Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense as repeater of wifi-router

    Scheduled Pinned Locked Moved Wireless
    11 Posts 3 Posters 4.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      CubeDev
      last edited by

      I have a Wifi-Router currently active and connected to the internet. I'd like the pfSense-Router to be between my PC, and other devices (connected via LAN) and the Wifi-Router and act as a firewall. I'm pretty new to networking, and therefore unexperinced. Google didn't help me either.

      Would this setup be possible?

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Normally you would not run wifi on your wifi router in front of pfsense..  If you do not have a modem and can not put that isp device into bridge mode, sure you can do a double nat.

        What hardware are you installing pfsense on?  I doubt it has a built in switch, so no you would not have multiple devices connected to ports on your firewall all on the same network.  You would use a switch for that.  Smart switch would be your best option if you want to start segmenting your network.. You would then use a real AP for wifi..  Proper number and placed for coverage.

        But sure with the right switch you can run a private vlan so that none of your devices on the same network "lan" can talk to each other.  But normally the devices you want to control traffic between are put on their own network segment/vlan

        typicalsetup.png
        typicalsetup.png_thumb

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • C
          CubeDev
          last edited by

          @johnpoz

          I have an expensive router/firewall standing here (not a server or PC), it has 3 network cards with each a LAN port (= 3 LAN ports) (which is enough for me, and I'd also have a Switch to expand), 3 USB-ports, 2 Wifi-Antennas. It has been used as a UTM at a company in the past.

          Would you please guide me how I'd configure my setup? (Easy instructions would be preffered :P).

          1 Reply Last reply Reply Quote 0
          • jahonixJ
            jahonix
            last edited by

            Is that the one in front of your pfSense or where you want to run pfSense on?
            Some Watchguard boxes are known to get re-purposed often…

            1 Reply Last reply Reply Quote 0
            • C
              CubeDev
              last edited by

              @jahonix

              I do not understand your question, may you simplify it? The flowchart should explain everything.

              1 Reply Last reply Reply Quote 0
              • jahonixJ
                jahonix
                last edited by

                @CubeDev:

                I have an expensive router/firewall standing here …

                that one.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  " it has 3 network cards with each a LAN port (= 3 LAN ports)"

                  Those are not SWITCH ports!!!  So you want your 3 devices on different networks and be able to firewall between them, and just let them use the internet?

                  Doesn't matter if the box cost million dollars - their not switch ports!  Do you want your 3 devices on the same layer 2?  And pfsense and wifi lets call "problematic" at best.. There is a reason they stop selling wifi cards for their appliances and suggest true AP..

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • C
                    CubeDev
                    last edited by

                    @johnpoz Okay. Anyways, here is the product I've got:

                    http://www.securepoint.de/en/products/vpn-gateways.html

                    But that shouldn't matter. would you please guide me on how to setup Wifi-forwarding with pfSense? Thank you.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Wifi repeating?  What wifi cards are in that thing?  Is it on the freebsd HCL?  Looks like to me it just has 2 ant connections and some shitty 2x2 N card.. Says for its wif 300mpbs

                      Again going to say this so its clear - pfsense and wifi, not going to be a good solution!  If that is the hardware you want t use - then use the software they sell for it, and license the wifi if that is what you want to use.

                      If your going to run pfsense on it, I wouldn't use it for wifi in any shape or form.  If you need wifi to get to your isp from this device - then use an external wifi bridge to get the connection to one of its interfaces..  Then connect a switch and use that to connect your other devices… That leaves you another interface to use for another network or vlans, etc. etc..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • C
                        CubeDev
                        last edited by

                        @johnpoz I have no interest in buying new hardware (wifi-repeater), so if there is no other possiblity, then I'll quit. Thanks for your information tho.

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          ok then.. Quit then.. Just giving you my honest opinion.. pfsense and wifi, lets put it nicely - its problematic to setup, and very limited in its features and supported hardware.. And to be honest wouldn't call it rock solid even if you get it working.

                          Might be ok as a client connection to say an out of band admin connection to pfsense.  But sure sure wouldn't use it a WAN connection for multiple devices.. Nor would I use it for clients..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.