Hello.

I have VLAN capable AP (TL-WA1201) on which I have main vlan 1 and additional 10 and 20.

It is connected to VLAN capable switch (TL-SG1016DE) on port 3.

pfsense box is connected to the same switch on port 1.

With switch configured like this:

Devices connected to vlan'ed (20) ssid are getting IP from proper range (192.168.20.0) - so far so good.

pfsense config for vlan20:

Whenever traffic reaches pfsense, it is allowed to get through:

The problem is, that most of the traffic is dropped, not reaching router:

When I open monitoring page on switch console, I can see lots of RxBadPkt:

It is worth to mention, that when I connect to ssid with vlan tag 1, the default one, non of packets are lost, it is rock solid.

What could be the issue here? Am I missing something? 

Both devices are on newest rom available.