Unifi Dream Router behind pfsense

I know there have been videos on doing this kind of setup primarily with the UDM and I have watched all of them. I realize now I probably should have gotten the UDM and another AP instead of the UDR. My question is the setup of the interface that goes from the UDR LAN port to the pfsense LAN2 (in my case). I have setup all the vlans on that LAN2 interface, but does the interface itself have an IP address on it? Do I just give it an address in the native UDR network? Just trying to finish up my config. Thanks.

I am not completely clear on your goal, but I do have a video for setting up pfsense with a Dream Machine.

Hi Tom,

Thanks for answering. I have watched this video so let me see if I can explain my confusion. And maybe a little high level back ground configuration information will help as well. I have pfsense with WAN port connected to my ISP, sitting in front of an older EdgeMax switch connected via the LAN port of the pfsense. My UDR is connected to that switch via the WAN port. THe UDR WAN port has a static IP in the network which is the same network that the LAN interface of my pfsense is on. I have a U6Lite connected to the UDR Port1 and have defined 4 networks/WifI networks and originaly assigned IP address and turned on DHCP for devices that connect. As in your video I want to move the management of the vlan and IP DHCP to pfsense.

SO here is my confusion. In your setuop in that video, d

Sorry I hit reply by accident…

In your setup in that video, does the LAN port on the pfsense have an assigned IP address and if so in which network? Do I just assign the vlans to that port on the pfsense and connect it directly to one of the UDR ports and then make sure that the UDR port has the right switch profile that contains all the vlans? I can put together a diagram if needed. I hope this makes my question clearer. If not I will just try somethings out and see what happens,


Yes, I have the IP addresses on the diagram at the 1 minute mark showing what IP’s to set for each device. LAN on pfsense LAN on UDM

1 Like

Thanks Tom. As a side note, I get a lot out of your videos, so thanks for that as well.

I think my problem revolves around not having a separate “default” network defined. I used the .10.x/24 network as one of my standard vlans and networks in the UDR when I first set it up. I probably need to change that.

1 Like

So I have rewatched that video and another one and determined that the best way for me to proceed is to do a factory reset on the UDR and start from scratch. In order to get the vlans and the trunk setup correctly it will just be easier. Will update with results once done.

1 Like

It has been a while since I updated this post. The factory reset and re-configuration of the UDR and the pfsense solved my problem and is working as advertised. My network is humming along now. Thanks.


Hi! Im trying to do the exact same thing and there seems tobe not a lot of info on doing it with the UDR. Could you share your setup please? Thanks!


My setup is just as it is described, in the video that Tom has linked. My misstakes was that when I originally setup my UDR, I used the default network, 192.168.10.x/24, as on of my active networks instead of just using it as a management network, so I was having issues on figuring out how to assign IP’s to the trunk link between LAN2 and the UDR. Once I reset and re-configured my UDR to have the management lan separate from all others my set up workd. Basically I have the WAN port connected to the network that is on LAN1 in my pfsense (this network serves all my internal and lab devices. I have port 2 on my UDR connected to LAN2 on my pfsense which acts as the trunk for all the vlan networks. All my networks on the UDR are set up as vlan only and the pfsense handles all the dhcp, routing, and FW rules for those networks. Again it is pertty much like what Tom explaines in the video.

I hope that helps.

1 Like


I’m doing a similar setup with a Netgate 6100 with UDMP and and a USW Pro switch behind pfsense. My question is can the networks created in the 6100 (with 4 dedicated 2.5g ports going into the USW Pro) be managed (assign ports on the switches to be exclusive to each fed network) in unify as would be done if they were vlans on one interface out of the 6100?

Or should I use LAGG and vlans on the 6100 to maintain bandwidth?

Each port on the 6100 is a distinct port and you could limit each port on the UniFi to be fed by that port.