Brilliant, thanks for the replies, guys.

Back to the drawing board for me…

And your right - i got rid of all the bridges and used the firewall. everything works perfectly and less complicated

It ended up being a problem with the wireless card.

@ak:

When I setup the bridge - I found I couldn't do that (assign bridge to the LAN) as the LAN was part of the Bridge. Guess I have to start from scratch and not assign a interface to the LAN at the start.

I think you more likely couldn't make LAN a bridge member because it was assigned to LAN.  Easiest thing is to make the bridge from a completely unrelated interface.

Yes. You need to assign the interface as already noted in my very first reply. (There's really no need to clone it unless you need multiple SSIDs.)

uniquiti

Here are links for the MC7700 DIP mode tools needed in Windows to flash for use in pfSense:

firmware:
http://source.sierrawireless.com/resources/airprime/software/mc7700-att-approved-firmware-swi9200x_03,-d-,05,-d-,20,-d-,03_dip/

watcher 3830:
http://www.sierrawireless.com/developer-zone/resources/airprime/development_kits/airprime-mc-series-connection-manager-dip-build-3830/

drivers 3795
http://www.sierrawireless.com/developer-zone/resources/airprime/software/airprime-mc-series-windows-drivers-dip-build-3795/

pfSense can be used for a great many things.  There are plenty of ways to shoot yourself in the foot.  Doesn't mean the option shouldn't be there.  One person's OPT1 is another person's Multi-WAN, for example.

I ended up going back to seperate SSID's on my test rig. Seems connection speeds dropped back a good bit. So tried to tweak and I found all my wireless devices were using OPT1/BGN and nothing on OPT2/ABGN. So i swapped ABGN to OPT1 and that helped with some. I also went to my Windows device manager and forced wifi to use 5ghz. That worked OK but still slow connection speeds all over. descided to revert back to original setup.
Still nice proof of concept. It does work. If you were using it for a sensor net or something low bandwidth it would work fine.

That all looks fine.

I guess when it stops working you need to look at exactly what's happening.  It's either losing association with the wireless, or something else.  You can look at things like whether or not you still have good ARP from the client on pfSense and from pfSense on the client, etc.

@Phishfry:

My r11e-5hnd was deployed in an Advantech PCM9362 for an relative. It has been working fine with this being my first chance to upgrade it. Went from 2.2 beta(Sep27)to 2.2.2 without issue. It is working on the AR9300 driver i noticed. I noticed it was throwing out continual beacon errors before upgrade…

I have the rB14eu myself and found it works as advertised. I put 2 AR5BXB112 on the front and a MC7700 on the back. I didn't try an R11e card on it. I did have other atheros cards on it though.
You realize the USB cable is only needed on the 3G side if using wifi? Not that there is a "3G side" but with the provided cables and 10 pin header it services 2 slots on one side of the card...With a 5 pin cable you could do a single 3G/4G slot.

It did work on linux. mini-PCIe module sitting in the same RB14eu slot. Though I had there another set of issues (with WPA auth). Worked fine without encryption though and apparently on full power.

Now that you mentioned it, I recall I tried R11e-5Hnd on pfSense first using it in some noname Chinese miniPCIe/PCIe adapter. I found that the signal output was limited to ~17dBm (going to be the case with RB11 as well) and thus I ordered RB14eu. "eu" for future proofing, might need 3G or LTE module at some point in the future, price difference between "e" and "eu" is only around 10 euros. Just forgot that I tested wlan module on pfSense some 3-4 months before ordering RB14eu

Thanks guys, gonna give it another try. First in FreeBSD workstation (10.1-RELEASE), if the RB14eu/R11e-5Hnd appears to be working there, gonna kick that linux from my router and return back to pfSense.

Best way to setup for multiple APs, If you want more than 1 access point(s), Setup access point where it should close to radius so you should have no problem with same SSID and security but channel must separate like 1, 6, and 11 for best way to setup and also Ethernet must run through each access point(s) because they communicate each other so if device going to second access point, it should inform from first access point to second access point to associating second access point.

It work with my cisco aironet so it should have no problem with roaming around.

If nothing else they have one hell of a web page!  ;D

Thanks for the introduction.    :)

@rjcrowder:

I have the exact same setup… except I'm using an Asus router as an access point (instead of the Apple device).

Thank you very much Rjcrowder. So the way I'm thinking of setting it up works. Thanks for the help. I should start working on it next next week . Trying  to read up as much As I can before I get started

I also wanted to state this fact. If your MiniPCIe slot does not have "USBtype"-MiniPCIe interface -some of these adapters will not work… They use the same physical interface but with different electrical signaling. Also these SIM adapters will not work in M-SATA type Mini-PCIe slots either. So really they work best in laptops where manufacturer left out sim slot on thier non-WWAN models.

For what it's worth, I have a fair number of OS X and iOS devices. I have a number of devices connected via Apple APs on the LAN segment, and I also have several devices connected to an guest network AP running on a WLE200NX (Atheros AR9280) inside the pfSense box itself. DHCP is being provided by pfSense. I have no problems with either.

Yes.  You won't need to change any rules.  You're only changing layer 2.

Whenever you see the letters "USB", consider it not the best solution.

For disk, for ethernet, for wireless, for whatever.  Look for another solution if possible.

The scan list is mostly for reference. If you know the SSID, you can type it in manually rather than relying on the scan output.

From the shell you can also try

ifconfig -v ath0_wlan0 list scan

But that adds quite a lot to the output that wouldn't be good for the GUI to show it all.