Flint 3 (GL-BE9300) as AP behind pfSense: multiple SSIDs -> VLAN + Random BSSID

Routers
1

Hi everyone,

I’m considering Flint 3 (GL-BE9300) to use as a wired access point behind pfSense (AP/bridge mode, no NAT, no DHCP on BE9300). pfSense will provide VLAN trunk and DHCP/firewall per VLAN.

My goal is:

  • 3-4 SSIDs, each mapped to a separate VLAN (SSID → VLAN), e.g. Main / Work / IoT / Guest

  • Randomized BSSID enabled, and I need it to still rotate in AP mode (i.e., change on reboot, not only in router mode)

Questions for BE9300 owners:

  1. Have you actually achieved multiple SSIDs mapped to different VLANs on Flint 3 while in AP mode?

    • Was it done via SSH/uci (since GL GUI doesn’t expose VLAN in AP mode)?

  2. Is this setup stable long-term (reboots, uptime, client roaming), and does it survive firmware upgrades (without being overwritten by GL services/UI)?

  3. Does Randomized BSSID still work in AP mode with multiple SSIDs/VLANs?

    • Does BSSID change after each reboot for you?

  4. Any known limitations on Flint 3:

    • max SSIDs per radio / per band, issues with 6 GHz, MLO, or older 2.4 GHz clients

    • DSA/switch config gotchas (tagged/untagged, bridge-vlan vs switch vlan)

If you have a working config snippet (/etc/config/network + /etc/config/wireless) or key “gotchas”, I’d really appreciate it.

Thanks!