Problem with two lan networks and access to ap

firefox

Just now I tried to access a network folder
Using ip number

It work

Why not see all computers when entering the network

kejianshi

File sharing uses broadcasts that don't cross subnets to advertise themselves.

So, when you have files and printers shared, the easy way to reach them across subnets is by IP since no broadcast is required that way.

Understand?

If I had known you had shares, I would have suggested it earlier. Good thing stephenw10 did.

stephenw10

If you have a domain controller/WINS server that can register connected clients then you can span subnets I believe, not my area.

If you have enabled "Register DHCP leases in DNS forwarder" then you can access remote machines by their host name but they still won't be discoverable.

You may be able to get discovery to work across the subnets using the IGMP proxy, I've never tried that.

Steve

firefox

Can I assume that the problem
Related to the same reason that you can not access the management interface of the AP

I'm still trying to check why this is happening and fix it
But not urgent
As before

If I run into something on the way so I check and try

At least I have access to shared folders
As you have shown me

stephenw10

It's two distinct problems:

You can't access the wifi router because it's not possible to give it a route back to the LAN side subnet.

You can't see the wifi clients from the wired network because because the protocol Windows uses to discover network shares doesn't span subnets.

I would try adding the route again to the access point. I should do nothing or fix it. The fact that it killed everything last time you tried it implies something wasn't right.

Steve

firefox

@stephenw10:

You can't see the wifi clients from the wired network because because the protocol Windows uses to discover network shares doesn't span subnets.

in My work
There were about 2000 computers connected
Over 50 different networks

I tap the icon "Network" on the computer
I see all the networks
Then click on the network icon
And see all the computers on the network

I guess strains because they are connected to servers
So I guess the server tells computers where they are at,

Is there something similar to pfsense

@stephenw10:

I would try adding the route again to the access point. I should do nothing or fix it. The fact that it killed everything last time you tried it implies something wasn't right.

I prepare a file with all the screenshots of this router
I will attach it to the next post
See what I did there
What should be done

@stephenw10:

You can't see the wifi clients from the wired network because because the protocol Windows uses to discover network shares doesn't span subnets.

I use Linux not Windows

How can you upload here a presentation weighs 2.8 MB
Or upload more images in a single message

firefox

Here is a link to download the pdf file
With a screenshot of the router's management interface

http://www.fileswap.com/dl/R6JzKxPLhV/ap.pdf.html

stephenw10

@firefox:

I guess strains because they are connected to servers
So I guess the server tells computers where they are at.

Exactly.

@firefox:

Is there something similar to pfsense?

No. (I assume you mean for pfSense)

You are probably using the Windows SMB protocol for file shares in Linux, though there are others, so the same applies. You need a domain controller to register the available shares across all subnets and distribute that information. This isn't my forte though. ;)

Here is a useful thread: http://forum.pfsense.org/index.php?topic=22064.0

I would try adding the route I described earlier into the AP routing table again. I can't see how it could possibly break anything. It may not work but it should cause any harm.

Steve

firefox

Is the Avahi package can fit

I read in this thread
About a similar problem

http://forum.pfsense.org/index.php?topic=60967.5

When I read the thread you gave a link for it
It said it is related to DNS

stephenw10

Avahi does what you want but only for the mDNS protocol. This is used primarily by Apple but also by various media streamers, NAS boxes etc. Apples Bonjour file sharing service uses it. Reading that wiki page I see that it also supports Linux's nss so you might be able to use that. I've never tried, I would have to do a lot more reading before attempting it! ;)

Steve

kejianshi

You really do not want to rely on broadcasts to keep track of 2000 computers and their shares.

You need to get it mapped by IP and just access shares with IPs.

stephenw10

I think the 2000 machines were just given as an example of how network shares can work perfectly across any number of subnets as long as some central server is tracking and distributing them.
Using Avahi and NSS might be a solution if your network is all Linux/BSD. Interesting prospect.

Steve

kejianshi

SAMBA4 might be something to look at as a stand-alone DC.

https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO

stephenw10

Yes that would be the correct way to do it. It does mean you need an always on machine in addition to pfSense.
JimP posted, a long while back now, about trying to make a cut down samba package that only ran as a WINS server. I don't think he could make it work which is a shame since it would fulfill these duties perfectly.

https://forum.pfsense.org/index.php/topic,22561.msg116962.html#msg116962

Steve

kejianshi

I use SAMBA and I have a WINs server set up. To save trouble, I have it running in a VM thats doing a whole lot of other things also.
UBUNTU is really simple to do this with. So is Mint and Centos. Or it would also be simple enough to do it with the LINUX computer he is using as a work station currently. It would be invisible to him once he set up the samba.conf Only thing is, its not going to handle more than just 1 subnet unless he is magician. Thats the part I'm not clear on. How many subnets are there?

(I maintain this, but I don't ACTUALLY need it)

stephenw10

It should work fine as long as you specify the IP of the WINS/samba machine in the DHCP settings from the other subnet. In his case wireless clients can contact a samba server on the wired side by IP no problem so as long as they are set to use that for netbios queries it should work. Of course it relies on having the samba machine up before anything else tried to connect.

Reading some docs it seems the only part of samba neccesarry to get this working is nmbd. Someone must have made a FreeBSD package for that already I'm thinking.

Steve

firefox

I already have Samba on Linux computers
But it does not help

They only see computers on their network

@kejianshi:

You really do not want to rely on broadcasts to keep track of 2000 computers and their shares.

You need to get it mapped by IP and just access shares with IPs.

It was an example of computer network at work

I have a computer with a virtual machine on it
Not the most powerful computer
Because there is only one machine
And the computer does not carry

I will try to add another one and see if the Avahi package works

stephenw10

If you're already running a samba server, I imagine any Linux machine could do that, the configure it to be a WINS server. Then add the IP address of that machine to the DHCP server config on both the wired and wireless networks. There's a field for that marked 'WINS servers'. You will have to make sure that machine is always on (or almost always). You won't need a powerful machine to do this it should require almost nothing by way of resources.

Avahi will not help if you are using SMB shares.

Steve

kejianshi

I'm on Samba version 3.6.3

I think you'd need to get to version 4 to attempt this the way you want.

stephenw10

What makes you think that? Samba has had WINS support for like forever. ;)

Steve