I'm just getting started with pfSense as well and used Tomato Shibby on a Netgear R7000.

I can report the VLAN part works very well. In my scenario, I'm keeping the R7000 solely for wifi, and I have 5 SSIDs, split between the two radios.

I used just one uplink to a port on my pfSense. On the Tomato default VLAN (1 usually), I configured my untagged SSIDs. I use two tagged VLANs, which are set up as VLAN and bridges (to hook up with the Wifi config). In the VLAN setup, I associated each one with the same port I'm using to uplink, set the VLAN ID to whatever I plan to use on pfSense, and marked it 'tagged".

On the pfSense side, I configured the basic interface for the uplink port to assoicate with the default/untagged VLAN (and subnet). Then I defined two VLANs to match up with the VLAN ID I put in my tagged VLANs in Tomato. These are then added as interfaces and similar configuration for the subnets is completed.

This all worked very well! I ran into issues with the DHCP Server not serving on all interfaces, which at first led me to wonder if the VLANs were the problem. A bit of troubleshooting proved the VLAN were fine. Hope this helps!

Change your old routers lan IP to be on the 192.168.2/? network your using I would assume /24

Make it 192.168.2.2 for example unless something else is using that IP.  Can not help you with details because you didn't say what old router your wanting to use as AP.

same issue here

In older versions of pfSense we had included a newer wireless stack, but it was crashing on 2.3 when we tried, so we had to roll back.

Waiting for 2.4 is one answer, getting a real AP is the better answer. There is nothing else to do.

So other devices on your lan with a wire get 12mbps ?

How do you have this connected?  Is your AP connected to a switch, directly connected to pfsense interface? What?

Such a crappy speed would point to a duplex mismatch if you ask me for off the top of my head shoot from the hip ideas to your problem..  What I can tell you is pfsense gives 2 shits if traffic is coming from a wireless accesspoint or a wired client.  Traffic is traffic..  I have 3 different unifi AP setup with pfsense and no issues at all.

How is pfsense setup?  Is it a VM running on ???  Or is it running on hardware?  If so what?  Got to have some sort of details here to help you.  So far what you have said is hey mechanic my car is broke, but my other car works.  Can you fix it.

why do you need routing?  Like I said pfsense will already know how to route between your different segments that are attached to pfsense.

If your going to run a vpn client on the box in the lan with some sort of default route to the vpn, then sure you would need a route statement on that box telling it to use pfsense IP in its segment to get to other segments in pfsense.

You would only need a route on pfsense if you needed to get to some downstream network.

huh?  going to need some more details..

What has 1 nic your pfsense??  Does it have a wifi card - what hardware do you have exactly?  And what does this cisco router have to do with it.. Is it the wifi router.. What model?

It appears that the ath driver lacks support for that specific card. There isn't anything you can do to change that. The OS sees the hardware but since it shows as a "none" device that means no driver attached.

Do you have the older AC pro model from unifi or the new gen2 stuff?  I have the lite, the pro and the lr of their new ac line and be happy to do some testing for you.  I could fire up something that is on the same network via wire as the wifi and do some testing of speed with iperf..  I do have a pci card I could use that is 3x3 on pc, but never use it for anything other than testing since pc got a gig wired connection so no real use of wifi even if 3x3 AC.. Never going to come close to gig wire.. Even at 3x3 80mhz channels short gi your talking 1300 PHY which is only 650ish real world.. I see low 900's with a wire ;)

3x3 clients really rare and 80 mhz not very common either so typically your talking 2x2 at 40 even on AC.. But could do some benchmarks with those PHYs or some lower ones..  Could change over to 40mhz for example.

^ exactly!!!  This desire to have some tiny box that does everything doesn't work well for wifi coverage.  Its always going to suck compared to properly placed AP(s)..  I am glad to see the pfsense store doesn't even offer the internal wifi cards as option on their appliances any more and only external AP..

As we move to 802.11ad the option of 1 device that provides wifi access going to be useless unless your "router" is in the 1 room of your house you want wifi coverage in ;)

@johnpoz:

Yes if your going to run vlans you need a switch to support vlans unless your going to just plug the AP directly into a nic on pfsense.  Then you don't need a smart switch..  But smart switches are very reasonable..  You do not need 1000 $ enterprise switch here ;)

8 port gig smart under $40..

I am still researching smart switches, but can you elaborate on how to setup the VLANs using the Unifi AP Pro (just ordered it based on your recommendation) plugged directly into my pfSense 3rd interface?  My pfSense has 4 total inferfaces with two currently being used (WAN & LAN).  I haven't found any  VLAN settings on the pfSense GUI.  I know I have to configure VLAN on the AP, but I don't quite understand what's needed to be done on the pfSense box.

I would like the non-guest WiFi to be part of LAN (full access), but the guest WiFi to only have Internet access.  However, I would like devices on my LAN and non-guest Wifi to have full access to devices on the guest WiFi.

This is my first foray into VLAN and so I am trying to read as much as possible and put it all together in the context of pfSense.

Thank you, I found it now.

take a look at the unifi new AC line they range from $89 for the lite to $149 for the pro.