Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Installing WiFi Card in working machine.

    Scheduled Pinned Locked Moved Wireless
    18 Posts 4 Posters 3.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hammerman
      last edited by

      hi,

      my setup is working fine with wan, lan, and vpn ports.
      i have a wifi card installed as well but it isn't set up.

      is it possible to bridge the lan and wifi to make a new interface called bridged and still have everything work?

      does the dhcp and firewall rules automatically transfer to the new bridged interface from the old lan one?

      or do i have to start from scratch and go through the process of setting up the whole system again?

      is there an easy way to do this?

      thanks

      1 Reply Last reply Reply Quote 0
      • ?
        Guest
        last edited by

        Very Easy, No Bridge required. No need to disturb your working setup.
        From Interfaces, assign your ATH0 to an empty OPT interface. Make it static IP off your main IP range. IE. 192.168.10.1 or similar.
        Enable the OPTx interface you added and setup wifi for the OPTx interface.(AP mode/SSID/Channel/Security)
        Enable DHCP server on the new OPTx Wifi port with appropriate address range.
        Make firewall rule for OPTx to allow traffic(use your LAN firewall settings as a guide)

        OPTx= OPT interface you use.

        edited- cause i can't spell

        1 Reply Last reply Reply Quote 0
        • H
          hammerman
          last edited by

          ok, thanks for the advice.

          i wanted to attach a poe camera to the lan port and access it wirelessly without another switch.
          i think your method with have the wireless on a different subnet.

          1 Reply Last reply Reply Quote 0
          • dotdashD
            dotdash
            last edited by

            While it would be on a different subnet, you don't need another switch- pfSense will route traffic between LAN and the wireless unless you block it with rules. It's less complicated than bridging the ports.

            1 Reply Last reply Reply Quote 0
            • H
              hammerman
              last edited by

              i tried to set it up the way you mentioned.

              everything seemed to be working by looking at the dashboard.

              except in the wireless logs it says:

              hostapd: ath0_wlan0: WPA rekeying GTK
              i tried changing the key rotation and regeneration to 3600 and 7200.

              also the ssid isn't being broadcast.

              1 Reply Last reply Reply Quote 0
              • dotdashD
                dotdash
                last edited by

                @hammerman:

                except in the wireless logs it says:

                hostapd: ath0_wlan0: WPA rekeying GTK

                That's just a message, it doesn't mean anything is wrong.

                @hammerman:

                also the ssid isn't being broadcast.

                SSID shouldn't be hidden unless you check 'enable hide SSID'

                1 Reply Last reply Reply Quote 0
                • H
                  hammerman
                  last edited by

                  thanks,
                  it was a loose antenna wire.

                  1 Reply Last reply Reply Quote 0
                  • H
                    hammerman
                    last edited by

                    after finally being able to get back to the machine, i find that i can join the wireless network and receive an ip address.

                    i have no internet access though.
                    i created a firewall rule for the wifi interface as:

                    Action = Pass, Interface = WiFi,  TCP/IP version = IPv4, Protocol = any, Source = any, Destination = any

                    i am also getting  IEEE 802.11: disassociated and IEEE 802.1X: unauthorizing port  alerts in the wireless logs.

                    any ideas?

                    1 Reply Last reply Reply Quote 0
                    • ?
                      Guest
                      last edited by

                      should be: wifi net

                      check your lan rules for example

                      1 Reply Last reply Reply Quote 0
                      • H
                        hammerman
                        last edited by

                        thanks for the tip.

                        i checked my lan rules.

                        1. has source: lan_net, dest. any and gateway wan dhcp.

                        2. has source: lan_net, dest. any any.

                        when i assigned the wifi interface, should i did it from interfaces -> assign?
                        i noticed that when i did this, there was no wifi-lan and wifi-wan interfaces like there is with lan and wan.
                        also on interfaces, there is a wireless tab. should i have added it there instead?

                        i don't which method allows me to set up a corresponding wifi gateway for the firewall rules.

                        1 Reply Last reply Reply Quote 0
                        • dotdashD
                          dotdash
                          last edited by

                          @hammerman:

                          1. has source: lan_net, dest. any and gateway wan dhcp.

                          Unless you have multiple WAN connections, there is no need to set the gateway, and it will prevent LAN from talking to Wireless.

                          @hammerman:

                          when i assigned the wifi interface, should i did it from interfaces -> assign?
                          i noticed that when i did this, there was no wifi-lan and wifi-wan interfaces like there is with lan and wan.
                          also on interfaces, there is a wireless tab. should i have added it there instead?

                          The wireless tab is used for creating cloned wireless interfaces, like if you wanted to have two SSIDs with different rules, e.g. a guest wireless that was blocked from LAN, and a regular wireless that could access LAN.

                          @hammerman:

                          i don't which method allows me to set up a corresponding wifi gateway for the firewall rules.

                          You don't need a wifi gateway. You don't need to set a gateway on your rules.

                          1 Reply Last reply Reply Quote 0
                          • H
                            hammerman
                            last edited by

                            thanks for the advice,

                            i copied the default allow lan to any rule for ipv4 and replaced "lan" with "wifi" and source "lan net" with "wifi net." destination is "any" and no gateway.

                            for the next rule, i did the same thing but this time i used the protocol tcp/udp,  same source of "wifi net" and again destination as "any" and no gateway.

                            i still have no internet access though.

                            am i missing another rule?

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              1/ Post screenshots.
                              2/ What's exactly "still have no internet access"?

                              1 Reply Last reply Reply Quote 0
                              • H
                                hammerman
                                last edited by

                                no internet access means after connecting to pfsense wifi and obtaining an ip address i am unable to browse web pages.
                                i am able to ping the router though.

                                1 Reply Last reply Reply Quote 0
                                • D
                                  doktornotor Banned
                                  last edited by

                                  Uh… Have you considered disabling the VPN mess out have there?!

                                  1 Reply Last reply Reply Quote 0
                                  • H
                                    hammerman
                                    last edited by

                                    i can't change the vpn. i need 2 different openvpn connections.

                                    would openvpn have an effect on the wifi part?

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      doktornotor Banned
                                      last edited by

                                      Dude we have no idea what are you doing there and where's the traffic going. And you apparently have not 2 but 4 VPN interfaces, two for LAN (?!?!) as well?

                                      Good luck.

                                      1 Reply Last reply Reply Quote 0
                                      • H
                                        hammerman
                                        last edited by

                                        vpn is set exactly as it should be.
                                        works 100% directly followed from airvpn.

                                        i'm concerned about the wifi.
                                        are the rules correct, or if not, what should i do to allow my to browse the web?

                                        thanks

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.