Thanks very much guys.. I already ordered one.

Some of these vendors sell wireless stuff and all have donated something to pfSense http://www.pfsense.org/index.php?id=40 –Bill

This is not implemented in GUI, but you could use this parameter on command line, and possibly also hardcode it into /etc/inc/interfaces.inc bssid address     Specify the MAC address of the access point to use when operating     as a station in a BSS network.  This overrides any automatic     selection done by the system.  To disable a previously selected     access point, supply any, none, or - for the address.  This     option is useful when more than one access points have the same     SSID.  Another name for the bssid parameter is ap. This will tell the client to only associate to the AP with whatever mac address you specified.

Any chance you use the wrong antenna port ? Also, you might want to try to lower the output power. If the card has a poor rf output it might be generating too much noise. I have not encountered any behaviour like this with pfsense/freebsd, so this is just a guess. You can also try to play with the following sysctls from a shell. dev.ath.0.txantenna: 0,1,2 (antenna port 0 or 1, both=2) dev.ath.0.rxantenna: 0,1,2 (antenna port 0 or 1, both=2) dev.ath.0.diversity: 0,1 (0=disable 1=enable) dev.ath.0.tpscale: 0,1,2,3,4 (size of increment that TPC will use to up/down the power, normally 1 is the best choice, atleast that is my experience) dev.ath.0.tpc: 0,1 (0=disable 1=enable) dev.ath.0.tpack: 63 (ack power) dev.ath.0.tpcts: 63 (cts power) A little more description: dev.ath.0.txantenna: The antenna used to transmit (normally the same as RX antenna) dev.ath.0.rxantenna: The antenna used to receive (normally the same as TX antenna) (A different RX antenna can be used if your regulatory restrictions makes you want to use a higher RX gain antenna to overcome the output limits of your regdomain. An example would be; you can only output 20db E.I.R.P on a long distance link, and to overcome the signal loss you use a higher gain antenna for RX gain, since you are not transmitting at more then 20dbi you can still receive with 36dbi or more if you like too, as the regdomain restriction is normally only applied to transmitting power and not receive gain. This is perfectly leagal in all of the regdomains as far as I know) dev.ath.0.diversity: Switch off and on the use of antenna diversity (normally only used if you have two antennas connected) dev.ath.0.tpc: Switch on or off Transmission Power Control (can be tricky in point to multipoint applications) dev.ath.0.tpscale: Size of the increment that TPC will use to up/down the power, normally 1 is the best choice, atleast that is my experience. A higher scale value will most likely make the link drop if the signal is close to what it needs to be and the TPC is trottled down.) dev.ath.0.tpack: controll the ack power seperatly (normally the same as tpcts) dev.ath.0.tpcts: controll the cts power seperatly (normally the same as tpack) All this will be controlable from GUI in 1.1 (1.0 is frozen so no new features there) EDIT: this info is added to the wiki http://wiki.pfsense.com/wikka.php?wakka=Wireless EDIT2: this info is also added to the doc site: http://doc.pfsense.org/index.php/Wireless_networking_with_pfSense

These have been in FreeBSD's perforce for a long time but nobody has stepped up to the plate to convert all the drivers and thus get it into the tree. I wouldn't hold my breath on this one.

Not having a clue what I'm trying to do is probably my problem! I'm not very good with 'paint', but have tried. It really isn't supposed to like like a mutant smiley face  :-. What I am trying to do is have Wireless clients authenticated through the captive portal (I have set up IAS on my domain controller, and pointed the captive portal at it, with shared secrets). When authenticated, I want them to use WAN as default gateway and access resources on LAN. Does any of that even make sense?? I hope so. I would like to use WPA as well, but the wl-330g does not support its use with a RADIUS server, and as it's the access point, not pfSense, I guess I can't use pfSense's WPA support? [image: Network.JPG] [image: Network.JPG_thumb] [image: Network.JPG_thumb]

It all depends on how you use it, like if you run in "pure-g" mode there is no need for this. In general one would like CTS/RTS if you run in mixed mode (b/g) in most other scenarios you would have it "off". What protection mode does is prefixing each OFDM data frame with a request to send/clear to send (RTS/CTS) complimentary code keying (CCK) frame sequence. The duration fields of the RTS and CTS frames should allow the IEEE 802.11b node to correctly set its network allocation vector and avoid collisions with the subsequent OFDM frames. CTS to self wil lhave the effect of a 802.11g node telling a 802.11b node that it is going to transmit. Basically this is used as a collision avoidence, since the G node can talk to a b node in DSSS but a B node can not understand OFDM. Also note that Protection mode has a performance penalty because of overhead.

That is correct, the soldering for highpower cards was a older mod iirc.

I tried with TKIP and the i works. Tanks

Ok , excellent thanks.

fyi: EMP-8602 is detected and functioning again in the 04-06-06 pfSense snapshot… http://www.pfsense.com/~sullrich/RELENG_1_SNAPSHOT_04-06-2006/pfSense.img.gz Thanks, -Pete

8021.x is not fully supported in the current version. It will be in 1.1. If you want the support you need to hardcode the values in the hostapd.conf. The hostapd.conf is generated int the wireless section in /etc/inc/interfaces.inc. If you want the config to be generated correctly for 802.1x on reboot or other changes you will need to hardcode your settings in /etc/inc/interfaces.inc. And no, the captive portal radius config will not work with EAP afaik.

no I didn't touch the DHCP setup at all, I just setup the opt2 (wireless) to static IP 192.168.2.1 /24 and expected that my client would be able to connect with a static IP 192.168.2.5 (unchanged from when it worked with v. 0.88). the client said it connected and the siglan is 100%, and in the pfsense system log I could see  " <mac address="">associated" and " <mac address="">authenticated", but now when I look again it also says " <mac address="">WPA: group key handshake completed (WPA)".  I don't recall seeing that in the log when I used the static IP?</mac></mac></mac>

Which Version of pfSense are you running? In case it's not http://pfsense.com/~sullrich/RELENG_1_SNAPSHOT_03-26-2006/ please upgrade. pfSense is synced against the freebsd 6.1 tree frequently and there might be newer driver or HAL versions that possible will fix the problem. There are also some improvements at the wireless interface menu (like only showing valid channels for your card in the dropdown). Also try rebooting after you changed the settings. I have encountered some issues with atheros cards being in a somehow invalid state after changing settings. As far as we have diagnosed them they seem to be driver related so there is nothing we can do about this atm other than to wait for a driver that fixes it.

I have not measured it with an RF power meter, but it seems to me that the txpower attribute of the cisco a/b/g card is : 2 txpower units ~ 1dB Had measured the cisco LMC 352 PCI card and found the reception index (0-100%) to be related with the RX input power, expressed in dBm, in the following  proportion : 2% units ~ 1 dBm. Linearity from 10% to 90%, if I recall correctly, was within +/- 1,5 dB. So, if you need it displayed in mW you have to do the log -> linear conversion. What is easy to include in pfSense, is the RSSI to RX dBm conversion for the Atheros cards. It just takes a subtraction for it RSSI - 95 = RX input in dBm. Example : RSSI = 35 -> Rx = -60dBm Read it in a paper, but I can verify it also if you deside to include this option in a future release.

If you are looking for the best wireless support then you should go for a atheros based card. see http://madwifi.org/wiki/Compatibility for a card listing that should work with pfSense.

Fast frames/compression/bursting/XR? Is any of the features above implemented in the BSD atheros drivers? http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/contrib/dev/ath/ah.h HAL_CAP_COMPRESSION     = 12,   /* hardware supports compression / HAL_CAP_BURST           = 13,   / hardware supports packet bursting / HAL_CAP_FASTFRAME       = 14,   / hardware supoprts fast frames / HAL_CAP_XR              = 21,   / hardware has XR support  */

This is normally caused because of a recognized region setting. Try to change the regionsetting of the card, it will normally fix this.

AFAIK, the linux driver has the same HAL if it's the normal madwifi driver. The madwifi-ng driver is different iirc.