So this is a bit of a mixed question so I will try to explain the best I can. I am planning a redesign of my home network using pfSense, Untangle, and a Cisco switch. The objective is to have 3 separate networks - gaming, WiFi, and lab.
I previously set this up successfully using a Cisco 1841 router, but due to its age and limitations, I am replacing it with pfSense, mainly due to the uPnP capability for the gaming network. So most of the work is already done.
The pfSense hardware has 4 NICs - WAN, LAN, OPT1, and OPT2. The focus would be OPT2 for the gaming network. First, I would set OPT2 to support uPnP.
Next, the switch is Cisco SG300-20 running in layer 3 mode. I created a VLAN30 for it for the lab network for my servers and workstation, and it routes to the LAN port on the router.
So part 1 of the question is, can the SG300-20 have a separate gateway for the gaming network which would route to OPT2, such as VLAN 40? I want to keep the gaming and lab networks completely isolated from each other for security reasons. The switch has a feature called private VLAN settings, is this where the gaming VLAN should be created?
Part 2 is, since the switch is in layer 3 and VLAN 40 routing to 10.0.0.1 first before out to the Internet, will my Xbox One still get an Open NAT and will the WII U have all 65535 UDP ports open with the OPT2 interface set to uPnP in pfSense?
I have attached a diagram to help illustrate the goal.