Got it working. Thanks for the help. I don't know why but VLAN's are confusing topic for me. Kinda like driving directions are for my wife.

While pfsense can not currently provide dhcp for downstream networks, you have stated you don't have a downstream layer 3 switch so where exactly would this downstream network be coming from?

Why would pfsense not just have a 192.168.1 network and a 192.168.2 network?

I'm going to give 2.4 alpha a test.. see how it pans out…. fingers crossed..

I wish i knew how to backport etc i would have give it ago...

I'd probably look at ubiquiti. I would call them and see how much they will help you with actually surveying your needs and developing a real implementation plan. Unfortunately they generally sell either 2.4 or 5GHz radios for their outdoor line, not dual-band. Looks like the exception is the UniFi UAP AC Outdoor but it is Omni-only with no sectoral option.

I have never liked EnGenius much, though my opinion was developed years ago.

With that density something like Ruckus is probably out of the question.

https://www.cdw.com/shop/products/ZONEFLEX-T710S-120X30-DEG-OUT-DB-AP/4242939.aspx

Only US$3000 per unit, though you would probably be amazed at how well something like that pole-mounted angled 15-20 degrees downward would cover an open area.

The T301S (120deg) and T301n (30 deg) are about half that. You would probably find that the 120deg unit with BeamFlex would do just fine.

http://a030f85c1e25003d7609-b98377aee968aad08453374eb1df3398.r40.cf2.rackcdn.com/datasheets/ds-t301-unleashed.pdf

Looking at those BeamFlex antenna arrays is almost arousing.

If you're not afraid of used and don't need AC, you might be able to find some good deals on used gear on ebay.

well, the dropouts are also half of the problem.

For me, beacon errors appear generally only on 2,4Ghz because there are bunch of other stations in air plus hell knows how many microwave ovens, car alarms etc which are all sitting on that band..

5-5,8Ghz band hasn't been an issue, except for some devices not "seeing" it..

if your method allows me solve half ot, it deserves hearty "Thank you".

at the moment log is clean..

Is there some reason you need broadcast traffic between lan and wifi?  Why do you not just put wifi on its own network, and create firewall rules to allow the traffic you want from your wifi to your lan?  This is much simpler setup, vastly easier to maintain as well.

For what reason do you need your wifi and lan on the same broadcast domain?  ie same L2 network?

What you described is the expected behavior. Wireless client traffic does not flow back through pfSense in a way it can be filtered when the clients talk directly. It's the same as any other wired network in that regard.

If you want to filter between sets of clients, place them in different networks. Separate SSIDs on distinct VLANs for example.

Have you try to configure Wi-fi again? I would configure the LAN bridge to the Wi-fi interface I think.

72Mbps would be PHY so /2 that real world number.. If your on say 20mbps internet or something guess works..

Yes you will need a switch that supports vlans if you want to use vlans ;)  If all switches supported vlans then they wouldn't be called "dumb" switches ;) heheh

There are for sure different levels of "smart" and or what they called fully managed, etc.  But to do vlans not sure I would call them smart for example.  I had picked up a netgear gs108ev3 for like 30$ after rebate or something.  And the switch in my av cab would bug out on me now and then, it was older gs108T netgear. It would work and work and work and then just nothing and would have to power cycle it.

So for 30$ what hell replace it.. While it does vlans - that is about it.  No snmp, no sort of log even, can not even set the time on it.. no bells and whistles at all.. But it does do vlans, and can set speed on ports and enable igmp snooping, so while it might be "smart" compared to a dumb switch compared to my sg300 cisco I would say it has an iq of just above moron or idiot.. While the sg300 is bordering on genius level hehehe.

So if your going to get a new switch that does vlans, and you might want to play with other stuff in the future like like snmp, ipv6, lldp or cdp, private vlans, rmon, etc. etc.  They you might want to spend a few more dollars on your switch, etc.

There are no cards that will work on two bands simultaneously. Get an external AP and plug it into a separate Ethernet interface. It will work much better and have far fewer headaches.

If you want good wifi coverage in all areas of your home especially if talking N or AC which is on 5ghz and much shorter range your going to want multiple AP.

I would look into unifi AP, they are very reasonable in price start at $89 for new gen AC models 2x2 and pro 3x2 goes for $149.  They are poe which allows for easy mounting in the proper locations.  Which would be your ceilings or wall.. Not some router sitting somewhere on a shelf or on the floor under a table, etc.

I have a much smaller house and have 3 of them.  Just 1 floor.  While you can talk to the AP on the other end of the house - it does not provide for the BEST speed, especially if your going to have some clients close and others far with much lower rates.  I have 1 in the kitchen near the patio door, and max out my internet without any issues out on the patio 75/10 with AC devices.

I have another in the middle of the house hallway and then one in the guest bedroom on the far end of the house.  There is no place in the house that you do not have FULL signal..  And I don't have to share bandwidth with the devices that are on the other end of the house, etc.

To proper do wifi in anything the smallest of open areas your going to want multiple AP.. Especially going to the new AC stuff.. Wait til 802.11ad hits your going to really need an AP in every room.

How your still using G with that many devices is just nuts..  Talk about SLOW as shit..  What is your internet speed?

https://www.ubnt.com/unifi/unifi-ac/

I have the latest 160311

Couldn't find a UniFi device in my price range but found a Cisco WAP4410N on Craigslist for $15 which is working great. The guy even threw in a 2nd one!

Moin,

Take a look under Services–>DHCP Server.
--> "Deny unknown clients"
--> "Static ARP"
--> "DHCP Static Mappings for this Interface"
https://doc.pfsense.org/index.php/DHCP_Server

To add Computers conveniently:
https://doc.pfsense.org/index.php/DHCP_Leases