Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Separation between the wireless and wired network help

    Scheduled Pinned Locked Moved General pfSense Questions
    18 Posts 6 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      To have the granularity of control you are looking for, stephen was right.  You need to invest in a cheap managed VLAN switch that allows you to use tagged and untagged ports.

      1 Reply Last reply Reply Quote 0
      • M
        MilesDeep
        last edited by

        What is your subnet?  Is it straight class C?  /24?  If so, you'll have to change the subnet scheme in order to separate wired from wireless.  If you can't change the subnet scheme, You'll have to use VLANs to separate the data.

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          You're going to need another switch.  Either another unmanaged for your wireless APs or one that does VLANs so you can do both networks on one switch.

          A new unmanaged will be cheaper and not require you to learn anything new or reconfigure anything.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • H
            hadi57
            last edited by

            i am using separate  lan card for each network, separating the wifi from the wired network, also separating the wifi into groups connecting each group into their own separated lan card. i think this is the simplest way and its working fine with me.

            hadi57

            1 Reply Last reply Reply Quote 0
            • F
              firefox
              last edited by

              But you already have two NICs to separate wired and wireless traffic, card3 and card4.  :-
              Are you saying that you need to position these extra APs such that they can only connect to the existing wired network?

              no
              i want them To connect to card 4
              But I do not have this option
              So I want to cancel card 4
              and Split the network on card 3 into two

              What is your subnet?  Is it straight class C?  /24?  If so, you'll have to change the subnet scheme in order to separate wired from wireless

              it is 192.168.0.1/24 (see image)

              how do i do that
              That's what I'm trying to know
              Is there an option in pfsense for two networks on one physical network
              If I will choose there a smaller number
              Will I have the option For another dhcp on the same network card
              How to do it

              You're going to need another switch.  Either another unmanaged for your wireless APs or one that does VLANs so you can do both networks on one switch.

              A new unmanaged will be cheaper and not require you to learn anything new or reconfigure anything.

              It would be easiest to buy a new switch
              And put new cables in the wall
              Up to location That the AP would be

              I can not do that right now
              It's a lot of work
              And more money at the moment I do not have

              So I want to do it on the existing network

              home.plex_-Interfaces_LAN-_2014-09-16_07.39.32.png
              home.plex_-Interfaces_LAN-_2014-09-16_07.39.32.png_thumb

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                You should be looking for a nice, cheap used vlan switch…  Or a miracle...

                1 Reply Last reply Reply Quote 0
                • F
                  firefox
                  last edited by

                  Bummer
                  I wanted to avoid drawing  cable for new points

                  In any case
                  Thanks everyone for trying to help

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    You won't need more cable if you get a VLAN switch - Thats sort of the point of the thing.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      @firefox:

                      But you already have two NICs to separate wired and wireless traffic, card3 and card4.  :-
                      Are you saying that you need to position these extra APs such that they can only connect to the existing wired network?

                      no
                      i want them To connect to card 4
                      But I do not have this option
                      So I want to cancel card 4
                      and Split the network on card 3 into two

                      This confuses me. You say you're not restricted by the location of the new access points. So why can't you connect them to card4 along side the existing access point?

                      Your later responses seem to indicate that you need to to connect them to the existing wired network because you only have single cabling to that location.
                      In which case you can use VLANs but you will need a VLAN capable switch. They are not that expensive. If you don't need gigabit bandwidth you could split one cat5 run into 2 100Mbps connections. You could use an ethernet over powerline solution (or over co-ax if you have that). You might be able to setup the new APs as repeaters instead and do it wirelessly.

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • F
                        firefox
                        last edited by

                        This confuses me. You say you're not restricted by the location of the new access points. So why can't you connect them to card4 along side the existing access point?

                        Just the opposite

                        I will try to explain
                        Maybe it does not go well then forgive me

                        Our house has seven rooms
                        Each room has two or three network points

                        All points are occupied
                        No Vacancy

                        In addition
                        There is a single point at home one side connected to pfsense
                        And on the other side of AP
                        This point is connected to the card 4

                        Everything comes to the switch being held in my room

                        Two of the rooms have a reception problem
                        Where I want to put ap
                        But I have no connection available

                        The only option to build a new line for every room

                        If you don't need gigabit bandwidth you could split one cat5

                        i do need gigabit bandwidth

                        I probably tomorrow or the day after tomorrow will pave two new lines

                        Hope I explained well

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          The point is you can tag multiple VLANs across a single cable.  Put a switch at the end point, and break out the VLANs there.

                          I can just about guarantee nobody will notice you're running two VLANs over a gig-e link, speed wise.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            What he said…  ^

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.