Nowadays is easy to find a board with more than two ports. For a box with 4 gigabit ports, one used as WAN, others act as as LAN as if they are all part of a switch. Bridging is a good way to go. A bridged interface is one that can filter traffic without pfSense being involved in the IP layer of the connection. This is commonly referred to as a “transparent firewall”. Requirements: pfSense box with multiple NICS; 1 for Wan, others for Lans (two or more). What we will get: i port as 1 WAN, Others as LAN.