If it has an ip in this interface it will attempt to route traffic between the main lan and vlan 90. Step 1 is to remove the vlan 90 interface/ip address from the switch. Note from now on I will refer to your main LAN as VLAN1 as that is what it is using.

The only reason it has an ip address is to manage the switch. Therefore the Switch is only Layer 2 - it's job is to just connect things to the firewall. This means that the firewall is the core router - devices in each vlan will use it as their default gateway. As I understand your diagram the pfsense firewall will be the device that connects and controls the 3 different networks lan,iot,guest. The first general comment is around routing and layer 3 switch - this is a common mis-understanding.

Great post the diagram etc are very useful to understand what you want to achieve. Have you tested any specific configuration ? If so what is going wrong? How many PFsense interfaces do you have? Ok so do you have your switch port or ports set to tagged that are connected to the 90 VLAN? Created SSID and selected the VLAN Only Networkĭoes anyone see anything configured wrong or missing?.Created a VLAN only Network (also tried another corporate network).Set firewall rules (including an allow all for testing.Allowed DNS resolver allowed on all interfaces.Beow illitrates what I would like to achieve. I want to create several vlans and provide multiple SSID, one for each vlan, on the Unifi AP. A Unifi AP is connected to this switch providing wireless access. This is then connected into a Cisco SG300 switch. I have a pfSense box that sits behind my ISP modem. This is my first attempt at setting up VLAN and have read quite a bit about it. I have been struggling with this problem for almost a year and keep failing to set get this setup.

Pfsense wifi access point