I am attempting to add a wireless capabilities to an existing network /
firewall structure. I added a wireless NIC card to the firewall (Netgear
WPN311) and followed the wireless instructions. I also added a similar card
to an existing computer (Netgear WG311T).
The Firewall's internal wired network is on 192.168.1.1 and the
Wireless card
is set to 192.168.2.1
The client computer can find the wireless network and I can ping the
wireless
card (192.168.2.1) However, I can get nowhere else. I cannot get to the
wired subnet nor outside access to the internet. I tried adding a bridge
from the wired to the wireless network interfaces but that did nothing. I
tried putting the wireless Nic to 192.168.1.249 but that made things worse.
Any help would be greatly appreciated.
Both client and firewall are running Freebsd 6.1 Relevant (that I can
think
of) files from the firewall are included...
Thanks in Advance.
Mark
interface=ath0
driver=bsd
logger_syslog=-1
logger_syslog_level=0
logger_stdout=-1
logger_stdout_level=0
debug=6
dump_file=/tmp/hostapd.dump
ctrl_interface=/var/run/hostapd
ctrl_interface_group=wheel
ssid=mynet
wpa=1
wpa_passphrase=secretword
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP TKIP
# $FreeBSD: src/share/examples/pf/faq-example1,v 1.1 2004/09/14 01:07:18 mlaier
Exp $
# $OpenBSD: faq-example1,v 1.2 2003/08/06 16:04:45 henning Exp $
#
# Firewall for Home or Small Office
# http://www.openbsd.org/faq/pf/example1.html
#
# macros
int_if = "bge0"
wint_if = "ath0"
ext_if = "rl0"
tcp_services = "{ 22, 113 }"
icmp_types = "echoreq"
priv_nets = "{ 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }"
# options
set block-policy return
set loginterface $ext_if
# scrub
scrub in all
# nat/rdr
nat on $ext_if from $int_if:network to any -> ($ext_if)
nat on $ext_if from $wint_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
rdr on $wint_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
# filter rules
block all
pass quick on lo0 all
block drop in quick on $ext_if from $priv_nets to any
block drop out quick on $ext_if from any to $priv_nets
pass in on $ext_if inet proto tcp from any to ($ext_if) \
port $tcp_services flags S/SA keep state
pass in inet proto icmp all icmp-type $icmp_types keep state
pass in on $int_if from $int_if:network to any keep state
pass out on $int_if from any to $int_if:network keep state
pass in on $wint_if from $wint_if:network to any keep state
pass out on $wint_if from $wint_if:network to any keep state
pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto { udp, icmp } all keep state
pass in on $ext_if inet proto tcp from any to ($ext_if) \
user proxy keep state
# $FreeBSD: src/etc/sysctl.conf,v 1.8 2003/03/13 18:43:50 mux Exp $
#
# This file is read when going to multi-user and its contents piped thru
# ``sysctl'' to adjust kernel values. ``man 5 sysctl.conf'' for details.
#
# Uncomment this to prevent users from seeing information about processes that
# are being run under another UID.
#security.bsd.see_other_uids=0
net.link.ether.bridge.enable=1
net.link.ether.bridge.config=bge0, ath0
# -- sysinstall generated deltas -- # Thu May 11 16:26:43 2006
# Created: Thu May 11 16:26:43 2006
# Enable network daemons for user convenience.
# Please make all changes to this file, not to /etc/defaults/rc.conf.
# This file now contains just the overrides from /etc/defaults/rc.conf.
gateway_enable="YES"
linux_enable="YES"
moused_enable="YES"
usbd_enable="YES"
#Internal Wired Network
ifconfig_bge0="inet 192.168.1.1 netmask 255.255.255.0"
hostname="Firewall.mynet.com"
#Wireless Network
ifconfig_ath0="192.168.2.1 netmask 255.255.255.0 ssid mynet mode 11g mediaopt
hostap"
hostapd_enable="YES"
#External Gateway Interface
ifconfig_rl0="DHCP"
inetd_enable="YES"
pf_enable="YES"
pf_rules="/etc/pf.conf"
pflog_enable="YES"
pflog_logfile="var/log/pflog"
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
