Using another router behind pfSense as an wireless AP



  • Hi guys, first time posting here and I'm fairly new to pfSense I read some documentation and some tutorials to setup my network with pfSense so sorry if this seems very noobish. I just got it setup and working on the LAN side and haven't configured anything specifically besides passing all traffic through in my rule sets for my interfaces. I have 2 questions that I'm trying to resolve at the moment. My main issue currently I'm trying to troubleshoot is that my WiFi sporadically drops connections / outputs error that say "error lost connection to the server" at random intervals about every 2-5 minutes. I can see the leases on my pfSense panel. Devices are still connected to the network, internet access is just lost. Only way to fix it is to reconnect to it and then it happens again about every 2-5 minutes it changes sporadically as previously stated.

    For a basic run down of my network topology:

    LAN subnet: 192.168.1.0/24
    Interface: LAN (em0)
    LAN default gateway: 192.168.1.1

    WiFi LAN subnet: 192.168.2.0/24
    Interface: WIFILAN: (em2)
    WiFi default gateway: 192.168.2.1
    DHCP: disabled

    (plugged into the LAN port on my router I'm using as an WIFI AP not the WAN port)

    WAN interface: em1

    I drew a diagram of what my network topology diagram looks like as well.

    alt text

    Here is a picture of my current rules I have set all very basic:

    LAN rules:

    alt text

    WIFILAN rules:

    alt text

    I'm using my ISPs router as an Wireless AP for phones, laptops, etc for the time being. I'm planning on getting a Unifi / Ubiquti WiFi AP soon instead. The model of the router is a Verizon FiOS G1100. I've resetted it to factory default settings and have changed the IP to 192.168.2.1 and disabled the DHCP on it.

    My second question is do I need to use my Verizon FiOS router with the MoCA line for it to function for DVRs, TV, etc? Is there adapters I can use to replace it when I get a new WIFI AP such as the Unifi ones? Can I just plug it into one of the ports on my switch/router without any hassle?



  • Why are you using a 2nd router? If you just need an AP, then connect the LAN side to your network. Also, where are the WiFi devices getting DHCP from, if it's disabled on the router?



  • I'm using my original router which is my Verizon one provided by my ISP as an wireless access point to connect my wireless devices to my network behind my pfSense firewall. I built the pfSense router but it doesn't have any wireless cards to setup pfSense as it's own access point. I do have it connected to one of the LAN ports of my network it's just that the connections keep being dropped. Wouldn't my pfSense router be handling the DHCP since they're both connected on each LAN ports?



  • @badgerlolz said in Using another router behind pfSense as an wireless AP:

    I'm using my original router which is my Verizon one provided by my ISP as an wireless access point to connect my wireless devices to my network behind my pfSense firewall. I built the pfSense router but it doesn't have any wireless cards to setup pfSense as it's own access point. I do have it connected to one of the LAN ports of my network it's just that the connections keep being dropped. Wouldn't my pfSense router be handling the DHCP since they're both connected on each LAN ports?

    ????

    Is that router that the WiFi devices are connected to the one from the ISP? With it configured as a router, and DHCP disabled, there is no way the WiFi devices have access to DHCP. Also, as many people do, just use the router as an AP, by connecting it to the network through a LAN port and not the WAN port. If you do that, the WiFi devices will not be on a different subnet and will be able to access the pfSense DHCP server.


  • Netgate Administrator

    @badgerlolz said in Using another router behind pfSense as an wireless AP:

    I've resetted it to factory default settings and have changed the IP to 192.168.2.1 and disabled the DHCP on it.

    What is the IP address of the pfSense wifi interface? If it's also 192.168.2.1 you will see intermittent behaviour like this as both devices answer ARP requests. Make sure they are not the same.

    Steve



  • yeah I just made the IP 192.168.3.1 and it fixed my issue on the router I'm using as a AP. I read on the forum here that someone with the similar error as mine. That's the part where I was confused about if they should be on the same subnet. I just gotta see if I should keep this router or not once I get my UniFi WiFi AP because I'm unsure if an MoCA to Ethernet adapter would just work if I plugged it in one of my LAN ports on my network.


  • Netgate Administrator

    The router used as an access point can, and probably should, be on the same subnet just set as static and outside the DHCP range.... and not the same IP as anything else!
    That way you will still be able to access it's interface to check signal strengths or make further changes.

    Steve


Log in to reply