I use vlans on core in a similar way. With jails.
1 Like
VNET Jails, bridges and VLANs are layer 2, so they behave exactly like you demand, if configured correctly.
The NAS host does not even need an IP address in the “jail VLAN”.
Deploy as many different VLANs as you like - no problem, all perfectly supported and working.
What you cannot do and what has been the topic of much heated debate, is separate the “control plane”, i.e. the web UI, and the file sharing services - because they all run on the single IP stack of the NAS host.
But jails and VMs? Separate as you see fit.
1 Like