@stephenw10 Openwrt has inadequate support on Broadcom chip. Partly support 2.4ghz wifi and do not support 5ghz band at all, etc....

Use an Atheros based card for best support out of the box.

Okay 👍 but at first i must change the config permanantly of my Modem

thats the output of usbconf

if i change the config manual from default (config 0) to config 1 i get an ethernet device but no usb ports for ppp etc

In the packet capture do you see fragmented packets?

Do you see larger packets on the wireless intrerface that from wired clients?

Or just any difference there?

Steve

WPA2 is encrypted... I think you need to do some research into the difference between wpa2 psk, and wpa2 enterprise.. All that changes is the auth method... The encryption doesn't change depending on eap you use.

I am not familiar with eap-tls

Then I would not suggest you use it... Its not going to get you anything but a complex setup you do not understand.... You understand that consumer devices normally do not understand methods of wpa2 enterprise..

I suggest you create a secure PSK, and be done with it... Your wireless is now secure.

@JKnott said in Wireless AP with Repeaters and More Wireless APs:

However, according to the OP, several IPs have been assigned to the same MAC, which might not be true

Yeah my mistake. In fact that is what I've seen before, the same MAC used for all IPs coming via the repeater.
Which is what the wikipedia page shows as expected: https://en.wikipedia.org/wiki/Wireless_repeater

As I said it's all voodoo! Avoid if possible. 😉

@DelvinGomes said in Default gateway ping high - Please help!:

192.168.0.1

What is that gateway in this context? The pfSense interface IP or something upstream?

What does Status > Gateways show for the ping time.

If you're interesting in minimising latency though you should not be using wifi.

Steve

You might be able to configure the wifi card in the hypervisor and then pass it through to pfSense as Ethernet. I've never tried that but I've seen people do it with other connection types.

Steve

@json-paul said in Selective client traffic filtering over Bridged Access Point:

My aim is to setup a bridged wireless access point and to be able to control which clients in the bridge network can access other client machine under the same network.

PfSense does not affect connections between devices on the same network.

It's probably in the wrong usb composition mode. Some modes only present MBIM or QMI interfaces which pfSense has no driver for. Since there is no way for pfSense so connect to it you would have to change the mode under Windows or maybe Linux.
I used a script to do that on the 7455 I have, linked as option 3 here:
https://github.com/danielewood/sierra-wireless-modems#create-accessible-com-port

Steve

You must explicitly trust a CA for 802.1X.

It is not a web browser.

This is generally done by pushing a policy to the device with a group policy object or similar.

I would not trust a public CA for this purpose or the devices will trust any authentication server with a certificate signed by that CA.

Are you forwarding all DNS requests to Unbound in pfSense or just handing the pfSense interface IP to clients via DHCP?

Steve

For small deployments I like ruckus unleashed. the controller is in the APs. Ubiquiti cloud keys work too with minimal infrastructure needed. What bugs me about ubnt is you have to have a controller for just one AP.

The wireless tab is for wifi hardware in the pfSense box, yes.

It depends what the Fritzbox can do. If you can set that up to use a VLAN directly that traffic will probably pass your unmanaged switch and you can then connect to it using a VLAN interface in pfSense.

You could do something even more unconventional like setup a tunnel of some sort between the Fritzbox and pfSence to separate the traffic that way. A VPN if it can do that or even PPPoE can work.

A managed switch is a better way to do it but it depends how much you want to save money or like playing with network config. 😉

Steve

Mmm, some maybe. A lot are using exactly same drivers OpenWRT uses. Some are just using OpenWRT directly!

The problem I was facing was really about the firewall rule.
I created a new firewall rule for WLAN. I selected "WLAN net" for Source. Of course, I also selected "WLAN" for the interface. I also selected "any" as the protocol.

I made the settings for Captive Portal. From the DHCP Leases page, I have defined an IP address outside the DHCP range to my mobile phone. I added the static IP of my mobile phone on the Allowed IP Addresses tab from the Captive Portal Zone page.

I can connect to wireless internet automatically through Captive Portal.

Thanks for everything!

Definitely use a separate box for server like services such as that.

The best you can manage for wifi in pfSense directly is 3x3 802.11n which will give you a theoretical link speed of 450Mbps.

I have a Sparklan card that works but any similar Atheros chipset based card will likely work.
https://wikidevi.com/wiki/SparkLAN_WPEA-127N

Steve

OpenWRT looks like a decent workaround if the factory firmware is not sufficient. Thank you both for the updates on this.