That is the reason NAT exists, it can handle multiple subnets into one public ip
So you don't have to bridge for that. Bridging is ok, if you like to have some rules for that network trafic(it does go thru firewall -> it will be checked)

Automatic outbound nat handles that one ip-address, if you like to have multpile ip's then you need manual outbound nat.

I'm sorry you're doing this hardway ;)

kankabir, did you ever get this issue resolved?

Thanks for the reply. I have searched but I also have not found much that is either recent or relating to 2.0 RC3.

I have had poor luck with 4 or 5 PCI, PCIe and USB cards so far and I'd like to find something that works as a simple access point with what I already own - or confirm 100% that a card will work on 2.0 RC3 prior to purchasing.

I will try to search more specific in the future.

Sorry, I did not click on the scroll down button. All right then.

Thank you!

Hello! Wallabybob:

Thanks your great information.

WN822N is not recognized by system. I got a new USB wifi adaptor Edimax EW-7711USn, RT3070 based, which shall be the

same with Tenda W311U. The new one is recognized on pfsense 2.0 correctly.

Thank you so much!

You could set the APs to WPA2-enterprise, setup a radius server (perhaps using the FreeRADIUS package on pfSense) and handle the users that way. That would be the only way to have pfSense or something else handle the actual WPA2 auth. If you just want to force a login after they're already on, then the captive portal would work as bman212121 said.

@Dean333:

I Have enabled DHCP server on my Wireless NIC interface and configured for 10.0.0.x - 10.0.0.x range to be issued, what i am unsure of is should i make gateway and dns server 192.168.1.200 or do I need to make it my Wireless NIC card address which is 10.0.0.10 ?

Use your WLAN NICs IP or even leave blank on the DHCP config page.

@Dean333:

I also added a firewall rule on wireless interface to forward wireless subnet to wan address which i had no luck with

A rule does not forward traffic. It permits or denies it.
What you did with that rule is: you allowed traffic to your WAN interface. And only to that IP. Unlikely you want to surf your firewall, right?  :)

Create a rule which allows traffic to everything but LAN (use the NOT checkbox) and you should be set. Then your guests cannot access LAN but everything else.

That is good to to know cmb. Here is the interface stats for OPT1, the AP's interface. There seems to be a looseness of tho words in and out. I think in this case in is internet bound traffic.

I thought I may have been getting packet collisions, but it appears I am definitely not. By the way, with my wireless router in AP mode, I have no logging ability on that device. Let me know if there is other interface info needed.

OPT1 interface (vr2)
Status up
MAC address
IP address 172.31.33.1 
Subnet mask 255.255.255.0
Media 100baseTX <full-duplex>In/out packets 2655807/2653524 (219.16 MB/6.02 GB)
In/out packets (pass) 2653500/5103681 (219.06 MB/6.02 GB)
In/out packets (block) 2307/24 (101 KB/1 KB)
In/out errors 0/0
Collisions 0</full-duplex>

Hej

I saw at the forum that you have a DWA-140 USB Adapter set to your pfSense box, i just wont to know how it works and if where is anything i need to be aware off?

I thought that it worked fine at first, but it's not that great.  But I've only used it in AP mode.  I've tried 3 different USB WiFi adapters and I haven't had very good results with AP mode.  They've caused a lot of instability (lock ups every few days).  I haven't had a lock up since I disabled the USB wifi adapter.

Is this something others have experienced?

edit:
Just to make it more simple

I have a noname box with 3 ethernet ports and 2 USB ports. Let us call them et0 et1 8-10 et2.
et0 is for LAN with IP 192.168.1.1 /24
et1 is empty.
et2 is to WAN

I would like to create a wireless network with the same DHCP etc as my LAN network.
It can be a USB device or an Ethernet device that does not matter, it should just be normal range and 8-10 wireless devices at the same time.
Its signal must be at least as good as my old router which is this:
http://www.zyxel.dk/web/product_family_detail.php?PC1indexflag=20040520161246&CategoryGroupNo=PDCA2008004

hhhm really confusing me …

i removed the sim pin from the simcard with my mobilephone, after that, i replugged the simcard to the o2 zte huawai e1750 modem, and now i am connected successfully ... thats a f**** error message .... damn that took days xD

best regards

I'm not sure why you believe USB devices don't come with detachable external antenna. Plenty do including some RAlink 3070 and other Ralink chipset ones for under US$20 shipped from China/HK (eBay, Aliexpress and various other sites) which should I think work to some extent in pfSense 2. Some even come with e.g. unidirectional antennas. No prizes for guessing who they're trying to sell these to, some even advertise aircrack or backtrack support. Dual antenna USB devices seem rarer but also exist (again Ralink 3070 or other chipsets).

Edit: Just realised Ralink RT3070 is a 1T1R chipset. Initially I wasn't sure if there was any benefit to having dual antennas in that case but then realised even though it's 1T1R it's still supposed to be MIMO so there may be. I do also find some USB adapters, still for under US$20 shipped on eBay which claim to have the RT3072 and be 2T2R (that should follow anyway). However I'm guessing 2T2R doesn't actually work on FreeBSD 8 and therefore pfSense since 802.11n speeds don't so there's no current advantage to 2T2R. In any case guess it's obvious I'm still learning about wifi ;-)

As for which one is better for speed, I can't say. I know USB devices have tended to show poor bandwidth (depending somewhat on the chipset and computer). This has definitely been the case for mass storage devices (particularly hard disks when compared to Firewire 400) but I think also ethernet devices. In other words, even if your wireless adapter is theoretically capable of up to 150mbps and your USB port 480mbps it doesn't mean you'll ever achieve that (of course pfSense is still limited to 802.11g speeds anyway I believe).

After another two days the whole system died. I returned the wireless adapter and now have a standard router as AP. my patience ran out, it might have gone to get it but so much trouble, it should not have to be. Google Translate <3 Thanks everybody

Radio interference could lead to damaged packets (errors).

@wallabybob:

I think its rated for 150Mbps. If I recall correctly, there is a W322U which is not much more expensive and rated for 300Mbps. I have no experience with the W322U. There is no support yet in pfSense for 802.11n features.

Ahh, thanks. One final question though. If pfSense doesn't support 802.11n at all, why is there an entry for "run" (RaLink 802.11n USB) support in the wireless interfaces spreadsheet that shows support? Or is it just that the run driver exists but doesn't actually run at 802.11n speeds?

Thanks,
B.

EDIT Found my answer here: http://forum.pfsense.org/index.php?topic=31889.0

Thanks again.

anyone have a link for a good one wi fi card that would work from ebuyer.co.uk? (not being lazy already bought one from there that didnt work) cheers

Your rules for INTEL and WLAN should probably both specify source=LAN net since the INTEL interface and WLAN interface don't have IP addresses. I've no idea what source will actually go into the firewall rules when you specify a network which does have an IP address. You will also need to add the rule I gave earlier to allow DHCP.

Have you checked the firewall log to see if the access attempts from wired to wireless have been blocked by the firewall? And remember to reset firewall states if you change the rules.

thanks thermo, I saw that one but wasn't sure, linitx is where I bought the rest of the router from …

update - the Atheros card I bought has been working fine for quite a few days, and I'm putting it into "production" soon.

Anyone else coming across this thread, the Atheros wifi hardware for mini pcie seems to work best and is a neat solution for a mini-itx based "one-box" router/firewall/access point.

Hopefully "n" support will sort itself out in later versions of freebsd/pfsense.

Kind regards

Hello,

Thanks for your answer.
Actually i added another virtual wlan just for testing.

I finally got everything working. I guess i just configured stuff i shouldn't have to in the first place.
Now i got a wireless AP bridged with lan working great.

Thanks :)

Thats the way AP works, you can imagine that it's only different kind of lancable for wireless users

@pf123user:

Is it possible to duplicate my copper setup (5 external static IPs with 1 external failover and 9 internal subnets - two shared) over to one single wifi access point?

I don't understand what you want to do: have multiple wireless interfaces on a single pfSense box? It might help to include a diagram in an expanded explanation.

@pf123user:

I have a bunch of wireless devices and BSD/PFSENSE isn't picking them up as interfaces wheras my Linksys stuff does.

FreeBSD (and hence) pfSense don't support nearly as many wireless devices as Linux. I presume you mean you are plugging some wireless device(s) into a pfSense box and not seeing it reported as an network interface. That could be because the device is not supported by FreeBSD; it could be because you are looking for it to be reported in the wrong place (for example, expecting it to appear automatically in the (assign interfaces) page without clicking the "+" on that page to add new interfaces.

What devices are you wanting to use (brand, model number and revision please) and what version of pfSense are you using? (2.0 supports somewhat more wireless devices than earlier versions.)