Bridging 2x WLAN and LAN interfaces

[AtticMan]

Hi,

I need to bridge two WLAN interfaces with a LAN interface and allow VLAN traffic.

Right now, I have a single access point on one interface, and LAN on another interface.
Those two interfaces are bridged and all VLAN traffic is WLAN only and specify WLAN interface as parent. Everything works as expected.

I'm taking my second access point out of mesh mode and connect it to the fourth interface.

The access points tag traffic based on which SSID to client is connected to.

Basically the mesh networking between the two Unifi access points was less than stellar.


What is the best option to treat both access points together possibly bridged, and bridge that to the LAN interface?

Note: only LAN interface has static IP with DHCP so all non VLAN traffic will obtain IP from LAN DHCP.

[Patrick M. Hausen]

You cannot bridge an interface that has VLANs. You need to create a separate bridge for each VLAN interface if desired. So you can bridge one VLAN from that access point with your LAN for example.

For more detailled help we probably need a more detailled description - list of VLANs, which is on which device, desired layer 2 topology ...

[AtticMan]

Hi, Thank you for responding so quickly!

Sorry for lack of details. I have OPNsense running on a 4 port Proctectli FW4B. I am a bit newer to more complex configurations and need some help.


Current configuration:
igc0 -> WAN
igc1 -> LAN
igc2 -> WLAN (Unifi AP 6 LR meshed with 6 Lite)
igc3 -> Future WLAN upstairs
bridge0 -> LAN + WLAN

In the beginning with simple networking, I bridged LAN and WLAN together and created the DHCP for LAN. All was working fine and WLAN clients are able to get DHCP from LAN.

Then I added other SSIDs to AP and added a VLAN for each one and assigned to parent WLAN, then created a subnet and setup a DHCP for each. For example, WLAN_GUEST is VLAN tag 20, etc...

All is working as I planned, but I could have messed up but would not know it since everything seems to be working properly, VLANs are segmented via firewall so they cannot access each other or LAN network. Security seems valid.

Since the I am pushing the mesh network to max and trying to balance location of meshed AP for best signal to parent AP and clients, I just gave up and going to hardwire the 2nd AP through the attic.

I plan on connecting the second AP to igc3 and need to treat that the same as main WLAN on igc2 regarding VLANs.

What would be the recommended configuration so I can have multiple APs and VLAN function properly so for example WLAN_GUEST VLAN traffic can enter through either igc2 or igc3?

Thanks for any help recommending the proper configuration. Most YouTube videos have what I need, but nothing obvious for multiple APs on same firewall hardware.

Happy Holidays!
-AM