Configure VLAN in PfSense for guest network isolation.
Configure VLAN in PfSense for guest network isolation.
Looking at this video and your setup, I'm not sure if anyone has shared similar experiences. You mentioned connecting devices occasionally but rarely getting an IP address. It sounds like you're trying to broadcast both home and guest networks from the same access points without separate APs. Have you considered alternative methods or configurations?
You're interpreting the setup correctly. As long as the guest interface is properly configured in pfSense and the guest Wi-Fi is assigned to the right VLAN on the Unify AP, it should function. Your approach of using a managed switch with a separate router for the guest gives you more control. Comparing setups, your configuration seems sound—just ensure the ports are tagged appropriately for security. On pfSense, firewall rules differ between VLANs, but you can block unwanted traffic while allowing necessary communication. Since the AP supports VLAN IDs, matching the interface settings should resolve compatibility issues. You might want to reboot pfSense if needed to finalize DHCP assignments.
I don't get how it functions properly. I have a separate VLAN in PfSense for the wireless network, but sometimes it works occasionally and other times it fails completely. It displays the network wirelessly and accepts users, yet it doesn't provide IP addresses. This seems unusual. Maybe I should consider setting up a more affordable AP just for guest access?
This decision came from a mix of experience and a few learning moments. Even with a CompTIA certification, I felt confident enough to handle the setup this way. The only hiccup was adjusting the VLAN configuration for the managed switch—specifically, the guest Wi-Fi AP needed to connect to the main VLAN. I had to change the port settings carefully, tagging it on VLAN 1 and untagged on VLAN 2, which took a few hours of troubleshooting.
I believe I understood the setup now. My PfSense device is located in the basement. The network connects to an 8-port switch that wasn’t managed before. I considered linking the AP directly to my Ethernet port, which did allow the guest network to function. Then I installed a managed switch upstairs and experimented with its ports, discovering the guest network was active while the managed switch remained unchanged. Up until now, the APs have operated perfectly across all areas. I’m planning to record a video to clarify this process, though I’m confident it will work as expected. My thought is that the unmanaged switches didn’t recognize my VLANs, even though the managed one handled PfSense’s VLANs.
It makes sense. Unmanaged switches likely can't interpret VLAN tags, so those tags probably aren't recognized.
They can't see them, but it seems they should still move through traffic safely without touching the signs. Likely just had bad luck with a model that doesn't work.