Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Guide to setting up Atheros AP with pfsense?

    Scheduled Pinned Locked Moved Wireless
    21 Posts 7 Posters 13.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hoba
      last edited by

      I haven't tried that kind of setup. I usually bridge the wireless interface to the wired lan in such scenarios which works fine. I know there are some limitations when bridging a wireless interface (you only can bridge a wireless interface to another one if it's in AP mode).

      1 Reply Last reply Reply Quote 0
      • G
        GoldServe
        last edited by

        I can't believe pfsense doesn't work when I bridge the WLAN with the LAN with no LAN device plugged in. I'm not understanding why that is a problem? How do other platforms overcome this issue?

        1 Reply Last reply Reply Quote 0
        • H
          hoba
          last edited by

          Afaik it's a freebsd issue.

          1 Reply Last reply Reply Quote 0
          • G
            GoldServe
            last edited by

            Really…I'm surprised no one tried to fix this. How much would a bounty do?

            1 Reply Last reply Reply Quote 0
            • S
              sullrich
              last edited by

              This is a kernel issue not a pfSense issue.

              1 Reply Last reply Reply Quote 0
              • G
                GoldServe
                last edited by

                One more problem. I've got the wireless not bridged and on a seperate subnet from the wired now. Two clients connected and can ping the gateway of own and lan but can not ping another wireless client. Anything required in the firewall rules? Seems like it's doing AP isolation.

                1 Reply Last reply Reply Quote 0
                • GruensFroeschliG
                  GruensFroeschli
                  last edited by

                  you need set the checkbox "Allow intra-BSS communication"

                  We do what we must, because we can.

                  Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                  1 Reply Last reply Reply Quote 0
                  • G
                    GoldServe
                    last edited by

                    Thanks for the response. Works like a charm.

                    1 Reply Last reply Reply Quote 0
                    • S
                      sokar311
                      last edited by

                      Hi, i also have a PfSense configuration with 2 Nics and 1 Wireless Card set as an access point (infrastructure gives me "no carrier"!?), i also have the "Allow Intra-BSS", but seems that the firewall rules don't apply between the wireless clients anymore!, any help?, thanks.

                      1 Reply Last reply Reply Quote 0
                      • GruensFroeschliG
                        GruensFroeschli
                        last edited by

                        Infrastructure = Client
                        Access Point = Access Point

                        Firewall-rules are and were never applied for traffic between clients.

                        We do what we must, because we can.

                        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                        1 Reply Last reply Reply Quote 0
                        • S
                          sokar311
                          last edited by

                          Thak you, but do you know any way to control the traffic between wireless clients with the firewall?

                          1 Reply Last reply Reply Quote 0
                          • L
                            lsf
                            last edited by

                            Vlans might do the trick. I never tested this tho.

                            -lsf

                            1 Reply Last reply Reply Quote 0
                            • H
                              hoba
                              last edited by

                              @lsf:

                              Vlans might do the trick. I never tested this tho.

                              How should tat work? The only option that we provide is to seperate the clients from each other meaning they completely can't talk to each other. Besides that there is no way that I can think of to do that.

                              1 Reply Last reply Reply Quote 0
                              • F
                                flamegrilled
                                last edited by

                                @GoldServe:

                                What are your Ap settings? WPA/TKIP?

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.