WLAN as separate subnet



  • I got my pfsense firewall/AP/NAT working. At the moment WLAN is bridged with LAN subnet (192.168.0.0/24) but I want it to be separate (192.168.1.0/16) so I could make my LAN connection more secure and disable connections from WLAN to LAN. 16 bit must be used for getting connection to gateway - 192.168.0.1? Now I don't understand how is it possible to get IP address to WLAN computers with DHCP? In my setup is it required another DHCP server for WLAN subnet?

    In bridged mode everything works, but when I do following:
    Interfaces - WLAN
    General Configuration
    Type - Static  (This should mean that WLAN interface has static IP?)

    IP configuration
    Bridge with - none
    IP address - 192.168.1.1/24

    Firewall
    NAT - Outbound
    WAN    192.168.1.0/16  *  *  *  *  *  NO
    Rules - WLAN
    *  WLAN net  *  *  *  *

    … then nothing works.

    Have searched for pfsense/m0n0wall wifi tutuorials but they must be not existing...
    Any help appriciated.



  • use as subnet /24.t
    you dont use the same gateway on both subnets.
    use as gateway: 192.168.1.1

    if you're using manual outbound NAT you need 2 rules:
    WAN        192.168.0.0/24      *      *      *      *      *    NO
    WAN        192.168.1.0/24      *      *      *      *      *    NO

    since you didnt understand why to use 2 different gateways/subnets i suggest you search wikipedia for information on how routing works.

    merry christmas :)



  • THX, it WORKS!!!

    And now LAN is also protected from WLAN.

    Going to wiki … 8)

    Happy Holydays!


Log in to reply