*AIO* All-in-one box
-
I bought a cheap AIO myself and was thinking of turning it into a wireless rig. It has two full mini-pciE slots. I was planning on wifi/cellular but with two separate radios your project is doable. Make sure to separate the two wireless networks the most you can. Put one on channel 36 and one on 165. For example. Maybe consider one network on 2.4 and one on 5ghz if your congestion is low on 2.4ghz.
Here is the AIO i got for 40 bucks.
http://www.ebay.com/itm/371262352319 -
@MrCount:
run0 connects successfully to the WiFi with DHCP (192.168.178.1 is the WiFi AP)
run1 acts as AP and seems to work, only the DHCP does not give IPs to connecting clients (192.168.1.1 is the AP with new SSID), so I had to enter it manually on my connected laptop.The next thing is, that I had no connection to the internet through the AP, but I think this is cause I have no firewall rules set for the devices.
If anyone could give me some tipps…. 8)Am at work, must be brief, how are your interfaces (WAN, LAN, OPTx) assigned? Also - https://forum.pfsense.org/index.php?topic=89045.0
-
If you think its a firewall rule issue you can turn of the firewall and use upstream firewall until you get it configured correctly.. Under System:Advanced:Firewall/NAT
Obviously this is less than safe but it works.
-
MrCount, can you post a link to EXACTLY what you purchased and also tell me how well its functioning.
I'm pretty down on USB wireless with pfsense but if it works well for you and is stable then I'd probably grab one for my own use. If the cost isn't too much.
-
Obviously his definition of AIO is different than the industry norm.
HP Compaq t5720 Thin Client
Rather poor choice for the task.
-
Maybe a mikrotik card on a 90 degree riser could work with 2 radios.
http://www.ebay.com/itm/121556421225
-
@Phishfry:
Maybe a mikrotik card on a 90 degree riser could work with 2 radios.
http://www.ebay.com/itm/121556421225
I considered that but I wasn't sure that even with the bracket taken off it would fit comfortably inside. And then drilling holes for antenna aerials, adding cost for antennas/pigtails to the riser and adaptor card..
I am very surprised to see Mini PCI (not PCIe) 802.11n cards though, I wouldn't have thought that would be a thing - http://store.netgate.com/miniPCI-Cards-C26.aspx
-
Sounds like he already bought the RAlinks so i am wondering how he will make out… I had less than stellar time with them. I would imagine that external directional antennas for the Site to Site link would be best and an omni for the AP...I wonder how an 150M single channel link is going to provide for 5-8 people. Maybe OK for light browsing..
-
I am using a mini pci card in my riverbed steelhead 100 with good results.
-
Looks like the Ralink RT3071 is only 802.11b/g/n as well…..(No 5 ghz)
He also mentions Ralink RT3072 so who knows..
-
I wonder if this is the device he is using. I really wonder how the radio could put out 1000mw yet max draw from usb2 is 500ma. If I am correct. Sure seems like a large power draw to me. Mikrotik quotes 2-3 watts for their high output radio -for an example.
http://www.amazon.com/Etekcity%C2%AE-Wireless-Integrated-Notebooks-Computers/dp/B006JWMOOI
Here is an example of the generic RA3072 -
I wonder if this is the device he is using.
-
Can we get those any closer to each other? hehe.
Does it work well as an AP (not adhoc)?
-
I'm still in testing, but today I have not the time :-\
-
Cool - Thanks!
-
I hope i didn't come across as to gruffy. I encourage all experimentation.. I just had problems with the RA3071. I think its less than top notch hardware.
The Atheros usb is a no go I have found as well.I really think your USB solution could work but you got problems with a 2.4 ghz network. The channel spread is so small your going to have troubles. It might work but i see collisions ahead.
Maybe consider a mimo cantenna arrangement for the backhaul. Since your on a budget..
http://en.wikipedia.org/wiki/Cantenna -
Okay, got it up and assigned all interfaces…
run0 -> WAN (on USB1)
IPv4: DHCP
IPv6: none
set SSID & WPA
connects to the WiFi and gets IPrun1 -> OPT1 (on USB2)
IPv4: 192.168.1.1 /24
IPv6: none
set new SSID & WPA
enabled DHCP 192.168.1.100 - .199 /24
I am able to connet to that AP and get an IPvr0 -> LAN (onboard LAN)
IPv4: 192.168.0.1 /24
IPv6: none
enabled DHCP 192.168.0.100 - .199 /24
used for configurationThe problem is that I can't get a connection to the internet on OPT1.
What rules do I have to set?? :oThe CP doesn't show either, but I think this is because there is no connection to the internet.
Typing the address manually gets me to the CP. -
I hadn't thought of that. How would your pfSense box authenticate itself to the upstream captive portal? If you logged it in with your credentials would not the rest of your office be sharing your authenticated session? Can you ask the admin of the upstream AP to create an exception for your WAN MAC address so you are not putting a CP behind a CP?
Some of the CPs I have seen can be tricky as they grab the attention of the browser on your device and then have a string of automatic redirects. We are setting one up at work and when it works its works, when it doesn't trying to wrestle control of the browser for even basic toubleshooting is a nightmare, it just flips to wherever it is sent and trying to pause it to so much as show the URL or IP it is going to is impossible.
The problem is that I can't get a connection to the internet on OPT1.
What rules do I have to set?? :oThe CP doesn't show either, but I think this is because there is no connection to the internet.
Typing the address manually gets me to the CP.Can you get anything from LAN? If so check your firewall rules to make sure you have HTTP, HTTPS, DNS allowed (and ICMP for PING etc) from the OPT1 interface. Show screenshots from your config if you still have issues.
Which CP can you acces by IP, the local one or the upstream one?
-
How would your pfSense box authenticate itself to the upstream captive portal? If you logged it in with your credentials would not the rest of your office be sharing your authenticated session?
Yes, the authenticated session would be shared, but that is no problem.
Which CP can you acces by IP, the local one or the upstream one?
the local one
Can you get anything from LAN?
no, I have no access to the internet on LAN
Firewall rules:
WAN has actually no rules
LAN has 3 (anti-lockout, 2x default LAN to any)
OPT1 has no rules configured -
Sorry MrCount, I think I started off by looking at this in terms of your pfSense box for you to configure rather than seeing it as a link in the chain. You may have covered all this but rather than me making assumptions lets start from scratch.
Quote
How would your pfSense box authenticate itself to the upstream captive portal? If you logged it in with your credentials would not the rest of your office be sharing your authenticated session?
Yes, the authenticated session would be shared, but that is no problem.
Perhaps not for you, but have you spoken to those responsible for the upstream network? I would strongly recommend you do so if you haven't. If they are aware of your project they may be able to help you (for example letting you bypass their CP) but if they are not and discover what you are doing the hard way they may get quite upset. Think of it this way, from their perspective you can either work with them or around them, and if your position were reversed which would you prefer?
As I say if you already have some agreement for this great, carry on, but if not it should be the very next thing you do.
Quote
Which CP can you acces by IP, the local one or the upstream one?
the local one
Quote
Can you get anything from LAN?
no, I have no access to the internet on LAN
Firewall rules:
WAN has actually no rules
LAN has 3 (anti-lockout, 2x default LAN to any)
OPT1 has no rules configuredYou will need to configure the rules for OPT1 but ignore those until you have internet working from LAN.