3100 & Unifi AP VLAN
-
Is it possible with the current setup of
WAN -> 3100 -> Unifi AP
to offer up different guest WIFI or perhaps better different SSIDs tagged with different VLANS
How can I deal with these to not allow specific routing inside PFSENSEGiven that the AP will only be plugged into one port on the 3100. Cant seem to find out if I can offer essentially two or more networks that will not be able to talk to one another but still use the same AP and WAN. Trying to replace the functionality of my ASUS router which allowed a guest network.
Thanks
-
I don't fully understand your question, but I'll give it a shot.
You send all VLANs to the Unifi AP, then in the Unifi controller you assign certain SSIDs to certain VLANs. On the pfSense firewall, you configure your VLANs, and those VLANs cannot communicate with each other unless you create firewall rules allowing it.
-
yup thats what i am wanting!
-
Yes, that. It's definitely possible.
If you use the OPT port to connect the AP you can just set VLANs on it directly. If you're using the LAN ports to connect it, and don't want the VLANs available on all of them, then you need to reconfigure the switch in the 3100.
Steve
-
@stephenw10 yup got it, needed to create a VLAN, and then a new interface and link the two. Still not sure if the traffic is being tagged will check later
-
@lightning-snail Creating the interface involves choosing the VLAN.
Off the pf OPT port it would be untagged if you don't make the VLAN first and choose the VLAN in the association. Check the process you follow.
