Pfsense, olsrd & dnsmasq routing repeater setup how to

ampwifi

Setup pfsense on an ALIX.3D2 Board (1 LAN/ 2 MINI-PCI/ LX800) atheros wifi card. I followed the post on http://forum.pfsense.org/index.php/topic,677.msg8294.html#msg8294 My config file looks like this:

<pfsense><version>3.0</version>
<lastchange><theme>pfsense</theme>
<system><optimization>aggressive</optimization>
<hostname>Host</hostname>
<domain>wifi.local</domain>
<username>root</username>
<password>Pass</password>
<timezone>EST5EDT</timezone>
<time-update-interval><timeservers>pool.ntp.org</timeservers>
<webgui><protocol>https</protocol>
<port><certificate><private-key></private-key></certificate></port></webgui>
<disablenatreflection>yes</disablenatreflection>
<enablesshd>yes</enablesshd>

<maximumstates>20000</maximumstates>
<dnsserver>10.0.0.254</dnsserver></time-update-interval></system>
<interfaces><lan><if>ath0</if>
<mtu><media><mediaopt><bandwidth>100</bandwidth>
<bandwidthtype>Mb</bandwidthtype>
<wireless><standard>11g</standard>
<mode>adhoc</mode>
<protmode>rtscts</protmode>
<ssid>WiFi</ssid>
<channel>6</channel>
<authmode><txpower>99</txpower>
<distance>9000</distance>
<wpa><macaddr_acl><auth_algs>1</auth_algs>
<wpa_mode>1</wpa_mode>
<wpa_key_mgmt>WPA-PSK</wpa_key_mgmt>
<wpa_pairwise>CCMP TKIP</wpa_pairwise>
<wpa_group_rekey>60</wpa_group_rekey>
<wpa_gmk_rekey>3600</wpa_gmk_rekey>
<passphrase><ext_wpa_sw></ext_wpa_sw></passphrase></macaddr_acl></wpa></authmode></wireless>
<spoofmac><ipaddr>10.128.0.1</ipaddr>
<subnet>24</subnet>
<bridge><disableftpproxy></disableftpproxy></bridge></spoofmac></mediaopt></media></mtu></lan>
<wan><if>vr0</if>
<media><mediaopt><bandwidth>100</bandwidth>
<bandwidthtype>Mb</bandwidthtype>
<bridge><disableftpproxy><ipaddr>10.0.0.3</ipaddr>
<subnet>24</subnet>
<gateway>10.0.0.254</gateway>
<use_rrd_gateway></use_rrd_gateway></disableftpproxy></bridge></mediaopt></media></wan></interfaces>
<staticroutes><route><interface>wan</interface>
<network>0.0.0.0/1</network>
<gateway>10.0.0.254</gateway></route></staticroutes>
<pppoe><pptp><bigpond><dyndns><type>dyndns</type>
<username><password></password></username></dyndns>
<dhcpd><lan><range><from>192.168.1.100</from>
<to>192.168.1.199</to></range>
<defaultleasetime><maxleasetime><netmask><failover_peerip><gateway></gateway></failover_peerip></netmask></maxleasetime></defaultleasetime></lan></dhcpd>
<pptpd><mode><redir><localip></localip></redir></mode></pptpd>
<ovpn><dnsmasq><enable></enable></dnsmasq>
<snmpd><syslocation><syscontact><rocommunity>WiFi</rocommunity>
<modules><mibii><netgraph></netgraph></mibii></modules>
<enable><pollport>161</pollport>
<trapserver><trapserverport><trapstring></trapstring></trapserverport></trapserver></enable></syscontact></syslocation></snmpd>
<diag><ipv6nat></ipv6nat></diag>
<bridge><syslog><nat><ipsecpassthru><advancedoutbound><rule><source>
<network>10.128.0.0/24</network>

<sourceport><descr>Auto created rule for LAN</descr>
<target><interface>lan</interface>
<destination><any></any></destination>
<natport></natport></target></sourceport></rule>
<rule><source>
<network>10.128.0.0/24</network>

<sourceport><descr>Auto created rule for LAN</descr>
<target><interface>wan</interface>
<destination><any></any></destination>
<natport></natport></target></sourceport></rule>
<rule><source>
<network>any</network>

<sourceport><descr><target><interface>wan</interface>
<destination><any></any></destination>
<natport></natport></target></descr></sourceport></rule>
<enable></enable></advancedoutbound></ipsecpassthru></nat>
<filter><rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes><max-src-states>5000</max-src-states>
<statetimeout><statetype>keep state</statetype>
<os><protocol>tcp/udp</protocol>
<source>

<port>698</port></destination>
<descr>olsr:,sta:5k,tim:u</descr></os></statetimeout></max-src-nodes></rule>
<rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes><max-src-states>5000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>

<destination><any></any></destination>
<descr>gw-from:,sta:5k,tim:1h</descr></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes><max-src-states>2000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>
<any><destination><address>10.0.0.254</address></destination>
<descr>gw-to:,sta:2k,tim:1h</descr></any></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes>40</max-src-nodes>
<max-src-states>1000</max-src-states>
<statetimeout>1800</statetimeout>
<statetype>keep state</statetype>
<os><source>
<any><destination><any></any></destination>
<descr>*,con:40,sta:1k,tim:30m</descr></any></os></rule>
<rule><type>pass</type>
<interface>lan</interface>
<max-src-nodes><max-src-states>5000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>

<destination><any></any></destination>
<descr>gw-from:,sta:5k,tim:1h</descr></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>lan</interface>
<max-src-nodes><max-src-states>2000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>
<network>lanip</network>

<destination><address>10.0.0.254</address></destination>
<descr>gw-to:,sta:2k,tim:1h</descr></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>lan</interface>
<max-src-nodes><max-src-states>2000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>
<any><destination><address>10.0.0.254</address></destination>
<descr>gw-to:,sta:2k,tim:1h</descr></any></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>lan</interface>
<max-src-nodes><max-src-states>2000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>
<network>lanip</network>

<destination><any></any></destination>
<descr>gw-to:,sta:2k,tim:1h</descr></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>lan</interface>
<max-src-nodes>40</max-src-nodes>
<max-src-states>1000</max-src-states>
<statetimeout>1800</statetimeout>
<statetype>keep state</statetype>
<os><source>
<any><destination><any></any></destination>
<descr>,con:40,sta:1k,tim:30m</descr></any></os></rule>
<rule><interface>enc0</interface>
<type>pass</type>
<source>
<any><destination><any></any></destination>
<descr>Permit IPSEC traffic.</descr>
<statetype>keep state</statetype></any></rule></filter>
<ipsec><preferredoldsa></preferredoldsa></ipsec>
<aliases><proxyarp><wol><installedpackages><revision><description>/firewall_nat_out.php made unknown change</description>
<time>1277909792</time></revision>
<cron><minute>0</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 newsyslog
<minute>1,31</minute>
<hour>0-5</hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 adjkerntz -a
<minute>1</minute>
<hour>3</hour>
<mday>1</mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh
<minute>/60</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout
<minute>1</minute>
<hour>1</hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /etc/rc.dyndns.update
<minute>/60</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot
<minute>/60</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 1800 snort2c
<minute>/5</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday>*</wday>
<who>root</who>
<command></command>/usr/local/bin/checkreload.sh</cron>
<rrd><enable></enable></rrd></installedpackages></wol></proxyarp></aliases></syslog></bridge></ovpn></bigpond></pptp></pppoe></lastchange></pfsense>

My Olsr looks like this:

Save file as: /root/olsrd.conf

Find ".N." Replace "N" with IP Number (1-254).

DebugLevel 0
IpVersion 4
ClearScreen yes
Hna4
{
0.0.0.0 0.0.0.0
#10.0.0.0 255.255.255.0
10.128.0.0 255.255.255.0
}
AllowNoInt yes
Willingness 6
IpcConnect
{
MaxConnections 0
Host 127.0.0.1
}
UseHysteresis no
LinkQualityLevel 2
LinkQualityWinSize 100
Pollrate 0.1
TcRedundancy 2
MprCoverage 7
LoadPlugin "/usr/local/lib/olsrd_httpinfo.so.0.1"
{
PlParam "port" "8069"
PlParam "Net" "0.0.0.0 0.0.0.0"
}
Interface "ath0"
{
HelloInterval 5.0
HelloValidityTime 90.0
TcInterval 2.0
TcValidityTime 270.0
MidInterval 15.0
MidValidityTime 90.0
HnaInterval 15.0
HnaValidityTime 90.0
}
Interface "vr0"
{
HelloInterval 5.0
HelloValidityTime 90.0
TcInterval 2.0
TcValidityTime 270.0
MidInterval 15.0
MidValidityTime 270.0
HnaInterval 15.0
HnaValidityTime 90.0
}

My dnsmasq like this:

Save file as: /root/dnsmasq.conf

Find ".N." Replace "N" with IP Number (2-254).

domain-needed
bogus-priv
#interface=vr0
interface=ath0
bind-interfaces
expand-hosts
domain=olsr
#dhcp-range=vr0,10.0.0.10,10.0.0.250,255.255.255.0,7200
dhcp-range=ath0,10.128.0.10,10.128.0.250,255.255.255.0,300
dhcp-option=119,olsr
dhcp-lease-max=254
no-negcache

Everything works well with the setup so far. I have tried to configure a repeater on the same board and card as the ap, but have not been able to make any headway. Would someone please point me in the right direction. Do I need two wifi cards in the repeater? I have not been able to find a post on this sub. Thank you, Ken

ampwifi

I should mention the repeater config:

<pfsense><version>3.0</version>
<lastchange><theme>pfsense</theme>
<system><optimization>aggressive</optimization>
<hostname>node2</hostname>
<domain>wifi.local</domain>
<username>root</username>
<password>pass</password>
<timezone>EST5EDT</timezone>
<time-update-interval><timeservers>pool.ntp.org</timeservers>
<webgui><protocol>https</protocol>
<port><certificate><private-key></private-key></certificate></port></webgui>
<disablenatreflection>yes</disablenatreflection>
<enablesshd>yes</enablesshd>

<maximumstates>20000</maximumstates>
<dnsserver>10.0.1.1</dnsserver></time-update-interval></system>
<interfaces><lan><if>ath0</if>
<mtu><media><mediaopt><bandwidth>100</bandwidth>
<bandwidthtype>Mb</bandwidthtype>
<wireless><standard>11g</standard>
<mode>adhoc</mode>
<protmode>rtscts</protmode>
<ssid>WiFi</ssid>
<channel>6</channel>
<authmode><txpower>99</txpower>
<distance>9000</distance>
<wpa><macaddr_acl><auth_algs>1</auth_algs>
<wpa_mode>1</wpa_mode>
<wpa_key_mgmt>WPA-PSK</wpa_key_mgmt>
<wpa_pairwise>CCMP TKIP</wpa_pairwise>
<wpa_group_rekey>60</wpa_group_rekey>
<wpa_gmk_rekey>3600</wpa_gmk_rekey>
<passphrase><ext_wpa_sw></ext_wpa_sw></passphrase></macaddr_acl></wpa></authmode></wireless>
<spoofmac><ipaddr>10.129.0.1</ipaddr>
<subnet>24</subnet>
<bridge><disableftpproxy></disableftpproxy></bridge></spoofmac></mediaopt></media></mtu></lan>
<wan><if>vr0</if>
<media><mediaopt><bandwidth>100</bandwidth>
<bandwidthtype>Mb</bandwidthtype>
<bridge><use_rrd_gateway><spoofmac><mtu><disableftpproxy><ipaddr>10.0.1.1</ipaddr>
<subnet>24</subnet>
<gateway>10.0.1.1</gateway></disableftpproxy></mtu></spoofmac></use_rrd_gateway></bridge></mediaopt></media></wan></interfaces>
<staticroutes><route><interface>lan</interface>
<network>0.0.0.0/1</network>
<gateway>10.129.0.1</gateway></route>
<route><interface>lan</interface>
<network>10.0.0.0/24</network>
<gateway>10.129.0.1</gateway></route></staticroutes>
<pppoe><pptp><bigpond><dyndns><type>dyndns</type>
<username><password></password></username></dyndns>
<dhcpd><lan><range><from>192.168.1.100</from>
<to>192.168.1.199</to></range>
<defaultleasetime><maxleasetime><netmask><failover_peerip><gateway></gateway></failover_peerip></netmask></maxleasetime></defaultleasetime></lan></dhcpd>
<pptpd><mode><redir><localip></localip></redir></mode></pptpd>
<ovpn><dnsmasq><enable></enable></dnsmasq>
<snmpd><syslocation><syscontact><rocommunity>WiFi</rocommunity>
<modules><mibii><netgraph></netgraph></mibii></modules>
<enable><pollport>161</pollport>
<trapserver><trapserverport><trapstring></trapstring></trapserverport></trapserver></enable></syscontact></syslocation></snmpd>
<diag><ipv6nat></ipv6nat></diag>
<bridge><syslog><nat><ipsecpassthru><enable></enable></ipsecpassthru>
<advancedoutbound><rule><source>
<network>10.129.0.0/24</network>

<sourceport><descr>Auto created rule for LAN</descr>
<target><interface>lan</interface>
<destination><any></any></destination>
<natport></natport></target></sourceport></rule>
<rule><source>
<network>10.129.0.0/24</network>

<sourceport><descr>Auto created rule for LAN</descr>
<target><interface>wan</interface>
<destination><any></any></destination>
<natport></natport></target></sourceport></rule>
<rule><source>
<network>any</network>

<sourceport><descr><target><interface>wan</interface>
<destination><any></any></destination>
<natport></natport></target></descr></sourceport></rule></advancedoutbound></nat>
<filter><rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes><max-src-states>5000</max-src-states>
<statetimeout><statetype>keep state</statetype>
<os><protocol>tcp/udp</protocol>
<source>

<port>698</port></destination>
<descr>olsr:,sta:5k,tim:u</descr></os></statetimeout></max-src-nodes></rule>
<rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes><max-src-states>5000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>

<destination><any></any></destination>
<descr>gw-from:,sta:5k,tim:1h</descr></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes><max-src-states>2000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>
<any><destination><address>10.0.1.1</address></destination>
<descr>gw-to:,sta:2k,tim:1h</descr></any></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes><max-src-states>2000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>
<network>lanip</network>

<destination><any></any></destination>
<descr>gw-to:,sta:2k,tim:1h</descr></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>wan</interface>
<max-src-nodes>40</max-src-nodes>
<max-src-states>1000</max-src-states>
<statetimeout>1800</statetimeout>
<statetype>keep state</statetype>
<os><source>
<any><destination><any></any></destination>
<descr>*,con:40,sta:1k,tim:30m</descr></any></os></rule>
<rule><type>pass</type>
<interface>lan</interface>
<max-src-nodes><max-src-states>5000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>

<destination><any></any></destination>
<descr>gw-from:,sta:5k,tim:1h</descr></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>lan</interface>
<max-src-nodes><max-src-states>2000</max-src-states>
<statetimeout>3600</statetimeout>
<statetype>keep state</statetype>
<os><source>
<network>lanip</network>

<destination><any></any></destination>
<descr>gw-to:,sta:2k,tim:1h</descr></os></max-src-nodes></rule>
<rule><type>pass</type>
<interface>lan</interface>
<max-src-nodes>40</max-src-nodes>
<max-src-states>1000</max-src-states>
<statetimeout>1800</statetimeout>
<statetype>keep state</statetype>
<os><source>
<any><destination><any></any></destination>
<descr>,con:40,sta:1k,tim:30m</descr></any></os></rule>
<rule><interface>enc0</interface>
<type>pass</type>
<source>
<any><destination><any></any></destination>
<descr>Permit IPSEC traffic.</descr>
<statetype>keep state</statetype></any></rule></filter>
<ipsec><preferredoldsa></preferredoldsa></ipsec>
<aliases><proxyarp><wol><installedpackages><revision><description>/system_routes_edit.php made unknown change</description></revision>
<cron><minute>0</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 newsyslog
<minute>1,31</minute>
<hour>0-5</hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 adjkerntz -a
<minute>1</minute>
<hour>3</hour>
<mday>1</mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh
<minute>/60</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout
<minute>1</minute>
<hour>1</hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /etc/rc.dyndns.update
<minute>/60</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot
<minute>/60</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday></wday>
<who>root</who>
<command></command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 1800 snort2c
<minute>/5</minute>
<hour></hour>
<mday></mday>
<month></month>
<wday>*</wday>
<who>root</who>
<command></command>/usr/local/bin/checkreload.sh</cron>
<rrd><enable></enable></rrd></installedpackages></wol></proxyarp></aliases></syslog></bridge></ovpn></bigpond></pptp></pppoe></lastchange></pfsense>

dnsmasq is:

Save file as: /root/dnsmasq.conf

Find ".N." Replace "N" with IP Number (2-254).

domain-needed
bogus-priv
interface=vr0
interface=ath0
bind-interfaces
expand-hosts
domain=olsr
dhcp-range=sis0,10.0.1.10,10.1.0.250,255.255.255.0,7200
dhcp-range=ath0,10.129.0.10,10.129.0.250,255.255.255.0,300
dhcp-option=119,olsr
dhcp-lease-max=254
no-negcache

Started with:

#!/bin/sh

Save file as: /usr/local/etc/rc.d/dnsmasq.sh

TURN OFF DHCPD - Verify DHCP Server is disabled on all interfaces.

killall dnsmasq
/usr/local/sbin/dnsmasq -C /root/dnsmasq.conf -l /var/dhcpd/var/db/dhcpd.leases -s wifi.local

olsrd is:

Save file as: /root/olsrd.conf

Find ".N." Replace "N" with IP Number (1-254).

DebugLevel 0
IpVersion 4
ClearScreen yes
Hna4
{
#0.0.0.0 0.0.0.0
10.0.1.0 255.255.255.0
10.129.0.0 255.255.255.0
}
AllowNoInt yes
Willingness 6
IpcConnect
{
MaxConnections 0
Host 127.0.0.1
}
UseHysteresis no
LinkQualityLevel 2
LinkQualityWinSize 100
Pollrate 0.1
TcRedundancy 2
MprCoverage 7
LoadPlugin "/usr/local/lib/olsrd_httpinfo.so.0.1"
{
PlParam "port" "8069"
PlParam "Net" "0.0.0.0 0.0.0.0"
}
Interface "ath0"
{
HelloInterval 5.0
HelloValidityTime 90.0
TcInterval 2.0
TcValidityTime 270.0
MidInterval 15.0
MidValidityTime 90.0
HnaInterval 15.0
HnaValidityTime 90.0
}
Interface "vr0"
{
HelloInterval 5.0
HelloValidityTime 90.0
TcInterval 2.0
TcValidityTime 270.0
MidInterval 15.0
MidValidityTime 270.0
HnaInterval 15.0
HnaValidityTime 90.0
}

Started with:

#!/bin/sh

Save file as: /usr/local/etc/rc.d/olsrd.sh

Optional: mount -w / chmod 555 /usr/local/etc/rc.d/olsrd.sh

cp /root/olsrd.conf /var/etc/
killall olsrd
sleep 1
olsrd -f /var/etc/olsrd.conf &