Help on setting up a VLAN on QNAP

[Ricardopaiva]

Hi all,

I'm trying to setup a VLAN on my QNAP to isolate it on the network and be able to control which devices can communicate with the NAS.
I'm using pfSense so I've created a new VLAN/interface on pfSense and set it up accordingly, as well as the switch here I'm connecting my NAS.

NAS Model: TS-231P
OS: 5.0.0.1932 build 20220129
Network Setup: Single Port setup

The problem is that my ethernet adapter get's two ip addresses. One for the LAN and other for the VLAN.
I wasn't expecting it to get an IP for the LAN because if that happens, afaik, I'm not able to restrict the access for the devices on the LAN.

To set it up I went to Network & Virtual Switch -> Network -> Interfaces and for the second adapter I clicked on Add VLAN. The VLAN ip is well assigned, based on the settings I have on pfSense.

Here's a screenshot:
https://pasteboard.co/qPz0hVslEVIb.png

The problem here is that the NAS is advertising some services through the LAN network ip. For example Bonjour, Samba services and so on and I wanted those services to be advertised through the VLAN, so I can use my firewall to control which devices have access to these services.

Am I missing some configuration on the NAS? Can you point me out how to do it?

Thanks,
Ricardo

[Ricardopaiva]

Hi,

Anyone using VLANs on NAS?

[Ricardopaiva]

I just found out that there's a service bound feature that allows you to bind a certain service with a certain network adapter.

Unfortunately, as you can see in the picture, it is binding to the LAN interface and it's ignoring the VLAN.
https://pasteboard.co/FQqNmAvabBZ8.png

[Moogle Stiltzkin]

yes but my vlans is configured on the 2 managed switches, ubiquiti unifi ap and also on my pfsense router. mines simple though, private lan for desktop and nas, while the rest is in a guest network vlan (includes iots and other insecure devices)

any of these help?
https://www.reddit.com/r/qnap/comments/ ... n_station/

https://www.reddit.com/r/qnap/comments/ ... ith_vlans/

https://www.reddit.com/r/qnap/comments/ ... ple_vlans/

https://www.reddit.com/r/qnap/comments/ ... ent_vlans/

https://www.qnap.com/en/how-to/tutorial ... deployment

https://www.qnap.com/en/how-to/faq/arti ... an-adapter

viewtopic.php?t=154706

[Ricardopaiva]

Thanks for the reply.
I've gone through some of those posts during my research but none seems to be similar to the issue I have.
Since I'm using pfSense on a 4-ports nic and I have 1 available, I've used it.
I disabled VLAN on NAS and I added this port to pfSense and created a new interface that's going to be used only by the NAS.

It seems like the VLAN implementation in QNAP software is not the obvious/right one.

Won't spend more time on this but would be glad if someone could point me out the solution for this.

In your case you're using a managed switch so I guess you're able to use the switch to disable traffic on the LAN and just allow traffic on the VLAN. In my case I'm not able to do it because I don't have a managed switch. I was expecting to have the QNAP interface connected to the VLAN only... the LAN interface should be disabled

In any case, really appreciate your help!