pfSense Wireless Networking - Wi-Fi and Access Point

Wireless networking in pfSense is built on the FreeBSD Wi-Fi subsystem. pfSense can create wireless interfaces and operate as either a Wi-Fi access point (AP mode) or a wireless client (Infrastructure mode). Wireless adapter support is limited to drivers included in the FreeBSD kernel, with Atheros AR9xxx and QCA9xxx chipsets providing the most reliable operation.

Although pfSense includes built-in Wi-Fi capabilities, deploying it as a primary access point is advisable only for small networks or lab environments. Production deployments benefit from dedicated enterprise-grade access points (Ubiquiti, Aruba, Ruckus), with pfSense handling routing and firewall duties for wireless traffic. This architecture delivers superior throughput, stability, and scalability compared to running the access point directly on the firewall.

pfSense supports creating multiple SSIDs on a single physical adapter, with each SSID bound to a separate VLAN. This enables wireless network segmentation - for instance, serving corporate and guest networks from one device under distinct access policies and firewall rules .

In This Section

• Wireless Setup - supported chipsets, creating wireless interfaces, operating modes, security, multiple SSIDs with VLANs, and troubleshooting