Connecting WiFi AP to Third PFSense Port

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Connecting WiFi AP to Third PFSense Port

Oubadah

676 posts

Ultimate Geek
+1 received by user: 12

#128757 22-Aug-2013 14:23

I have PFSense on one of the 3 port Alix boards. I only use one WAN and the LAN to my switch, so the third port is unused.

I have a switch port shortage. Can I connect my wireless AP to that spare port on the Alix, and if so, how do I set up the port in PFSense?

breakaway

112 posts

Master Geek
+1 received by user: 5

#883048 22-Aug-2013 21:28

What's your intention? To have the WiFi on a different subnet isolated from your wired network?

Inphinity

2780 posts

Uber Geek
+1 received by user: 1184

#883051 22-Aug-2013 21:32

Depends on what your AP supports, but you'll probably need to set the interface on PFSense to a static IP in a different range from your other LAN devices, and set DHCP on your AP, if it has it (or DHCP via that interface on PFSense otherwise) to use that subnet and point to the PFSense if ip as the gateway, then enable whatever connectivity you need between LAN1 and LAN2 interfaces.

1080p

1332 posts

Uber Geek
+1 received by user: 152
Inactive user

#883055 22-Aug-2013 21:42

pfSense has documentation.

Zeon

3926 posts

Uber Geek
+1 received by user: 759

Trusted

#883066 22-Aug-2013 21:59

I have never used this feature but you can bridge interfaces in pfsense if you want it on the same subnet as your wired subnet. If you don't mind it being on a different subnet just put another subnet in the box for static (and make sure u enable DHCP for that range) e.g. if your main LAN is now 192.168.1.1 then call this WirelessLAN and set it to 192.168.2.1/24

Speedtest 2019-10-14

webwat

2036 posts

Uber Geek
+1 received by user: 145

Trusted

#886548 29-Aug-2013 14:44

Does pfSense still specify one port as "orange" for the DMZ? if you set to that it would have access to internet but not your local wired network, and would not be fully firewalled against internet. Looks like you can set it to a LAN though.

Time to find a new industry!