way to convert an existing vlan setup to vlans over a lagg interface without losing any of the rules I already have set?

@viaujoc 3 года назад

Yes. Create your LAGG interface and add the VLANs to it. This will create new Network ports such as "VLAN 99 on lagg0". Then just change the port on the interface that you want to migrate from a single link to a LAGG from "VLAN 99 on ix0" (replace ix0 with your port name) to "VLAN 99 on lagg0". Since you did not change the interface (LAN, OPT1, etc.) itself but just its binding, all the rules will remain intact.

@peterhansen7706 3 года назад

What benefits is there for gaming with this? better latency? or just fail over?

@LAWRENCESYSTEMS 3 года назад

Just failover.

@miles5600 3 года назад

Where do you got that very thin ethernet cable?

@LAWRENCESYSTEMS 3 года назад

ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-l6qK0uOKlF0.html

@mikeydk 3 года назад

This comes out the same day as I realize the udm pro does not do lagg... :'(

@_Steven_S 3 года назад

Neither does the ER-4. No switch-chip, no LAG.

@vyacheslavaleshin8137 2 года назад

great thans 4 U from Russia! I want 2 hawe 1 DHCP for 3 physical interfaces (virtual switch). is this metod acceptable for it?

@LAWRENCESYSTEMS 2 года назад

DHCP works with LACP & LAGG

@vyacheslavaleshin8137 2 года назад

@@LAWRENCESYSTEMS works fine! thanks alot twice!)

@burdulilodo4614 3 года назад

Hi. I installed pfSense VM on ESXi. Can i do that on it?

@LAWRENCESYSTEMS 3 года назад

I never tried

@MrFurriephillips 3 года назад

Dude! That's hilarious - your position as a videographer, does rather make things difficult for you, as you're continually facing away from the ports & their labels!

@LAWRENCESYSTEMS 3 года назад

Yup, it can be a challenge.