Set up PFSense with IoT or guest networks via Asus access points.
Set up PFSense with IoT or guest networks via Asus access points.
Initially, my networking setup centers around an ASUS RT-AX88u serving as the primary router, supported by five additional ASUS routers functioning as AIMesh nodes throughout the home. Within this ecosystem, Merlin custom firmware is installed on the ASUS devices to enhance management for guest and IoT networks. Each SSID uses a distinct DHCP address and VPN connection, ensuring separation from my main network (Xenomorph). My goal is to upgrade to a more advanced solution, specifically PFSense, while integrating an Optiplex 7040 SFF/i5-6500 with 16GB RAM and a 32GB M.2 drive. This configuration appears well-suited for running router software. Before making the switch, I need certain features in PFSense: a guest Wi-Fi network for visitors and family, an IoT network for smart devices, and a dedicated SSID for guests. The ASUS 88u operates in access point mode alongside the Optiplex, broadcasting SSIDs such as Xenomorph, IOT GUEST, and Guest under the same IP range (10.0.0.1–10.0.0.149). When I need separate networks, I’d like to assign 172.10.10 for IoT devices and 172.10.20 for guests. The access point connects to a switch, which in turn links to the PFSense gateway (IGB0) for LAN connectivity. Any guidance or suggestions would be greatly appreciated.
You're looking for assistance with separating these Wi-Fi networks so they don't interfere and have unique addresses. You want to assign them to different VLANs and check if your Asus equipment can handle it. Your switch should support VLANs; otherwise, you may need to set up the configuration manually on the devices.
Check if your access points support VLANs. Ensure your APs are configured correctly for network segmentation.
I’m not using access point mode, but I do have a second switch with VLAN support. I’m considering switching it back to router mode to regain VLAN and guest network features, while disabling DHCP in that mode. The router will still run PFSSL as the primary device.