On 15 Mar 2017, at 17:59, darrin.tho...@123mail.org wrote: > Well, I just can't get this to work. > > For this simpleset scenario I can envision: > > net (ISP-assigned IP = XX.XX.XX.XX) > | ( eth 0 ) > router > | > |- ( eth1, static IP addr: 10.0.0.1 ) > | -- wired LAN, all static IPs in 10.0.0.50-100 > | > |- ( wlan1, static IP addr: 10.0.0.2 ) > -- AccessPoint SSID provided by hostapd > -- wireless LAN, all dhcpd-assigned IPs in 10.0.0.150-200
There's a fundamental issue there, you have two separate networks sharing the same subnet and that's a big no-no. If you must have the WiFi and wired LAN clients on the same subnet then you will need to bridge the two networks together - the interfaces won't have their own IP addresses, but the bridge will. If you want the two networks separate, then they need to have non-overlapping IP subnets. I suspect that if you do some packet sniffing, you'll find that the reason the wireless clients don't have a working connection is because the return packets are being sent out on eth1 rather than wlan1. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users