Help with setting up an access point (Netgear router in AP mode)

[jonboot]

Hello all

I have currently hit a wall in trying to figure out how I can use my Netgear Nighthawk router as an access point for WiFi with OPNsense. I have searched this forum and countless other from google and have found GREAT reads but none of them combined has helped me figure out where my issue lies.

My current setup goes: Modem >>> OPNsense mini pc >>> Switch >>><<< Router / Access Point.

I get an IP assigned to my wireless devices, but I do not have internet. I can access the netgear access point's web UI and that is connected to the internet because I was able to update the firmware. OPNsense picks up the router in the [LAN] leases where I set a static mapping for it. Any help or tips would be greatly appreciated thank you!

If more information is needed, please let me know. Not new to IT but definitely new to FW's and network setups.

[meyergru]

You have to set the device up as a pure wireless access point, not as a router.

When configured as a router, the device will get an IP from OpnSense and be able to access the internet via that, so update will be fine. However, your WiFi devices devices behind that router will not work.

In WiFi AP mode, the device will act as a bridge. You have a look at the documentation, there is a section that handles AP mode.

[EricPerl]

Both configurations should work.

With the Netgear device setup as a router, you end up with double NAT but it should still be sufficient for Internet access for the Wi-fi clients. You need to make sure the WAN & LAN side of your Netgear router don't have overlapping IP ranges though. Wi-Fi clients get IP from the Netgear router.
Some folks use this for physical isolation of their network (one Wi-Fi router per "zone")...
Can you ping the LAN IP of OPNsense from Wi-Fi clients?

With the Netgear device setup as an AP (check its manual), it should still get IP from OPN (so you can manage it) but all Wi-Fi clients should also get IP from OPN. When you make the switch, you might have to reconnect the Wi-Fi clients...