IвЂ™ll leave your access-point setup up to you, since youвЂ™ll probably be using something different from me. My TL-WR841N is running openWRT version 15.05.1 in access point mode. In my case, the aforementioned wireless AP is just a cheap-o TL-WR841N I had lying around. pfSense will be responsible for assigning IPs to devices joining that subnet. WeвЂ™ll assign a new port on the TP-LINK TL-SG108E to that VLAN, and weвЂ™ll plug a wireless access point (AP) into that port to allow devices on to the 10.0.11.0/24 subnet. 2ДЄdditionally, weвЂ™ll be adding VLAN Tag 20 to our configuration, which will host a new LAN network on subnet 10.0.11.0/24. ConfigurationД«asically the same as вЂњpfSense VLANs with a one-NIC NUC & a TP-LINK TL-SG108вЂќ, except that pfSense has been updated (2.4.1-RELEASE), and itвЂ™s also running on a newer Intel NUC. Before beginning, IвЂ™d recommend taking a backup of your current, working pfSense settings by heading to Diagnostics -> Backup & Restore in the pfSense WebConfigurator. That being said, even if there are mistakes below, I donвЂ™t consider myself responsible if you mess up your config and/or drop your Internet connection. The rest of this post will document the setup, and you should be able to follow these steps to set up something similar on your own network, especially if youвЂ™ve already got a setup similar to mine. Setting up this вЂњprivacy SSIDвЂќ was actually very easy, since my network was already mostly ready to support this sort of configuration, and I didnвЂ™t have to buy any new hardware because I was able to re-use some old stuff I had laying around. Of course, this isnвЂ™t going to be as вЂњprivateвЂќ as using something like Tails, but I think itвЂ™d prevent the вЂњgetting ads you donвЂ™t wantвЂќ sort of situations. You would, of course, also need to open an Incognito session in your browser so as to avoid divulging any unique cookies that Google or Facebook or whoever has already assigned to you. The idea here is that if you knew you wanted to Google something 1, but you didnвЂ™t necessarily want so many folks to know what you were searching for, you could connect to that SSID and conduct your search. My wife and I have both had situations where weвЂ™ve searched for something, and received a barrage of related, sometimes embarassing, advertisements on all platforms (think Google, Facebook, Amazon, and even things like Spotify ads!)вЂ¦ not cool. EDIT (4/12/18): Thanks to the anonymous commenter for the suggestion not to use a public IP range for the new subnetвЂ¦ post is updated w/ a private IP range.ДЄ while ago I was thinking that itвЂ™d be cool to have a wireless network at our house that was a little more вЂњprivacy orientedвЂќ.

Pfsense vlan priority