Failover routing

sullrich

Why would you want it on wireless?

pcatiprodotnet

Why would you want [spanning tree protocol] on wireless?
I though it might route wireless bridged ethernet traffic around down wireless nodes. I guess not.

My Goal: LANs in multiple buildings all linked together by ethernet Bridge over wireless Mesh (I assume olsr.org is the best).

Perhaps using OLSR plus "ethernet over IP" (such as VPN) to pass ethernet MAC traffic wirelessly between sites, all accomplished in pfSense, could make it appear to every PC in every building that they are on the same "local" ethernet LAN. Is this posssible? If so, how do I configure pfSense to do this?

Thanks, -pc

aldo

we are using a routed networ rather than a bridge network.
we have nodes with there own internet connection and a large
netowrk to link them all together.

if an internet connection fails on a node then we manually reconfigure
the routes onto our ospf backbone to use another route.

if you network is in anyway going to grow use routing and not bridging
it will be far more stable in our experiance.

each of our nodes support 30 -100 wireless clients

we presently have 8 nodes and a 20 box backhaul system.

I think there are issues with oslr and ospf. from my recent reviews it seems that
oslr routes in the kernal are not recognised correctly by ospf. (but don't really know as
we dont really have any knowledge of oslr)

We where thinking of working with the load balancing pool features in pfsense.
but this might not work to well either because it does not seem to touch the
routing table. Is this true.

Maybe if we can consilidate some thoughts a little better we can do something here.
are there many more thoughts from the core team. would this be worth you spending
your time on. or are we a little to far over in the left field.

we have no choice but to spend money on it so i would love to give some to the
fine pfsense team

pcatiprodotnet

if you network is in anyway going to grow use routing and not bridging it will be far more stable in our experiance.
Thanks for the tip aldo! I'm a Programmer, but new to networking/wireless, and I appreciate any expert advice.
I had desired Bridging so a single Captive Portal could control all clients, but that may not be a good idea either.
-Pete

aldo

you could still do this with routing. if you dont use nat on one side of the network
just route through it. captive portal could still work for you.

i know the drama of design is a far differnet one that the doing of it though
continually fraught with try to do stuff but not spent money.

i think i would prefer to be a prgrammer then maybe your only limitation is
how large your brain is.

good luck i willl take some time with oslr in the next week and see what
it can do. i think it might be more powerful than i think, even if it
is a very immature product

jeroen234

@pcatiprodotnet:

…[olsr] will always use ipadresses…
Is there any way to get OLSR to pass regular ethernet (MAC) traffic, such as using VPN over OLSR all done in pfSense, or other trick?
Another possibility if the above won't work: Can pfSense in Bridge mode also do "spanning tree protocol"? If so, is this possible solution worthy?
Thank you for the helpful replies,
-Pete

olsrd will work on vpn just use the vpn interface as the interface for olsrd then on both sides of the vpn
if the interface can route then olsrd can work on it

pcatiprodotnet

Is an olsr node capable of accepting RIP route information on its non-olsr interface?
Thanks, -pc

jeroen234

yes but olsrd will not read the kernal routes
so info from rip can be rewirten by olrsd

just like rip is rewriting the kernal routes that olsrd has put in

aldo

just wondering about wheather anyone has come up with any great ideas here. it seems one of the core issues ould lie in how pfsense managed a dynamic routing table.
do we think that the changes made to olsrd would allow this to happen or that olsrd only works well within a subnet.

has anyone had any time to test what scott has done so far. i am an ospf bgp player so this olsrd is new to me. we would definately consider it if it looks like it might be a practical solution.

aldo

i guess i could close this now i have managed to get quagga running a few months ago and it serves my purpose does anyone have any get extensions to this that would allow them to collect this bounty if not i will close the offer