Wireless

SysLog Server For WIFI AP

swansense — Thu, 23 Apr 2026 17:32:38 GMT

@ortizat typically for syslog it using the following ports. 514 for UDP 601 for TCP 6514 TLS Netgear devices i have dealt with usually use UDP by default so you need to send the logs to the Syslog server UDP port. As someone who uses syslog daily i don't think you are going to get any benefit from collecting logs from an AP as 99.9% will be noise. Usually I would only collect the audit logs and in most cases that can only be done by the Controller of the APs/Switches etc.. so we would only collect logs from the controller.

wifi drops in and out

stephenw10 — Wed, 25 Feb 2026 16:10:17 GMT

@johnwjr said in wifi drops in and out: The internet comes in and feeds the pfSense, then to the Ubiquiti switch, connected to the switch are 6 Wi-Fi routers Do you actually mean WiFi Access Points there? Like UniFi devices perhaps? But, yes, an IP conflict with something on the network could certainly cause a problem like this.

USB WiFi adapter for PfSense?

NC1 — Wed, 25 Feb 2026 15:50:41 GMT

@linuxpc4me said in USB WiFi adapter for PfSense?: is there a realistic solution using a USB WiFi dongle for wireless connections to the LAN? Define "realistic". First, using USB in networking is a bad idea. You can do it ad-hoc, but for an infrastructure device such as router, it's rarely good. Second, pfSense is a FreeBSD derivative and inherits hardware compatibility from FreeBSD. Wireless support in FreeBSD currently stops at N. Third, most USB dongles are designed to be used in station mode only. What you need, meanwhile, is access point (AP) mode. Assuming you still want to do this, you will need to find a dongle that (1) works in AP mode, and (2) is old enough to be supported on FreeBSD. So realistically, you should either get an external access point or abandon pfSense in favor of OpenWrt, which is a Linux, so it supports wireless up to AX and should add BE support later this year.

Fail to load TP-Link AC1300

stephenw10 — Wed, 17 Dec 2025 13:53:10 GMT

Good choice. Better in almost every way!

upgraded to pfsense 2.8.0, WiFi devices report intermittent 'no internet access'

skubany2 — Wed, 27 Aug 2025 13:26:28 GMT

"Enable DNS registration" did the trick. I can now access WIFI (Win11) and LAN (Win7) hosts in both directions via host name. On Win7 I had to modify OS firewall rule to add the WIFI subnet address to allow file sharing. I did not have to change Win11 OS firewall at all, from the default. Also found out where the "localdomain" comes from; it is set in pfSense :) There are still quirks to work out, such as LAN host not showing up automatically in WIFI host's list of discovered network devices and vice versa. I have to explicitly enter the LAN host. I understand, or guess, it's an issue with blocking protocols that are responsible for the discovery part. At some point I'll look at that but it is not a pressing issue. I have to now apply this change to my parent's network, which have the same issue. Thank you to everyone that helped.

WPA3 Enterprise WiFi | OpenWRT AP with Pfsense Router, Firewall, and RADIUS Server

alphilon — Fri, 08 Aug 2025 12:26:31 GMT

@johnpoz Thank you! Now I think I understand. This actually seems better than how I thought it worked before because I was nervous about having an open port on the WiFi VLANs.

SG-1100 and a USB based Atheros AR9271

provels — Tue, 05 Aug 2025 20:57:52 GMT

@opticalc Intel.

wifi card

jhmc93 — Wed, 30 Jul 2025 21:13:46 GMT

@stephenw10 Solved! I'm running pfsense on proxmox so I passed through the wifi adapter but forgot to tick all functions and pci express box. It now works thanks for your help

Access Point keeps disconnecting / No WiFi

newbieuser1 — Sun, 04 May 2025 11:32:51 GMT

@elvisimprsntr thanks for the chart! Getting rid of the ISP's Bridge Mode router and plugging the ethernet cable from the wall directly in Vault's WAN port has solved it...hopefully permanently.

Openwrt ONE

JonathanLee — Tue, 08 Apr 2025 15:01:10 GMT

@w0w You can also run Squid on OpenWRT I am told there is so many packages I have been playing with OpenWRT because TP-Link was doing so weird data harvesting and pfsense caught it in the act after I just installed openwrt per @johnpoz recommendations. I just run it in bridge mode now

running PFSense on a mobile hotspot

adisonverlice — Wed, 02 Apr 2025 05:13:43 GMT

@stephenw10 in that case, will buy one of these, run pfsense plus, and connect the barrel to the router using wire guard. doesn't sound that hard...

M.2 Card for WiFi AP

provels — Fri, 14 Mar 2025 16:32:21 GMT

@stephenw10 Still a step up from my 20 year old Buffalos! :)

netgate 1100 wireless wan question

stephenw10 — Thu, 13 Mar 2025 21:47:54 GMT

Yes, so the WiFi connection should behave like a second WAN. You should see a gateway for it, added automatically if it's dhcp. Set that as the default gateway in Sys > Routing > Gateways and it should send all traffic that way.

Wireless access point functioning via pfsense router, but the access point is no longer accessible by devices connected to it

[[global:former-user]] — Fri, 07 Mar 2025 02:29:39 GMT

Turns out a factory reset on the access point (actually an EAP610, not AX1800, despite the latter being plastered all over the box) fixed the problem entirely. I shall never know why, because it wasn't working on the factory default settings initially. I vaguely understand why what I changed before broke it further, but that's it.

iwlwifi driver - where to get/find it for pfsense 2.7.2

zero84 — Fri, 07 Feb 2025 08:35:47 GMT

@stephenw10 I was only testing with the mobile AP of my smartphone because this was planned to be the only use case. I have an identical second tiny pc which I plan to use for HA. Maybe I'll give the wifi setup a new try on this one before building up the cluster. As I'm running pfsense in a vm on proxmox (I was passing through the wifi nic) I still could setup a small linux vm for the wifi stuff and do the failover via a virtual network. But as it is only a nice to have feature, there's no need for this to really function. It's more of a fun project trying to get the wifi failover working and getting deeper into freebsd/pfsense ;)

Ubiquity Devices showing offline, but they are online.

johnpoz — Thu, 23 Jan 2025 21:36:29 GMT

@DenverDesktopsSupport you should see your AP sending traffic to the IP of the controller over 8080 Here I can see my APs talking to the controller 192.168.2.13, .2 is AP, .3 is AP .6 is a flex mini - sure if I let it run longer would see .4 checking in. Another one of my AP. root@UC:/home/user# tcpdump tcp port 8080 -n tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on ens3, link-type EN10MB (Ethernet), snapshot length 262144 bytes 18:06:51.984496 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [S], seq 1295904412, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 4], length 0 18:06:51.984574 IP 192.168.2.13.8080 > 192.168.2.2.33366: Flags [S.], seq 1349332694, ack 1295904413, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 18:06:51.985319 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [.], ack 1, win 1825, length 0 18:06:51.985819 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [.], seq 1:2921, ack 1, win 1825, length 2920: HTTP: POST /inform HTTP/1.1 18:06:51.985872 IP 192.168.2.13.8080 > 192.168.2.2.33366: Flags [.], ack 2921, win 497, length 0 18:06:51.985903 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [.], seq 2921:5841, ack 1, win 1825, length 2920: HTTP 18:06:51.985917 IP 192.168.2.13.8080 > 192.168.2.2.33366: Flags [.], ack 5841, win 485, length 0 18:06:51.985953 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [.], seq 5841:7301, ack 1, win 1825, length 1460: HTTP 18:06:51.985966 IP 192.168.2.13.8080 > 192.168.2.2.33366: Flags [.], ack 7301, win 479, length 0 18:06:51.985986 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [.], seq 7301:8761, ack 1, win 1825, length 1460: HTTP 18:06:51.985996 IP 192.168.2.13.8080 > 192.168.2.2.33366: Flags [.], ack 8761, win 473, length 0 18:06:51.986032 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [P.], seq 8761:9995, ack 1, win 1825, length 1234: HTTP 18:06:51.986042 IP 192.168.2.13.8080 > 192.168.2.2.33366: Flags [.], ack 9995, win 467, length 0 18:06:51.992519 IP 192.168.2.13.8080 > 192.168.2.2.33366: Flags [P.], seq 1:739, ack 9995, win 501, length 738: HTTP: HTTP/1.1 200 18:06:51.992926 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [.], ack 739, win 1918, length 0 18:06:51.993288 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [F.], seq 9995, ack 739, win 1918, length 0 18:06:51.999471 IP 192.168.2.13.8080 > 192.168.2.2.33366: Flags [F.], seq 739, ack 9996, win 501, length 0 18:06:51.999900 IP 192.168.2.2.33366 > 192.168.2.13.8080: Flags [.], ack 740, win 1918, length 0 18:06:53.722261 IP 192.168.2.3.43278 > 192.168.2.13.8080: Flags [S], seq 783712136, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 4], length 0 18:06:53.722342 IP 192.168.2.13.8080 > 192.168.2.3.43278: Flags [S.], seq 4229788064, ack 783712137, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 18:06:53.723115 IP 192.168.2.3.43278 > 192.168.2.13.8080: Flags [.], ack 1, win 1825, length 0 18:06:53.723890 IP 192.168.2.3.43278 > 192.168.2.13.8080: Flags [P.], seq 1:8071, ack 1, win 1825, length 8070: HTTP: POST /inform HTTP/1.1 18:06:53.723948 IP 192.168.2.13.8080 > 192.168.2.3.43278: Flags [.], ack 8071, win 473, length 0 18:06:53.735694 IP 192.168.2.13.8080 > 192.168.2.3.43278: Flags [P.], seq 1:571, ack 8071, win 501, length 570: HTTP: HTTP/1.1 200 18:06:53.736341 IP 192.168.2.3.43278 > 192.168.2.13.8080: Flags [.], ack 571, win 1897, length 0 18:06:53.736530 IP 192.168.2.3.43278 > 192.168.2.13.8080: Flags [F.], seq 8071, ack 571, win 1897, length 0 18:06:53.739507 IP 192.168.2.13.8080 > 192.168.2.3.43278: Flags [F.], seq 571, ack 8072, win 501, length 0 18:06:53.739953 IP 192.168.2.3.43278 > 192.168.2.13.8080: Flags [.], ack 572, win 1897, length 0 18:06:54.183099 IP 192.168.2.2.33368 > 192.168.2.13.8080: Flags [S], seq 572379967, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 4], length 0 18:06:54.183179 IP 192.168.2.13.8080 > 192.168.2.2.33368: Flags [S.], seq 2259487007, ack 572379968, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 18:06:54.183523 IP 192.168.2.2.33368 > 192.168.2.13.8080: Flags [.], ack 1, win 1825, length 0 18:06:54.186178 IP 192.168.2.2.33368 > 192.168.2.13.8080: Flags [P.], seq 1:1048, ack 1, win 1825, length 1047: HTTP: POST /inform HTTP/1.1 18:06:54.186237 IP 192.168.2.13.8080 > 192.168.2.2.33368: Flags [.], ack 1048, win 501, length 0 18:06:54.189203 IP 192.168.2.13.8080 > 192.168.2.2.33368: Flags [P.], seq 1:221, ack 1048, win 501, length 220: HTTP: HTTP/1.1 200 18:06:54.201339 IP 192.168.2.2.33368 > 192.168.2.13.8080: Flags [.], ack 221, win 1892, length 0 18:06:54.201339 IP 192.168.2.2.33368 > 192.168.2.13.8080: Flags [F.], seq 1048, ack 221, win 1892, length 0 18:06:54.201816 IP 192.168.2.13.8080 > 192.168.2.2.33368: Flags [F.], seq 221, ack 1049, win 501, length 0 18:06:54.202194 IP 192.168.2.2.33368 > 192.168.2.13.8080: Flags [.], ack 222, win 1892, length 0 18:06:55.250457 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [S], seq 2944371139, win 2144, options [mss 536], length 0 18:06:55.250533 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [S.], seq 3678065154, ack 2944371140, win 64240, options [mss 1460], length 0 18:06:55.251135 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [.], ack 1, win 2144, length 0 18:06:55.251869 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [.], seq 1:537, ack 1, win 2144, length 536: HTTP: POST /inform HTTP/1.1 18:06:55.251919 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 537, win 63784, length 0 18:06:55.251968 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [P.], seq 537:1073, ack 1, win 2144, length 536: HTTP 18:06:55.251978 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 1073, win 63784, length 0 18:06:55.252691 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [.], seq 1073:1609, ack 1, win 2144, length 536: HTTP 18:06:55.252732 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 1609, win 63784, length 0 18:06:55.252769 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [P.], seq 1609:2145, ack 1, win 2144, length 536: HTTP 18:06:55.252778 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 2145, win 63784, length 0 18:06:55.253495 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [.], seq 2145:2681, ack 1, win 2144, length 536: HTTP 18:06:55.253531 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 2681, win 63784, length 0 18:06:55.253575 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [P.], seq 2681:3217, ack 1, win 2144, length 536: HTTP 18:06:55.253585 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 3217, win 63784, length 0 18:06:55.254271 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [.], seq 3217:3753, ack 1, win 2144, length 536: HTTP 18:06:55.254292 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 3753, win 63784, length 0 18:06:55.254334 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [P.], seq 3753:4289, ack 1, win 2144, length 536: HTTP 18:06:55.254345 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 4289, win 63784, length 0 18:06:55.255010 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [.], seq 4289:4825, ack 1, win 2144, length 536: HTTP 18:06:55.255087 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 4825, win 63784, length 0 18:06:55.255465 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [P.], seq 4825:4887, ack 1, win 2144, length 62: HTTP 18:06:55.255489 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [.], ack 4887, win 63784, length 0 18:06:55.257519 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [P.], seq 1:275, ack 4887, win 63784, length 274: HTTP: HTTP/1.1 200 18:06:55.258734 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [F.], seq 4887, ack 275, win 1870, length 0 18:06:55.260294 IP 192.168.2.13.8080 > 192.168.2.6.61641: Flags [F.], seq 275, ack 4888, win 63784, length 0 18:06:55.260772 IP 192.168.2.6.61641 > 192.168.2.13.8080: Flags [.], ack 276, win 1869, length 0 No need for wireshark - you can do the packet capture right on pfsense, or right on the AP even - here is running tcpdump right on the AP and you can see the traffic to the controller from this AP Hallway-BZ.6.7.10# tcpdump tcp port 8080 -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes 18:13:02.035317 IP 192.168.2.2.33482 > 192.168.2.13.8080: Flags [S], seq 1380051285, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 4], length 0 18:13:02.035816 IP 192.168.2.13.8080 > 192.168.2.2.33482: Flags [S.], seq 3050138923, ack 1380051286, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 18:13:02.035995 IP 192.168.2.2.33482 > 192.168.2.13.8080: Flags [.], ack 1, win 1825, length 0 18:13:02.037520 IP 192.168.2.2.33482 > 192.168.2.13.8080: Flags [.], seq 1:1461, ack 1, win 1825, length 1460: HTTP: POST /inform HTTP/1.1 18:13:02.037621 IP 192.168.2.2.33482 > 192.168.2.13.8080: Flags [.], seq 1461:2921, ack 1, win 1825, length 1460: HTTP 18:13:02.037697 IP 192.168.2.2.33482 > 192.168.2.13.8080: Flags [.], seq 2921:4381, ack 1, win 1825, length 1460: HTTP 18:13:02.037771 IP 192.168.2.2.33482 > 192.168.2.13.8080: Flags [.], seq 4381:5841, ack 1, win 1825, length 1460: HTTP 18:13:02.037815 IP 192.168.2.13.8080 > 192.168.2.2.33482: Flags [.], ack 1461, win 501, length 0 18:13:02.037879 IP 192.168.2.13.8080 > 192.168.2.2.33482: Flags [.], ack 4381, win 491, length 0 18:13:02.038025 IP 192.168.2.2.33482 > 192.168.2.13.8080: Flags [.], seq 5841:7301, ack 1, win 1825, length 1460: HTTP 18:13:02.038565 IP 192.168.2.13.8080 > 192.168.2.2.33482: Flags [.], ack 9960, win 497, length 0 18:13:02.043170 IP 192.168.2.13.8080 > 192.168.2.2.33482: Flags [P.], seq 1:739, ack 9960, win 501, length 738: HTTP: HTTP/1.1 200

WIRELESS WAN opptions Jan. 2025

MarvinFS — Sun, 12 Jan 2025 11:51:59 GMT

@elvisimprsntr I haven't experienced any issues. I'm aware about travel routers etc. My particular case hotspot from phone, directly to pfsense. that's for emergency only which is rare but happens few times per year. for that I can't afford to purchase travel router for hundreds of dollars and dedicated sim with internet package. that makes no sense. and about standards and speeds, again for emergency 30-50mbps is more than enough for browsing communications... that's exactly my case and solution is 20 bucks, ya? I wrote that post to clarify for others as it took me quite some time to figure out particular models which works out of a box

Snapshot of if_iwlwifi.ko for arm64

raymond.jimenez — Wed, 06 Nov 2024 22:14:35 GMT

Got it, thanks for the confirmation! The restriction of =< 802.11n and no AP mode works OK for my situation: we have one 3d printer which, for some reason, doesn't work well with the office wifi, and it's located right next to our pfSense gateway. It also doesn't have an Ethernet port (incredibly unfortunate). (So if it doesn't support station, but does support adhoc mode, I'm good here.) This hardly something that I'd want to call "production ready" and more "a useful hack" until we get a better 3D printer with real functionality. I'll do a cross-compile and report back with the results.

ASUS GT-AX11000 Access Point?

stephenw10 — Sun, 27 Oct 2024 20:21:04 GMT

@elspoon said in ASUS GT-AX11000 Access Point?: FWIW not sure if relevant but my ASUS is running the Merlin-WRT setup. That seems very relevant! Far more likely to have a true access point mode with a 3rd party firmware. There should be some docs for it on their site I would think. It looks like it does put the single interface as a dhcp client in AP mode from some breif reading so you should be able to just check the pfSense DHCP lease tables to find it's IP address. Once you do find it I would add it as a static mapping in pfSense so it always gets the same IP address. Steve

wifi vlan guest network

stephenw10 — Mon, 30 Sep 2024 08:29:08 GMT

You need two things to access the router in 192.168.4.X from 192.168.2.X: A firewall rule that passes the traffic on LAN in pfSense. That includes not policy routing it out over the VPN for example. The router must be able to reply. It can probably only reply to requests in the 192.168.4.X subnet because for anything else it will try to use it's WAN which probably isn't connected. So either set the default route there to the wifiguest interface IP in router. That may not be possible though. Or add an outbound NAT rule in pfSense on the wifiguest interface to catch the traffic from LAN to the router and translate it to the interface address.

Recommendation for Access Point

cswroe — Thu, 26 Sep 2024 07:49:22 GMT

I have just deployed some Grandstream access points. Price was right, they work well, and can be managed several different ways, including their gdms system for free.

I’m having issues with my wireless connection through my router with IP address 192.168.0.1?

stephenw10 — Tue, 27 Aug 2024 09:54:39 GMT

What hardware are you using? How is it connected? Steve

Awful Wi-Fi Speeds

johnpoz — Sun, 18 Aug 2024 22:41:33 GMT

@stephenw10 said in Awful Wi-Fi Speeds: Backhauling everything over Ethernet is almost always better than mesh if you can do it. Backhauling everything over Ethernet is almost always better than mesh if you can do it. Fixed that statement for you ;)

Change wireless WAN device name from "pfsense" to custom device name.

good4y0u — Thu, 15 Aug 2024 19:32:39 GMT

@stephenw10 That makes perfect sense, thank you. I realize the tool-tip says exactly that and I should have read more closely.

Wireless router not connecting...

stephenw10 — Sun, 21 Jul 2024 03:20:56 GMT

Yes, put them on OPT1. Enable it with a different subnet. Enable DHCP on OPT1. Add appropriate firewall rules to allow or prevent connections as you want.