"I decided to go ahead and install a wle200nx atheros mini pci wireless module onto the apu2c4 motherboard."

Bad choice - get yourself a real AP, or just use some old wifi router as one, which could be picked up for like 20$ Cheaper or the same cost as your wle200nx with WAY fewer problems!

"block mobile devices"

How would these mobile devices be accessing your wifi in the first place?  How do they have the creds?  So are you talking about a user that has a laptop and he knows how to auth to your wifi, so you want to stop him from adding his phone/tablet to your wifi network?

Are these laptops issued by you.. Are they of specific model what software do they run.  Would be simple enough to create a mac based listed for these devices, so other vendors would have different mac, etc.  Why not just use a auth method that requires a cert on the devices you want to join, etc.  There are plenty of ways to skin a cat.  But missing the details of what cat this actually is to know the best way to skin it.

If you could give more details of your setup, and what these mobile devices are your wanting to keep off your network..  How do they know how to auth to your wifi network?  If they are your users why not just tell them to not join their mobile devices, and if caught doing so they will be fired or all of their wifi access will be blocked, etc.

Ok, I will go for UAP-AC-LITE, it seem to do what i want (wpa2 enterprise with radius backend)
Thank you,

Long story short, my setup is working now. I think a bridge is the best way to go, and I'm impressed at the way pfSense handles it. I was wrong about the IPv4/IPv6 split; having them combined is fine.

Now:

Neither LAN nor WLAN has an IP address The bridge interface LANBR has static IP addresses for IPv4 and IPv6 No firewall rules for LAN or WLAN Firewall rules on LANBR only Tunable net.link.bridge.pfil_member=0, net.link.bridge.pfil_bridge=1

No internet access for my LAN/pfSense management computer. I update the software periodically.

Thanks again Johnpoz…I think just using the phone AP after setup seems the most sense.

Wondering if my issue is related.  I have an MC7700 and trying to get GPS to work with the NTP server on pfSense.  I dont seem to be able to get NTP to see GPS data on any of the ports.  LTE on 0.3 works fine.  Nothing else though.

"to use at tradeshows or to use as an emergency internet connection for customers."

Why and the F would you need a transparent proxy for such a connection.. Cradlepoint would be a perfect solution for these sorts of things btw!!!  We have been playing with some of their hardware at work for an upcoming project.  They are slick ;)

its an android app called iperf, you can run it with whatever options you like.

Hi Johnpoz,

It's a typo, my humble excuse, it should have read ''we have two (2) SSid, one for staff and one for clients''

Sorry, anyway… I haven't solve the issue yet, but you know how Boss's are, I am implementing another FW in
a remote location, etc etc...

I'll be back...

Thanks for all the efforts and pardon my misunderstanding...

Thanks for the suggestion.  I will unbridge and give that a try to see if things improve.

Thanks, that pretty well confirms my suspicions. Clearly it's in the best interests of the community for those interested to get results without the heartache of wireless nic incompatibility. If my problem solution to find and use a standard router in AP mode is  o.k, I wonder why there are so many discussion threads and a wiki on compatible wireless nic drivers which don't cover latest enhancements anyway? Surely if you are going to start with pfSense you get a pc host with at least 3/4 configureable lan ports and use a remote wi-fi AP?  I haven't worked through the pfSense port and firewall setup yet, but I gather I can put the external AP on a port with an IP address outside the local network but still restrict access to websites and block ports on the Wlan.

Now I've realized an inferior wireless nic that might work in the box with pfsense probably costs about the same as using a fast 2 channel beam forming router in AP mode, there is no contest. However, I haven't yet got answers to the question of port speeds. Most wi-fi routers claiming 800Mbps on 5Ghz band only have 10/100 lan ports. Perhaps I'm an idiot and don't understand yet why they aren't spec'd as Gigabit lan?

Ah, I did do that with an R7800 but I was hoping to see if I could get the inbuilt wifi chip to work for the heck of it. Thanks all :D

Post your rules.

The block would need to be above the pass, just block them first regardless of schedule, then try and get the schedule working.

If you install it on hyper-v it should come up as a network and you should be able to see it in virtual network manager in hyper-v.  Maybe try creating a new network and attaching pfsense with that network.

What radius?  I am using domain connected windows 10 with radius on windows no issue.  Not sure of radius on pfsense.

I'd be willing to bet you can't use an internal wireless adapter as an access point with a virtual pfsense unless using pcie passthrough.