The use case is the following:

There are 6 holiday apartments which all use the same WLAN. After a preceding law case due to illegal downloads every apartment needs to be monitored for eventually following issues of similiar kind. The MAC addresses change of course in the same frequency as the guests do, therefore assigning static MACs is inapplicable.

Technicalwise I might be looking for something like Captive Portal with RADIUS authentication and static vouchers, presumed this can provide the above mentioned features per voucher(user).

Any other solution that fulfills the requirements would of course be welcome as well.

Is there any chance to archieve that?

Regards,
royskatt

Thanks, I had to ignore it for a few days but my very first attempt what was you mentioned but I had my proxy setup (which of course didnt work when on a different subnet) so I immediately thought that was wrong.

After reading your post and doing it properly it all worked within minutes and seems so logical. Cant believe I didnt figure that out. Thanks!

No, you can't. You'll have to buy a real AP.

I use a asus ac68u router in the US with Tomato ddwrt and it is set to give OVPN on one SSID and clear net on another SSID via a bridged VLAN - so far its working well

You also get the ability to restrict or enable access to OVPN via MAC address (don't know how you can do that in pfsense)

Anyways, if you have a compatible router Tomato is worth a go - tho you do loose the ability to turn the LEDs off.

Yes you can!

The only issue is compatibility and optimization of the wifi card.

For example: I connect a mini pci wifi card as my Access point.

I've been playing with this off and on for the past month+, and I'm nowhere closer to success. The device I started out with (0x1199/0x901e) was not recognized by pfSense, nor Centos 7.  Windows 7 was no better – 0x901e is not a popular variant of this card, and no matter what drivers I used (starting with Sierra Wireless, progressing to shady 3rd party 'driver manager' sites, and even modifying inf files of the official SW drivers), I ended up with the card not actually working.  Plus, at no point was there a working serial port provided to any of the OSes, so even if I wanted to issue AT commands to change PIDs, I was SOL.  Because this device was an AliExpress import of questionable origin, I figured I should cut my losses and find another EM7355.

Next step: I obtained a less "exotic" variant of the card, a Lenovo part (FRU04X6038) which gave me 0x1199/0x901f.  No better under pfSense (now at 2.3.1_1) or Centos (neither picked it up in a way which I could talk to it, serial or otherwise), though under Windows (10) the drivers obtained from Sierra Wireless picked up the card without having to modify any inf files.  Still, the COM ports it did present didn't actually respond to any commands (trying multiple speeds, etc.) nor did the Sierra Wireless Watcher software pick up the card.  I next tried it in a Lenovo laptop (Win 7) in which the card was supposedly compatible.  The first time around, the laptop booted up, I installed Lenovo's drivers, and things seemed like they were going in the right direction.  However, upon a required reboot (Lenovo Access Connection software), the laptop refused to boot due to what it claimed was an incompatible card.  No idea why it was okay with it at first, but now it was complaining.  VID/PID seemed to be the same.

So, I'm pulling my hair out here!  I'd be hugely grateful if someone had some experience with these cards and could give me some pointers on where to turn next.  Sierra Wireless doesn't seem to pay attention to end-users.

Ultimately, I'm looking for a T-Mobile (USA, LTE bands 2 and 4) compatible device which I can connect to my pfSense box, either via Mini PCI Express or USB.  I don't want to spend hundreds on a Cradlepoint (or similar) box -- I'd be paying for a router (which I'd rather be pfSense) when all I need is an interface to a modem.  If you know of a device that would accomplish this, hopefully under $100, I'd throw these EM7355's out the window in a heartbeat.

If it doesn't show up in Interfaces, assign, then it's probably not supported by the current atheros driver. From the posts I've seen it wasn't working in 2.2.x and I'd guess it's still not working in 2.3.x

If you really want/need AC wave 2 then your best choice is a Ruckus ZoneFlex R710.

Thank you.

Am I reading this right is that manual from 2006?  People are asking how to setup a AP from 2006?  Looks like is a G AP - people still use that?  I haven't run G on my network in years!!

Is this in a 3rd world country or something? ;)

As nobody answered me, I moved to Zeroshell.
Is a powerfull tool
Thanks

the injector is included in the cost of the AP with unifi, so $89 for the lite model comes with the injector..

So your going to leave your laptop as a wireless repeater in the garage?  Why do you need wifi when your in the driveway?

Anyway - Why do people always want to use a 15mm box wrench when the job calls for 5/8 inch socket.. Can't I just hammer in that nail with this screwdriver?  The hammer is all the way in the other room..

If you want better wifi coverage, then get some real accesspoints and deploy them in the area you want wifi coverage..  This is proper solution to good wifi..  Anything else is doing it wrong..

Thanks for the replies guys.

You are both correct. But I don't want to spend too much time, because you are correct, it's not the best place for wifi and I do plan to plug in an ext AP with AC capability at a later date. But my reasoning for all in one is a temporary solution, as mneinoted, just like I had with my COTS product. Similary, I do want to get a separate efficient switch, but at the moment 3 LAN ports will be fine since most devices in teh house are wireless anyway. And you may say, why waste time with temporary solutions, again my excuse are:

too busy (I've got three little rugrats and still finishing off a new house…hence the want to build IT systems). I take a long time to figure things out, research things as best I can before taking the plunge, etc...

But you're all absolutely correct. It's just a shame I bought it with the WIFI card thinking it could be an interim solution so I could swap out the ISP supplied rubbish, but I can't without WIFI working. Next temp solution, is to plug the ISP supplied rubbish into one of the spare LAN ports...

Save yourself lots and lots of headache and get yourself a real AP, or use a wifi router you have laying around.. Any wifi router can be used as just an AP..

That is the best sort of help anyone could give you would be to keep you from going down the wrong path..  There is ZERO advantage to having a wifi card in your box to use as a AP..  And many many disadvantages..

Your AP should be in the ceiling or wall placed for best wifi coverage.. Not some pci card or worse even some usb stick in your router/firewall..

FIXED!!!

In "System: Advanced: Tunables => net.link.bridge.pfil_bridge - Packet filter on the bridge interface was enabled after the update.
After I disabled it everything is working again

You bridged two different subnets with a DHCP server each and finally ran out of luck. Bridging them meant mixing the traffic at Layer 2 so you could get a reply from the wrong DHCP server.

Not bridging them means you properly route at Layer 3 between the two subnets and a DHCP client broadcast won't reach the DHCP server on the other subnet.

Can I change the RTO values in pfsense? Like whats mentioned here in linux?

http://unix.stackexchange.com/questions/210367/changing-the-tcp-rto-value-in-linux