configure multiple networks on a single PFSense device
configure multiple networks on a single PFSense device
You're planning to configure a home network with multiple segments using pfSense. It's a common setup, but managing unmanaged switches alongside managed devices can be tricky. You're considering using VLANs or guest networks, but since your switches are unmanaged, you'll need to rely more on the router's capabilities. The idea of using WAPs for guest traffic is viable, but you should ensure they don't interfere with your main network security. If you're comfortable, using the WAPs for guest DHCP and firewall rules while keeping the router as the central controller makes sense. Otherwise, setting up VLANs manually on the switches might be necessary if you want full isolation.
Occasionally the WAP guest network configuration locks everything in, which can hinder IoT devices. However, this might suit your specific application. You could achieve network segmentation using a pfSense device with several LAN ports and connecting an unmanaged switch to each one. This approach isn't ideal for access points since they typically need to broadcast multiple networks. A managed switch is affordable.