(New user) Confused about set up (interfaces)

[railswrack]

I just got a mini pc and installed OPNsense on it. I am getting really confused about how to set it up. It has 4 ports: 0, 1, 2, 3.

Port 0 is assigned to WAN. Port 1 is assigned to LAN. Port 2 is assigned to OPT1. Port 3 is assigned to OPT2.

Basically what I'm trying to do is make Port 1 my ethernet port for my PC (wired) and Port 2 a port for my WAP for all the wireless devices in my home (phones, tablets, tvs).

I thought the WAN port (port 0) was to get internet from my cable modem and supply internet to the remaining 3 ports but apparently it's not that simple or I'm just not understanding how it actually works.

Right now my LAN interface (port 1) is enabled with a static IPv4 of 192.168.1.1 /24, DHCP enabled with range from 192.168.1.100 - 192.168.1.199

My WAP interface (port 2) is enabled with a static IPv4 of 192.168.2.1 /24, DHCP enabled with range from 192.168.2.100 - 192.168.2.199

What firewall rules should I add?

I'm trying to access my wireless access points settings UI page to set up the AP (it's a tp-link one) from my PC connected to LAN port 1 but I can't figure out how. Under DHCPv4 leases, it's showing the WAP interface with ip address 192.168.2.100, a MAC address and the hostname of my wireless access point (TP link TLWA1201). But, when I type in 192.168.2.100 into web browser, it just pulls up OPNsense and not my AP settings ui.

Please tell me what I'm doing wrong. I want to keep all internet activity (netflix, etc) from the devices that will be connected to the AP separate from my PC's (connected to the LAN port 1) internet connection.

[Greg_E]

I think you need to put the 3 ports for your LAN into bridge mode so that you share the one DHCP server with all three ports, the same applies to all the routing. Alternate to this is buy a cheap 5 port network switch and connect your devices to the switch, and switch to the LAN connection.

[railswrack]

Ok. I created a bridge for ports 1-3 and then checked my DHCPv4 leases and the IP address of my TP-link AP showed as 192.168.1.101

I typed that into my web browser and it worked, it shows the set up UI page for my AP.

Is this okay to leave it like this? Are there any downsides? There will be like 10 devices (laptops, TVs) connected to my wireless AP I'm scared the activity will conflict with my wired PC connected to port 1 on my router.

How would using a switch be different? (Also, my router's ports are 2.5g. Does that mean I need to use a switch with 2.5g ports as well?