WIFI with Linksys rooter

running · Dec 9, 2008, 2:39 AM

Hello i have looked and tried some stuf but i can't get to waht i want

I have a PFsense box and i have a WIFI Linksys rooter that i want to connect to PFsense witout the WIFI having acces to the network

-I have an otp1 interface avalable

On the WIFI rooter do i have to plug to the WAN or LAN port
-I kow i have to disable the DHCP and giv it another IP but it is not working!

Thank's for the help!

GruensFroeschli · Dec 9, 2008, 5:23 PM

First you have to configure your OPT interface correctly.
Connect the LAN interface of the linksys AP to your pfSense.

running · Dec 16, 2008, 6:56 PM

Got it working, thank you!
http://doc.pfsense.org/smiller/Install_Guide.htm

Thank you!

running · Dec 16, 2008, 6:57 PM

Is there a way to be shure that WIFI as no acess to the file server?

GruensFroeschli · Dec 16, 2008, 6:59 PM

I have no idea what you're talking about….

http://forum.pfsense.org/index.php/topic,7001.0.html

running · Dec 16, 2008, 10:49 PM

With that setup i don't want user connected to WIFI on OPT1 to have access to the rest of the network

I have tested some things and it dose not look like i can connect to share drives.

I was wondering if their is other way to validate my installation

GruensFroeschli · Dec 17, 2008, 6:08 AM

What rest of the network?
On the LAN-interface? on the OPT-interface?
Without you giving a description of what is where (which server? where is it? what IP's where?) i cannot help you.

How do you connect to shares? What shares? windows, smb? via "My Network Places"?
Such a test is unrealiable and means notting because the "My Network Places" works only with UDP broadcasts which connot go over a router.
Someone could still type \IP and connect.

running · Dec 17, 2008, 2:55 PM

Wow i never thought my question was so complicated ;)

I have 3 network card in my Pfsense box
1 WAN
1 LAN
1 OPT1 (WIFI)

My Windows server is connected on the LAN true 2 24 ports HP switch

I have a Linksys WIFI rooter connected to OPT1

I don't want the users connected to the WIFI to have access to anything else than the internet true WIFI. No access to the rest of the network.

I have tested with \IP, \server name and PING the server and it look's like i cant get to it.

I wanted to have a confirmation from you that i was indeed protecting my client correctly.

I hope it is enough info

Tank you for your patience!

GruensFroeschli · Dec 17, 2008, 3:40 PM

Well if you want to make sure it behaves as you want, you have to describe accordingly accurate :)

Probably the easiest way to make sure is if you create a single rule on the OPT-interface:

allow ; protocol:any ; source:OPT-subnet ; sourceport:any ; destination:**!**LAN ; destinationport: any

note the **!**LAN
This means: destination NOT LAN

Like this all traffic not going to the LAN will be allowed.
Anything else will be blocked.

running · Dec 17, 2008, 4:13 PM

Thanks i will try that

For 2009 i will be a better man and give more info on my post ;D