PfSense + Netgear R6400 Running DD-WRT = possible to have guest WiFi?
-
Hi there,
Total pfSense N00b here. I'm trying to figure out a) if it's possible to setup Internet-only guest WiFi on my DD-WRT wireless router, and if yes, b) is the managed switch I'm considering adequate?
I've installed pfSense on a Zotac Zbox CI325, which has two NICs. I have a couple of 4 port Netgear "dumb" switches on my network, and it's my understanding that what I want to accomplish requires vlans. If I replace my current switches with a Netgear ProSAFE GS108E managed switch, will it give me the capability to do what I want? All I want to do is use my Netgear wireless router as an access point, but with one "main" SSID for accessing both the Internet and the rest of my LAN, and a guest SSID for Internet access only.
Any help or advice would be greatly appreciated.
Thanks!
-
if the hardware your running on dd-wrt supports vlans. And your switching setup understands vlans - or you plug your AP directly into pfsense. You could have vlan support - but this would require a bridge setup if you wanted one of the wireless networks to be on say one of your lan networks.
Smart switch would be the better way to go.. If your hardware supports vlans under dd-wrt. And you understand how to set it up.
To be honest if you want multiple ssids on different vlans.. I would suggest you get smart switch(es) and a real AP that you are sure does vlans. The unifi AP are very reasonable priced. You can get a 2x2 AC lite model for $89 retail right from unifi. Can be found a few dollars cheaper elsewhere.
while dd-wrt supports vlans.. It's a bit wonky to config and is not supported on all hardware.
With say the unifi you could run up to 4 different vlans via radio - so like 4 on 2.4 and 4 different on 5ghz. Or could use any combination of that that..
-
…..........Smart switch would be the better way to go.. If your hardware supports vlans under dd-wrt. And you understand how to set it up.
To be honest if you want multiple ssids on different vlans.. I would suggest you get smart switch(es) and a real AP that you are sure does vlans. The unifi AP are very reasonable priced….........
Thank you for the advice.
Trust me I have NO clue how to set it up. ;D I'm just starting out here. But you're right, I should just go with "proper" hardware. I've ordered a TP Link TL-SG2216 Smart Switch and a Unifi PRO access point. I've got lots of reading to do, and I'm sure I'll be on the forums here looking for help! :)
-
The unifi forums are good, I am not as frequent there as here - but there are many people here that use that hardware.. I know dok is on the unifi forums, he uses his kill bill nick though. Same as his redmine account.
When you say pro I assume the AC pro.. I have a AC lite, LR and pro model - if have any questions on how to setup with pfsense for vlans.. Happy to help.. Just start a thread or continue it on here and be happy to chime in.
I run 4 different networks via my unifi. My trusted native wlan, devices need to use eap-tls to get on that. Then a guest, then a psk for some iot devices and then one or my roku devices.
-
Yes, I should have been more clear - this bad boy: https://www.ubnt.com/unifi/unifi-ap-ac-pro/
Thank you again for the offer of help. I need to read up on vlans and how they function, as I have no idea how to set one up, but it's my understanding that I'll need them to build what I want.
-
Yup good choice.. So did you order direct from unifi? Amazon? You can get it here for $128
http://www.balticnetworks.com/ubiquiti-unifi-802-11ac-pro-indoor-outdoor-2-4-5ghz-ap-3x3-mimo.html
Not sure what their shipping is, etc. But they have a location close to work - so when I need something its a just a bit of a side trip ;)
The part of vlans that seem to be confusing for most people new to it is tagged vs untagged. Once you understand that concept your golden.
-
$129 from Amazon with free one-day Prime shipping, so I'll have it tomorrow. :)
-
The part of vlans that seem to be confusing for most people new to it is tagged vs untagged. Once you understand that concept your golden.
Yep, you were right - once I got that straight, I was good to go. I've got pfSense, the smart switch, and the Unfi AP working together, running separate vlans for guest wifi and vpn. :)
-
Nice!!! And you learned something in the process I am sure..
So you running the controller software full time? What firmware you running on the AP..
-
Nice!!! And you learned something in the process I am sure..
So you running the controller software full time? What firmware you running on the AP..
Hi John,
Yes, I have a Linux machine that crunches for Seti@Home 24/7, so I figured that would be a good candidate for the Unifi controller software. I can access it from my iPhone if I want to. Works like a charm. :)
I'm running firmware 3.7.47.6194
-
your firmware is old 3.7.51 is current ;)
Or is the current unstable if you wan t to look at it that way.. Its what I am running.
https://community.ubnt.com/t5/UniFi-Beta-Blog/FIRMWARE-3-7-51-6230-for-UAP-USW-has-been-released/ba-p/1875286
-
Oh, I was just going with what was available on the main downloads page. I get an "access denied" when I click on your link. I have a forum account - not sure why I can't access it.
