Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to isolate DHCP Client from Static IP Clients?

    Scheduled Pinned Locked Moved Firewalling
    6 Posts 3 Posters 669 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      PzrrL
      last edited by

      My goal is to isolate my trusted devices from guest devices. Is it possible that I only use 1 interface (LAN) to do it? I have a DHCP Server in LAN, then all trusted devices have static IP. So for those devices getting IP from the DHCP pool, they will not be able to communicate with the trusted devices.

      Background of the network setup: pfSense -> LAN ->Switch -> multiple APs. Those APs does not support VLAN. And all of them all plugging into the same switch. That's why I would like to simply isolate by static and non-static clients. Any advice would help, thanks!

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        @PzrrL said in How to isolate DHCP Client from Static IP Clients?:

        then all trusted devices have static IP. So for those devices getting IP from the DHCP pool, they will not be able to communicate with the trusted devices.

        NO... pfsense has zero to do with devices in the same network from talking to each other..

        If you want to isolate your devices... Then get switches and AP that support vlans... Or use completely different physical networks... Ie different dumb switch, different AP.. Different interface on pfsense.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        P 1 Reply Last reply Reply Quote 0
        • P
          PzrrL @johnpoz
          last edited by PzrrL

          @johnpoz Is it possible to only have a VLAN capable switch, and without VLAN capable APs? Besides, how to isolate each devices in the same network (say I don't want them to discover each other)

          JKnottJ 1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott @PzrrL
            last edited by

            @PzrrL

            Only one VLAN/SSID can be used that way.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              you can for sure use vlan switch and dumb AP... You can assign what vlan the AP is on by what vlan you put the port they plug into on.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              P 1 Reply Last reply Reply Quote 0
              • P
                PzrrL @johnpoz
                last edited by

                @johnpoz Thanks! I successfully created an isolated network by creating a VLAN based on my LAN, and set the VLAN tag in managed switch.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.