Multiple Subnets via single wireless AP?

[tekkie]

Hey folks, I'm drawing blanks as everything I have tried has gotten me nil results with my current network setup.

A diagram of what I have:

I need to configure the DD-WRT r7000 so that I can have a device(s) (previously identified by pfSense static lease assignment) connect to the .70 subnet via wireless. Other devices (standard dhcp lease) will connect to the .1 subnet via the same wireless AP.

What's the best way to achieve this?

Virtual interfaces?
Virtual lans?
Just use another router and have two AP's on the network, with separate networks?

I'd obviously like to keep the footprint minimal by using ONE AP, but I'm not fully opposed to running another AP.

 

[tekkie]

Bit of an update:

I followed this guide from the beginning to see if I had missed anything: https://nguvu.org/pfsense/pfSense-setup-with-AirVPN/index.html

Went ahead and decided to use a dedicated RT68 for wireless access to the VPN, and I can connect to it fine and pull the correct IP, etc. The only issue I have now is that there's a firewall rule somewhere borking things up. I can traceroute and ping remote hosts (google, bbc, etc.) but cannot pull web services. I'm going to dig through the rules again, but nothing jumps out at me as wrong.

Any pointers, based on the article I posted?

 

[System Error Message]

wireless is another physical medium just like wire. You can pass various layer 2 and higher on the same SSID or link.

 

[tekkie]

wireless is another physical medium just like wire. You can pass various layer 2 and higher on the same SSID or link.

I understand that wireless is a physical medium; I guess I don't understand how to correctly set it up (virtual interface, or virtual lan with AirVPN on pfSense?)

I also need to say that my diagram is incorrectly depicting my network configuration. I've updated it to reflect the correct layout.

 

[System Error Message]

assuming airvpn goes through internet than theres nothing to worry about.
If it is your pfsense router that handles it than you will need to bridge vpn interface to your 2nd LAN interface with the other subnet.

Technically you can forego layer 2 and lower segmentation and just have 1 LAN port with 2 IP addresses and have pfsense routing set up.