Looks like you have things right (in my limited perspective). The only thing I can think of is that VLAN 1 is sometimes treated by switches and routers alike as a "special" VLAN and funny things happen when it gets tagged. Have you tried 2, 3, and 4 as an alternative? In either configuration, have you told your pfSense box that tagged interface X is the LAN, assigning it an IP (192.168.1.1 by default), and accessing that IP from the same VLAN (trunked, same switch, or otherwise) from elsewhere?
If you configured the physical interface as your LAN device, you're going to have to have a native (or default) VLAN on the switchport. Presuming interface 1 (bge0) on the system is your inside interface and inteface 2 (bge1) is your WAN, your config should look something like this: LAN --> vlan1 (192.168.1.1) WAN --> bge1 (DHCP) OPT1 --> vlan2 (192.168.2.1) OPT2 --> vlan3 (192.168.3.1) Forgive me, I don' remember the precise naming convention of the VLAN interfaces, so I'm not certain those names are right. That and the OPT IP spaces are picked out of a hat for orthogonality. RB --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]