Challenge, how would you do it?



  • Materials:
    pfSense Box with two NICs (wan and lan)
    one ADSL modem (pppoe)
    one unmanaged DELL PowerConnect switch
    two wireless routers
    4 PCs (wired)
    3 Laptops (wireless)

    Setup:
    Need to have two networks independent of eachother
    |-> one network will be for home use, one network will be for public wireless

    how would I go about setting this up?

    Would it be easier to just buy another NIC?



  • What kinds of wireless routers?
    Are they 802.1Q capable?



  • good question, no they are not.



  • If you want these networks to be independat: yes it would probably be the easiest to just add another NIC.
    Otherwise, even if the logically "should" not be able to communicate, theres always the chance something spills over.

    Otherwise you could add an IP to the LAN interface as described here: http://doc.pfsense.org/multiple-subnets-one-interface-pfsense.pdf
    Set the wirelessrouter into routing mode and have to wirelessrouter doing the DHCP.
    Create a static route pointing to the IP of the wirelessrouter for the subnet behind the wireless router.

    Physically this leads to such a setup:

    [192.168.0.1/24]
    pfSense–-----------------switch------office-clients [192.168.0.0/24]
    [172.16.0.1/24]                    |
                                             |
                                   [172.16.0.2/24]
                                            AP
                                   [172.31.0.1/24]
                                             |
                                             |
                                    private-clients
                                   [172.31.0.0/24]

    Logically its like this:

    [192.168.0.1/24]
    pfSense–---------------------- office-clients [192.168.0.0/24]
    [172.16.0.1/24]               
                                         
                                            \–-- [172.16.0.2/24] router [172.31.0.1/24] –-------private-clients [172.31.0.0/24]

    However this is NOT A GOOD WAY TO SET A SEPARATION BETWEEN TWO NETWORKS up.
    And a second NIC is easier too ;)



  • instead of wireless routers why not just use atheros wifi cards? one for each subnet?


Log in to reply