Opt1 (Wifi) and LAN on same subnet

[nimanic]

Hi to all,

i did a Firmware update from 2.0.1xyz to 2.0.2RC1 and my configuration was not wokring any more so i had to start the config from zero.

The goal is to have the Wifi clients in the same subnet than my lan clients and it was working like this.

I currently configured my LAN to 192.168.20.1 and the Wifi to 192.168.20.2. If i configure the DHCP Server(s) accordingly the wifi clients can connect and also get an IP, but i can not ping any LAN clients or the internet.

If i change the Subnet of the Wifi from 192.168.20.x to x.x.30.x the wifi clients can access the internet, but i want to use the same subnet as the LAN.

The Clients connected to the LAN can ping the internet without any problem.

One more strange thing is:
I setup the DHCP server for LAN like this: Start 192.168.20.10 - 192.168.20.30; rest is empty
I setup the DHCP server for W-LAN like this: STart 192.168.20.100 - 192.168.20.133; rest is empty

When i try to get an IP Address with an LAN or an WIfi client the W-Lan DHCP server is answering these requests i will everytime get an IP from the Wifi DHCP server.

What do i have to do to answear LAN requests from LAN DHCP and Wifi requests from wifi DHCP?

I hope you can help me on this.

Thanks for your help in advanced.

[wallabybob]

@nimanic:

I currently configured my LAN to 192.168.20.1 and the Wifi to 192.168.20.2.

This is an invalid configuration. Distinct interfaces need to be in distinct subnets.

You can get something like what you want by creating a bridge interface with members your current LAN interface and your current WiFi interface as members, set the address type of both interfaces to None, assign an IP address to the bridge interface and set the bridge interface as pfSense LAN.

There is a number of descriptions of this in forum topics and at least one write up in the pfSense documentation pages at http://doc.pfsense.org

[nimanic]

Thanks a lot,

that sounds pretty much like what i want to do. I tried this with the 2.0.1 and somwhow i was not able to get it runing.

[nimanic]

Finaly i got it working but it was a hard peace of trail and error.

1. create a new interface -> Opt2
2. Setup the interface IP for Opt2 (interfaces ->Opt2) and change the name if you want
3. Setup the DHCP Server for Opt2
4. Create a "Source=Bridge subnet; rest=any" Firewall rule for Opt2
5. create a bridge: Interfaces -> Bridges, and select LAN and Wifi
6. Select the Bridge as "Network port" for Opt2; Interfaces-> asign
7. Deactivate the DHCP server of LAN and Wifi
8. Set the Type of LAN and Wifi to "None"

Now your LAN and Wifi clients should get an IP from the DHCP server configured for Opt2 and these clients should be able to access the internet.

But they are currently not able to access each other WLAN <-> LAN.

So solve that i added two rules for the Firewall:
1. LAN: Source=Bridge subnet; rest = any
2. WLAB: Source= Bridge subnet; rest=any

Instead of adding these two rules you can also change the value at : System -> Advanced -> System tuneables -> net.link.bridge.pfil_member->  "0"

At that point my clients where able to ping each other and also wake up on lan from my tablet to a PC was working.

If you have any hints what i can do better on my configuration feel free to let me know.