Karl Cunningham wrote:
--On Wednesday, July 27, 2005 4:46 PM -0700 DJA <[EMAIL PROTECTED]>
wrote:

The existing router is of the the wired
type, and has extensive firewalling features. I want this between
*everything* and the 'Net, if possible. The WLAN router does not have
much, if any firewalling capability. Which is a moot point anyway, as I
don't want it "open" either.

There are no channels to deal with. I will have only one WLAN (I have
none now), which I would like to integrate into my existing wired LAN.

Again, just to be clear, right now I don't want any part of my network
public. While there are qualification as far as the WLAN goes (i.e. it's
using un-containable radio waves), I want to force anyone connecting to
my WLAN router to have to authenticate in order to access either the LAN
or the Internet.

   Best Regards,
      ~DJA.


Ipcop provides ipsec security for the wireless connections, which I use
instead of WEP.  It sets up a VPN between wireless devices (laptops) and
the LAN for access to other machines, printing, etc.  The secure traffic is
also NATted to the Internet for web access and routed to the DMZ to access
mail servers, etc.  http://www.ipcop.org .

Karl Cunningham

I don't want to use another PC as my router/firewall. I used an LRP-based router a few years ago, and for mostly economic reasons switched to an off-the-shelf solution. If I were to go back to a software-based solution, IPCop looks like a good option.

What I have done is to take some advice and use an AP rather than an WLAN router. I returned the WRT54G and got a Netgear WG602 v3 Access Point. While it does have its own little quirks, so far it seems to meet my needs.

BTW, Fry's has a sale on the Linksys WRT54G ($10 store, $10 mail-in rebate). Turns out there's a reason: it's the v1.1 model which is at least two versions back from the current version. In fact, the firmware is at the 1.x level, whereas the current firmware is at 3.1. Nevertheless, it's still a great WLAN router if you want to hack it with any of several FOSS firmware replacements. Right now I don't have that need.

I was able to attach the WLAN router to my LAN router, and get it working as a wireless router. But it was problematic to get to work reliably as a LAN router. In fact, it was a PITA.

The WG602 just plugs into my existing LAN router/firewall. It supports 128-bit WEP, and WPA and WPA2. It doesn't support DHCP but rather lets an existing DHCP server do that.

Interestingly, the WG602 comes with a card explaining that it uses some GPL and LGPL code, and even includes a printed copy of both. I haven't checked yet whether this AP has FOSS firmware hacks available.

--
   Best Regards,
      ~DJA.


--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to