Good evening,
My goal is as follows:
rj45 (WAN) → CRS317-1G-16S+ → pfSense (WAN) → pfSense (LAN) → CRS317-1G-16S+
I am using rj45 to spf+ adapters and this works.
Reason:
My ISP provides a modem that will do 5G on one rj45 port. But I can not get pfSense to negotiate to 5Gig, but I can get switch-os to see my modem as a 5Gig connection.
Question:
Since I have to go thought my switch to get the full speeds, how should I set this up? I do have other devices on the switch that are not the most secure, so I want to keep the wan and the connection going to pfSense as isolated as possible until pfSense LAN comes back to the switch. Should I use port isolation, VLAN, or something else? What is the recommended way to do this in mikrotiks os? Should I be going to router os or can I do this in switch os securily?