Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Separation between the wireless and wired network help

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 6 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      But you already have two NICs to separate wired and wireless traffic, card3 and card4.  :-
      Are you saying that you need to position these extra APs such that they can only connect to the existing wired network?

      Steve

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        To have the granularity of control you are looking for, stephen was right.  You need to invest in a cheap managed VLAN switch that allows you to use tagged and untagged ports.

        1 Reply Last reply Reply Quote 0
        • M
          MilesDeep
          last edited by

          What is your subnet?  Is it straight class C?  /24?  If so, you'll have to change the subnet scheme in order to separate wired from wireless.  If you can't change the subnet scheme, You'll have to use VLANs to separate the data.

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            You're going to need another switch.  Either another unmanaged for your wireless APs or one that does VLANs so you can do both networks on one switch.

            A new unmanaged will be cheaper and not require you to learn anything new or reconfigure anything.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • H
              hadi57
              last edited by

              i am using separate  lan card for each network, separating the wifi from the wired network, also separating the wifi into groups connecting each group into their own separated lan card. i think this is the simplest way and its working fine with me.

              hadi57

              1 Reply Last reply Reply Quote 0
              • F
                firefox
                last edited by

                But you already have two NICs to separate wired and wireless traffic, card3 and card4.  :-
                Are you saying that you need to position these extra APs such that they can only connect to the existing wired network?

                no
                i want them To connect to card 4
                But I do not have this option
                So I want to cancel card 4
                and Split the network on card 3 into two

                What is your subnet?  Is it straight class C?  /24?  If so, you'll have to change the subnet scheme in order to separate wired from wireless

                it is 192.168.0.1/24 (see image)

                how do i do that
                That's what I'm trying to know
                Is there an option in pfsense for two networks on one physical network
                If I will choose there a smaller number
                Will I have the option For another dhcp on the same network card
                How to do it

                You're going to need another switch.  Either another unmanaged for your wireless APs or one that does VLANs so you can do both networks on one switch.

                A new unmanaged will be cheaper and not require you to learn anything new or reconfigure anything.

                It would be easiest to buy a new switch
                And put new cables in the wall
                Up to location That the AP would be

                I can not do that right now
                It's a lot of work
                And more money at the moment I do not have

                So I want to do it on the existing network

                home.plex_-Interfaces_LAN-_2014-09-16_07.39.32.png
                home.plex_-Interfaces_LAN-_2014-09-16_07.39.32.png_thumb

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  You should be looking for a nice, cheap used vlan switch…  Or a miracle...

                  1 Reply Last reply Reply Quote 0
                  • F
                    firefox
                    last edited by

                    Bummer
                    I wanted to avoid drawing  cable for new points

                    In any case
                    Thanks everyone for trying to help

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      You won't need more cable if you get a VLAN switch - Thats sort of the point of the thing.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        @firefox:

                        But you already have two NICs to separate wired and wireless traffic, card3 and card4.  :-
                        Are you saying that you need to position these extra APs such that they can only connect to the existing wired network?

                        no
                        i want them To connect to card 4
                        But I do not have this option
                        So I want to cancel card 4
                        and Split the network on card 3 into two

                        This confuses me. You say you're not restricted by the location of the new access points. So why can't you connect them to card4 along side the existing access point?

                        Your later responses seem to indicate that you need to to connect them to the existing wired network because you only have single cabling to that location.
                        In which case you can use VLANs but you will need a VLAN capable switch. They are not that expensive. If you don't need gigabit bandwidth you could split one cat5 run into 2 100Mbps connections. You could use an ethernet over powerline solution (or over co-ax if you have that). You might be able to setup the new APs as repeaters instead and do it wirelessly.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • F
                          firefox
                          last edited by

                          This confuses me. You say you're not restricted by the location of the new access points. So why can't you connect them to card4 along side the existing access point?

                          Just the opposite

                          I will try to explain
                          Maybe it does not go well then forgive me

                          Our house has seven rooms
                          Each room has two or three network points

                          All points are occupied
                          No Vacancy

                          In addition
                          There is a single point at home one side connected to pfsense
                          And on the other side of AP
                          This point is connected to the card 4

                          Everything comes to the switch being held in my room

                          Two of the rooms have a reception problem
                          Where I want to put ap
                          But I have no connection available

                          The only option to build a new line for every room

                          If you don't need gigabit bandwidth you could split one cat5

                          i do need gigabit bandwidth

                          I probably tomorrow or the day after tomorrow will pave two new lines

                          Hope I explained well

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            The point is you can tag multiple VLANs across a single cable.  Put a switch at the end point, and break out the VLANs there.

                            I can just about guarantee nobody will notice you're running two VLANs over a gig-e link, speed wise.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • K
                              kejianshi
                              last edited by

                              What he said…  ^

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.