Thanks @reggie14. I was actually quite surprised as to how affordable the Ubiquiti AP's were. I started thinking about replacing my Asus RT-AC66U with a Ubiquity AP for the VLAN , but if their range isn't quite as good it's probably not worth spending the money. It may be better just to purchase another Asus RT-AC66U. Agree that in situation where 4+ LAN ports are available on a pfSense box, there's no need to create virtual interfaces since each physical LAN port could act as a gateway to VLAN's created on the switch. One would only need to create the different VLAN's on the switch itself to separate all the ports out into the different networks (and potential routes between them if Layer 3 is supported is supported). Does that sound right? Now quickly back to wireless AP's: How important is it to have a guest network? If the wireless network is on its own VLAN that already provides some layer of separation between the wired and wireless networks. I'm assuming it starts to become important if one wants to enable traffic flow between Wired and Wireless for some services, but at the same time still wants to maintain a wireless network as well that is completely split off from the rest of the network (the other wireless network, and the wired network). Thanks again for all your help.