Vlan config issue

Networking & Firewalls
1

Hello

So I have pfsense 2.6.0 installed.
have 4 WAN services providing internet access, one of them provides IPTV services also and i am using it.
all 4 WAN are connected to pfsense via VLANs. IPTV+internet has Vlan id 99.
current i have installed 3 TP-LINK DECO M4 devices, two are providing wifi to my STB for iptv.
when i reroute the iptv traffic via the switch and pfsense, i am having some buffering issue, so i have directly put them on the vlan of the iptv router. now the deco’s are getting ip address directly from the iptv router and all is working fine.

my issue is that if i connect to the DECO wifi network, i cannot access my local network as its directly connected to the vlan 99 and thus no access to other vlans.

how can i use the decos to my advantage and connect to both local network and also provide buffer free streaming to my STB.

2

Unless I read the wrong documentation, those TP-Link Deco devices are not VLAN aware, which basically means you can only use them on one VLAN at a time. I have a TP-Link wireless access point that is VLAN aware, and it feeds off of my managed switch. I can create different SSIDs for each VLAN. I then control inter VLAN routing through pfSense firewall rules. It seems to me that unless you will open up inter-vlan traffic from the one wireless access point (which really invalidates having VLANs in the first place) your choices are to use a Deco for each VLAN or you can upgrade to a single VLAN aware wireless access point. Alternatively, you can create firewall rules for individual devices that allow you to travers VLANs, but to me that is less secure.