Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Blocking off wireless network.

    Scheduled Pinned Locked Moved Firewalling
    64 Posts 3 Posters 13.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      CaptainWTF
      last edited by

      So Now i have WAN, LAN, and OPT1 interfaces.

      Renamed OPT1 to AP

      Type should be?…. DHCP or static?

      Should be static...

      Now as far as what kejianshi said about giving it a new IP and DHCP range elaborate further?

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by

        Just set up DHCP server on the AP interface.

        1 Reply Last reply Reply Quote 0
        • K
          kejianshi
          last edited by

          The OPT1 should have a static IP just like the LAN, but a different subnet.
          Then go to DHCP server and set up DHCP for that interface, just like the LAN (but different subnet).

          WTF - You can do it…

          Purely for instance:

          LAN - Static IP of 10.10.30.1 set up as a /24 and in DHCP range of 10.10.30.50 - 10.10.30.150

          OPT1 - Static IP of 10.10.40.1 set up as a /24 and in DHCP range of 10.10.40.50 - 10.10.40.150

          Just as an example...

          If that doesn't work, I don't know WTF is wrong...  Captain.

          1 Reply Last reply Reply Quote 0
          • C
            CaptainWTF
            last edited by

            Okay, theres that.
            http://img38.imageshack.us/img38/2925/ov3c.png

            Finally I got it set up properly.  The pfsense box has assigned the AP an ip of 10.0.1.10, Now on the AP side of things I believe i'm sticking it into straight up AP mode. no DHCP or anything, which should have it pull addresses from the pfsense machine I believe.

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              WTF, looks like it works!  :o ;D

              1 Reply Last reply Reply Quote 0
              • C
                CaptainWTF
                last edited by

                @doktornotor:

                WTF, looks like it works!  :o ;D

                So far, Only problem is the AP interface doesn't pull WAN connection.

                And how do I get the AP to pull DHCP requests from the PFsense box, Its running DD-WRT

                I tried at one point to have it pull DHCP requests from the pfsense box but it ended up making the AP inaccessible via webgui and telnet so I had to reset it.

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  @CaptainWTF:

                  So far, Only problem is the AP interface doesn't pull WAN connection.
                  And how do I get the AP to pull DHCP requests from the PFsense box, Its running DD-WRT
                  I tried at one point to have it pull DHCP requests from the pfsense box but it ended up making the AP inaccessible via webgui and telnet so I had to reset it.

                  You should follow the docs:

                  http://www.dd-wrt.com/wiki/index.php/Wireless_Access_Point#Long_Version

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    Yeah - I have a DDWRT set up as AP like you want - Following that manual will do it.
                    Caution - During that whole process, make sure you are SAVING after every step - Not applying.

                    Do apply at the very end, then under admin interface in DDWRT, at very end, reboot.
                    Make sure you tell the AP to grab a static IP outside the DHCP range on OPT1.

                    Should be all good.

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      +1, works perfectly fine here.

                      1 Reply Last reply Reply Quote 0
                      • C
                        CaptainWTF
                        last edited by

                        @kejianshi:

                        Yeah - I have a DDWRT set up as AP like you want - Following that manual will do it.
                        Caution - During that whole process, make sure you are SAVING after every step - Not applying.

                        Do apply at the very end, then under admin interface in DDWRT, at very end, reboot.
                        Make sure you tell the AP to grab a static IP outside the DHCP range on OPT1.

                        Should be all good.

                        Followed those instructions SPECIFICALLY. did not work. lol. AP is not assigning ip addresses. nor can I acces web UI anymore.

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          The AP isn't supposed to assign the IPs.
                          Pfsense is supposed to handle DHCP for it.
                          You should have given your DD-WRT a static IP.
                          Trust me when I tell you, you didn't do something EXACTLY as you are supposed to.

                          1 Reply Last reply Reply Quote 0
                          • C
                            CaptainWTF
                            last edited by

                            @kejianshi:

                            The AP isn't supposed to assign the IPs.
                            Pfsense is supposed to handle DHCP for it.
                            You should have given your DD-WRT a static IP.
                            Trust me when I tell you, you didn't do something EXACTLY as you are supposed to.

                            I did follow the tutorial EXACTLY as I was supposed to.

                            AP is set to assign out IP at 10.0.1.10-245 and I set the IP of the AP static @ 10.0.1.5 so shut your face sir :P

                            I followed that tutorial EXACTLY word for fucking word.

                            3 times.

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              @CaptainWTF:

                              AP is set to assign out IP at 10.0.1.10-245 and I set the IP of the AP static @ 10.0.1.5 so shut your face sir :P
                              I followed that tutorial EXACTLY word for fucking word.

                              Uh, WTF!

                              Open the Setup -> Basic Setup tab
                              WAN Connection Type : Disabled
                              Local IP Address: 192.168.1.2 (i.e. different from primary router and out of primary router's DHCP pool)
                              Subnet Mask: 255.255.255.0 (i.e. same as primary router)
                              DHCP Server: Disable (also uncheck DNSmasq options)
                              (Recommended) Gateway/Local DNS: IP address of primary router (many things will fail without this)
                              (Optional) Assign WAN Port to Switch (visible only with WAN Connection Type set to disabled): Enable this if you want to use WAN port as a switch port
                              (Optional) NTP Client: Enable/Disable (if Enabled, specify Gateway/Local DNS above)
                              Save

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                Its ok.  You know what they say. 
                                If at first you don't succeed - WTF - Try, Try again.  And again. And sometimes again.
                                You will get it right.
                                BTW - All of the things they list as "Optional" and "recommended" in that how-to aren't optional.
                                Disable all the optional stuff as well and take all the optional steps.
                                (Sorry if I didn't mention that before - Shutting face now  :P)

                                1 Reply Last reply Reply Quote 0
                                • C
                                  CaptainWTF
                                  last edited by

                                  @kejianshi:

                                  Its ok.  You know what they say. 
                                  If at first you don't succeed - WTF - Try, Try again.  And again. And sometimes again.
                                  You will get it right.
                                  BTW - All of the things they list as "Optional" and "recommended" in that how-to aren't optional.
                                  Disable all the optional stuff as well and take all the optional steps.
                                  (Sorry if I didn't mention that before - Shutting face now  :P)

                                  BLAHHHHHH, Okay. I'll give it another shot :) thanks lol.

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kejianshi
                                    last edited by

                                    O Captain! My Captain! WTF not I say.  Good luck.

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      CaptainWTF
                                      last edited by

                                      Still doesn't seem to work. what the hell am I doing wrong lol

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kejianshi
                                        last edited by

                                        What version of DD-WRT are you using?  What build number?  (upper right hand corner of screen).
                                        Also, what type of router?  Lets start there.

                                        Also, if you remove DD-WRT router and you plug a computer into the new OPT1 interface, does that work?

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          CaptainWTF
                                          last edited by

                                          before I do the transition itl assign the router an IP from the AP interface. usually 10.0.1.10

                                          Buffalo and a buffalo WZR-HP-n450.

                                          Build v24sp2

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            kejianshi
                                            last edited by

                                            I'm not sure I understand this:

                                            "before I do the transition itl assign the router an IP from the AP interface. usually 10.0.1.10"

                                            Lets take baby steps then.  1st.  Lets make sure that both your LAN and your OPT1 work, have separate IPs and dish out DHCP as expected and that the firewall rules allow traffic.

                                            Could you plug a computer into both of those and test make sure they are up and can access internet.  Then start in on DD-WRT again.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.