Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Blocking off wireless network.

    Scheduled Pinned Locked Moved Firewalling
    64 Posts 3 Posters 13.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      Cool - Do it exactly the way doktornotor  described above - When you add the new interface, don't forget to activate DHCP and to give it a new / unique IP and DHCP range.  Then set firewall rules to allow traffic, similar to what you have on LAN (I hope).
      And WTF, if you have any issues, I'll check back to see if I can help.  Its not difficult.

      1 Reply Last reply Reply Quote 0
      • C
        CaptainWTF
        last edited by

        I haven't a clue what the fuck happened but now the machine doesn't work at all. I don't even get video output from it…. -.- Gonna do a bios reset and let it sit for a bit.

        1 Reply Last reply Reply Quote 0
        • D
          doktornotor Banned
          last edited by

          Well, if the machine's hostname is "wtf", that'd kinda explain it…  ;D ;D ;D

          1 Reply Last reply Reply Quote 0
          • C
            CaptainWTF
            last edited by

            @doktornotor:

            Well, if the machine's hostname is "wtf", that'd kinda explain it…  ;D ;D ;D

            LOL, Well i've a HDMI, VGA, and DVI port on this beast. I checked DVI/HDMI no go. So I pulled power to PSU, shut off PSU, Pulled CMOS battery. jumped the reset pins on the board. let it sit for 5 min. now it shows me something on the screen. So let me see if I can't get back to breaking stuff. :P

            1 Reply Last reply Reply Quote 0
            • C
              CaptainWTF
              last edited by

              So Now i have WAN, LAN, and OPT1 interfaces.

              Renamed OPT1 to AP

              Type should be?…. DHCP or static?

              Should be static...

              Now as far as what kejianshi said about giving it a new IP and DHCP range elaborate further?

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                Just set up DHCP server on the AP interface.

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  The OPT1 should have a static IP just like the LAN, but a different subnet.
                  Then go to DHCP server and set up DHCP for that interface, just like the LAN (but different subnet).

                  WTF - You can do it…

                  Purely for instance:

                  LAN - Static IP of 10.10.30.1 set up as a /24 and in DHCP range of 10.10.30.50 - 10.10.30.150

                  OPT1 - Static IP of 10.10.40.1 set up as a /24 and in DHCP range of 10.10.40.50 - 10.10.40.150

                  Just as an example...

                  If that doesn't work, I don't know WTF is wrong...  Captain.

                  1 Reply Last reply Reply Quote 0
                  • C
                    CaptainWTF
                    last edited by

                    Okay, theres that.
                    http://img38.imageshack.us/img38/2925/ov3c.png

                    Finally I got it set up properly.  The pfsense box has assigned the AP an ip of 10.0.1.10, Now on the AP side of things I believe i'm sticking it into straight up AP mode. no DHCP or anything, which should have it pull addresses from the pfsense machine I believe.

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      WTF, looks like it works!  :o ;D

                      1 Reply Last reply Reply Quote 0
                      • C
                        CaptainWTF
                        last edited by

                        @doktornotor:

                        WTF, looks like it works!  :o ;D

                        So far, Only problem is the AP interface doesn't pull WAN connection.

                        And how do I get the AP to pull DHCP requests from the PFsense box, Its running DD-WRT

                        I tried at one point to have it pull DHCP requests from the pfsense box but it ended up making the AP inaccessible via webgui and telnet so I had to reset it.

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          @CaptainWTF:

                          So far, Only problem is the AP interface doesn't pull WAN connection.
                          And how do I get the AP to pull DHCP requests from the PFsense box, Its running DD-WRT
                          I tried at one point to have it pull DHCP requests from the pfsense box but it ended up making the AP inaccessible via webgui and telnet so I had to reset it.

                          You should follow the docs:

                          http://www.dd-wrt.com/wiki/index.php/Wireless_Access_Point#Long_Version

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            Yeah - I have a DDWRT set up as AP like you want - Following that manual will do it.
                            Caution - During that whole process, make sure you are SAVING after every step - Not applying.

                            Do apply at the very end, then under admin interface in DDWRT, at very end, reboot.
                            Make sure you tell the AP to grab a static IP outside the DHCP range on OPT1.

                            Should be all good.

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              +1, works perfectly fine here.

                              1 Reply Last reply Reply Quote 0
                              • C
                                CaptainWTF
                                last edited by

                                @kejianshi:

                                Yeah - I have a DDWRT set up as AP like you want - Following that manual will do it.
                                Caution - During that whole process, make sure you are SAVING after every step - Not applying.

                                Do apply at the very end, then under admin interface in DDWRT, at very end, reboot.
                                Make sure you tell the AP to grab a static IP outside the DHCP range on OPT1.

                                Should be all good.

                                Followed those instructions SPECIFICALLY. did not work. lol. AP is not assigning ip addresses. nor can I acces web UI anymore.

                                1 Reply Last reply Reply Quote 0
                                • K
                                  kejianshi
                                  last edited by

                                  The AP isn't supposed to assign the IPs.
                                  Pfsense is supposed to handle DHCP for it.
                                  You should have given your DD-WRT a static IP.
                                  Trust me when I tell you, you didn't do something EXACTLY as you are supposed to.

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    CaptainWTF
                                    last edited by

                                    @kejianshi:

                                    The AP isn't supposed to assign the IPs.
                                    Pfsense is supposed to handle DHCP for it.
                                    You should have given your DD-WRT a static IP.
                                    Trust me when I tell you, you didn't do something EXACTLY as you are supposed to.

                                    I did follow the tutorial EXACTLY as I was supposed to.

                                    AP is set to assign out IP at 10.0.1.10-245 and I set the IP of the AP static @ 10.0.1.5 so shut your face sir :P

                                    I followed that tutorial EXACTLY word for fucking word.

                                    3 times.

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      doktornotor Banned
                                      last edited by

                                      @CaptainWTF:

                                      AP is set to assign out IP at 10.0.1.10-245 and I set the IP of the AP static @ 10.0.1.5 so shut your face sir :P
                                      I followed that tutorial EXACTLY word for fucking word.

                                      Uh, WTF!

                                      Open the Setup -> Basic Setup tab
                                      WAN Connection Type : Disabled
                                      Local IP Address: 192.168.1.2 (i.e. different from primary router and out of primary router's DHCP pool)
                                      Subnet Mask: 255.255.255.0 (i.e. same as primary router)
                                      DHCP Server: Disable (also uncheck DNSmasq options)
                                      (Recommended) Gateway/Local DNS: IP address of primary router (many things will fail without this)
                                      (Optional) Assign WAN Port to Switch (visible only with WAN Connection Type set to disabled): Enable this if you want to use WAN port as a switch port
                                      (Optional) NTP Client: Enable/Disable (if Enabled, specify Gateway/Local DNS above)
                                      Save

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kejianshi
                                        last edited by

                                        Its ok.  You know what they say. 
                                        If at first you don't succeed - WTF - Try, Try again.  And again. And sometimes again.
                                        You will get it right.
                                        BTW - All of the things they list as "Optional" and "recommended" in that how-to aren't optional.
                                        Disable all the optional stuff as well and take all the optional steps.
                                        (Sorry if I didn't mention that before - Shutting face now  :P)

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          CaptainWTF
                                          last edited by

                                          @kejianshi:

                                          Its ok.  You know what they say. 
                                          If at first you don't succeed - WTF - Try, Try again.  And again. And sometimes again.
                                          You will get it right.
                                          BTW - All of the things they list as "Optional" and "recommended" in that how-to aren't optional.
                                          Disable all the optional stuff as well and take all the optional steps.
                                          (Sorry if I didn't mention that before - Shutting face now  :P)

                                          BLAHHHHHH, Okay. I'll give it another shot :) thanks lol.

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            kejianshi
                                            last edited by

                                            O Captain! My Captain! WTF not I say.  Good luck.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.