Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Separation between the wireless and wired network help

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 6 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Do you need to have each AP on a separate isolated subnet?
      Depending on what your access points are you may be able to use VLANs directly. Alternatively you could use a small VLAN capable switch like the Netgear GS108T (or even the GS105e).

      Steve

      1 Reply Last reply Reply Quote 0
      • F
        firefox
        last edited by

        Do you need to have each AP on a separate isolated subnet?

        I want all the AP sitting on same network

        Can I use sub network ?

        192.168.0.1-50
        192.168.0.50 -100

        I remember something like that
        But I do not know one hundred percent

        I remember that it was possible to divide a single network into two
        And they both sit on the same cable infrastructure

        It is possible, or am I mistaken ?

        AP are routers that I use as AP

        edimax br-6204wg
        d link dsl-g604t
        level one wbr 3406tx

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          @firefox:

          I want all the AP sitting on same network

          Well just connect them all to the same NIC in pfSense. All of those routers have a built in switch so just chain them together. All your wireless clients will then be on the same subnet. It won't matter which AP they connect to.

          Steve

          1 Reply Last reply Reply Quote 0
          • F
            firefox
            last edited by

            Perhaps I did not explain correctly

            I want the wireless clients Will be on a different network from The wired clients

            192.168.0.1 wired clients
            There is a wired network all over the house

            192.168.1.1 wireless clients
            There is no wired network all over the house
            There is no other connection to this network

            And this the problem

            Can I use the  wired network For both networks

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              But you already have two NICs to separate wired and wireless traffic, card3 and card4.  :-
              Are you saying that you need to position these extra APs such that they can only connect to the existing wired network?

              Steve

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                To have the granularity of control you are looking for, stephen was right.  You need to invest in a cheap managed VLAN switch that allows you to use tagged and untagged ports.

                1 Reply Last reply Reply Quote 0
                • M
                  MilesDeep
                  last edited by

                  What is your subnet?  Is it straight class C?  /24?  If so, you'll have to change the subnet scheme in order to separate wired from wireless.  If you can't change the subnet scheme, You'll have to use VLANs to separate the data.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    You're going to need another switch.  Either another unmanaged for your wireless APs or one that does VLANs so you can do both networks on one switch.

                    A new unmanaged will be cheaper and not require you to learn anything new or reconfigure anything.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • H
                      hadi57
                      last edited by

                      i am using separate  lan card for each network, separating the wifi from the wired network, also separating the wifi into groups connecting each group into their own separated lan card. i think this is the simplest way and its working fine with me.

                      hadi57

                      1 Reply Last reply Reply Quote 0
                      • F
                        firefox
                        last edited by

                        But you already have two NICs to separate wired and wireless traffic, card3 and card4.  :-
                        Are you saying that you need to position these extra APs such that they can only connect to the existing wired network?

                        no
                        i want them To connect to card 4
                        But I do not have this option
                        So I want to cancel card 4
                        and Split the network on card 3 into two

                        What is your subnet?  Is it straight class C?  /24?  If so, you'll have to change the subnet scheme in order to separate wired from wireless

                        it is 192.168.0.1/24 (see image)

                        how do i do that
                        That's what I'm trying to know
                        Is there an option in pfsense for two networks on one physical network
                        If I will choose there a smaller number
                        Will I have the option For another dhcp on the same network card
                        How to do it

                        You're going to need another switch.  Either another unmanaged for your wireless APs or one that does VLANs so you can do both networks on one switch.

                        A new unmanaged will be cheaper and not require you to learn anything new or reconfigure anything.

                        It would be easiest to buy a new switch
                        And put new cables in the wall
                        Up to location That the AP would be

                        I can not do that right now
                        It's a lot of work
                        And more money at the moment I do not have

                        So I want to do it on the existing network

                        home.plex_-Interfaces_LAN-_2014-09-16_07.39.32.png
                        home.plex_-Interfaces_LAN-_2014-09-16_07.39.32.png_thumb

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          You should be looking for a nice, cheap used vlan switch…  Or a miracle...

                          1 Reply Last reply Reply Quote 0
                          • F
                            firefox
                            last edited by

                            Bummer
                            I wanted to avoid drawing  cable for new points

                            In any case
                            Thanks everyone for trying to help

                            1 Reply Last reply Reply Quote 0
                            • K
                              kejianshi
                              last edited by

                              You won't need more cable if you get a VLAN switch - Thats sort of the point of the thing.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                @firefox:

                                But you already have two NICs to separate wired and wireless traffic, card3 and card4.  :-
                                Are you saying that you need to position these extra APs such that they can only connect to the existing wired network?

                                no
                                i want them To connect to card 4
                                But I do not have this option
                                So I want to cancel card 4
                                and Split the network on card 3 into two

                                This confuses me. You say you're not restricted by the location of the new access points. So why can't you connect them to card4 along side the existing access point?

                                Your later responses seem to indicate that you need to to connect them to the existing wired network because you only have single cabling to that location.
                                In which case you can use VLANs but you will need a VLAN capable switch. They are not that expensive. If you don't need gigabit bandwidth you could split one cat5 run into 2 100Mbps connections. You could use an ethernet over powerline solution (or over co-ax if you have that). You might be able to setup the new APs as repeaters instead and do it wirelessly.

                                Steve

                                1 Reply Last reply Reply Quote 0
                                • F
                                  firefox
                                  last edited by

                                  This confuses me. You say you're not restricted by the location of the new access points. So why can't you connect them to card4 along side the existing access point?

                                  Just the opposite

                                  I will try to explain
                                  Maybe it does not go well then forgive me

                                  Our house has seven rooms
                                  Each room has two or three network points

                                  All points are occupied
                                  No Vacancy

                                  In addition
                                  There is a single point at home one side connected to pfsense
                                  And on the other side of AP
                                  This point is connected to the card 4

                                  Everything comes to the switch being held in my room

                                  Two of the rooms have a reception problem
                                  Where I want to put ap
                                  But I have no connection available

                                  The only option to build a new line for every room

                                  If you don't need gigabit bandwidth you could split one cat5

                                  i do need gigabit bandwidth

                                  I probably tomorrow or the day after tomorrow will pave two new lines

                                  Hope I explained well

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    The point is you can tag multiple VLANs across a single cable.  Put a switch at the end point, and break out the VLANs there.

                                    I can just about guarantee nobody will notice you're running two VLANs over a gig-e link, speed wise.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      kejianshi
                                      last edited by

                                      What he said…  ^

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.