Chris Brennan
2011-07-26 17:48:54 UTC
Greetings! I've got a Netgate m1n1-2d13 firewall device[1] and for the most
part, it works great (wired that is.) Wireless on the other hand is
questionable at best. Sometimes it works, sometimes it doesn't. The
wireless kit is [2]. pfSense 1.2.3-RELEASE sees the card just fine
ath0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 90:a4:de:2f:1d:bb
inet6 fe80::92a4:deff:fe2f:1dbb%ath0 prefixlen 64 scopeid 0x4
media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap>
status: associated
ssid "The Realm" channel 1 (2412 Mhz 11g) bssid 90:a4:de:2f:1d:bb
authmode WPA privacy MIXED deftxkey 3 AES-CCM 2:128-bit
AES-CCM 3:128-bit txpower 31.5 scanvalid 60 bgscan bgscanintvl 300
bgscanidle 250 roam:rssi11g 7 roam:rate11g 5 protmode OFF burst
-apbridge dtimperiod 1
and an pciconf -lv
***@pci0:0:12:0: class=0x020000 card=0x1012185f chip=0x0013168c rev=0x01 hdr=0x00
class = network
subclass = ethernet
I had my wireless working, my Sony TV was streaming Netflix for days, my
iPod was able to browse the internet as well as my android phone and
even my Debian laptop was working. Now, my TV can't associate, if it
does, it refuses to get an IP address from the DHCP server (which is
running)
[admin-VTAYb1pdGXLrCY3N83BgTx4hnT+Y9+***@public.gmane.org]/root(7): ps auxf | grep dhcpd
dhcpd 24379 0.0 0.8 3156 2040 ?? Is Sun05AM 0:01.56
/usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd
-cf /var/dhcpd/etc/dhcpd.conf vr0
root 60213 0.0 0.1 376 256 p0 R+ 10:32PM 0:00.00 grep
dhcpd
[1.2.3-RELEASE]
[admin-VTAYb1pdGXLrCY3N83BgTx4hnT+Y9+***@public.gmane.org]/root(8):
My iPod Touch and my Android phone are able to associate and get an IP
without any issues, but they cannot browse, I've confirmed this by being
able to browse my LAN from both devices but I am unable to get to
google.com for example, or anywhere else. I've also confirmed that my TV
never does get an IP as when trying to connect Wirelessly, it is unable
to get to my local webserver running on the same subnet as the DHCP
daemon.
So I am unsure what I missed, I'm pretty sure this is a configuration
issue with the firewall (basic details are below, if more is needed, by
all means ask).
Interfaces -> OPT2 (Wireless)
Check box checked to enable device
Description: Wireless
Type: DHCP
Bridge with: LAN
Standard: 802.11g
Mode: Access Point
802.11g OFDM Protection Mode: Protection mode off
SSID: The Realm
Transmit Power: 99
Channel: Auto (usually ch1 is used)
WPA: Enable WPA check box checked
PSK: SoMe ReAlLy LoNg PaSs WoRd
WPA Mode: Both
WPA Key Management Mode: Pre Shared Key
Authentication: Open System Authentication
WPA Pairwise: AES
Key Rotation: 60
Master Key Regeneration: 3600
Firewall -> Rules -> Lan
Action: Pass
Interface: LAN
Protocol: Any
Source: LAN Subnet
Destination: Any
Gateway: Default (192.168.0.1)
Description: Default LAN -> any
Firewall -> Rules -> Wireless
Action: Pass
Interface: Wireless
Protocol: Any
Source: LAN subnet (was any but someone on IRC recommended the
change to 'LAN subnet')
Destination: Any
Gateway: Default (192.168.0.1)
Description: Wi-Fi Out
If any other configuration details are required, please let me know and
I will provide them, but bear in mind, I don't know where/how pfSense
stores it's configuration files, The above data was typed manually from
the web interface.
[1] http://store.netgate.com/Netgate-m1n1wall-2D3-2D13-Black-P216.aspx
[2] http://store.netgate.com/KIT-ALIX-5004MP-DUAL-P190C34.aspx
--
---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org
Commercial support available - https://portal.pfsense.org
part, it works great (wired that is.) Wireless on the other hand is
questionable at best. Sometimes it works, sometimes it doesn't. The
wireless kit is [2]. pfSense 1.2.3-RELEASE sees the card just fine
ath0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 90:a4:de:2f:1d:bb
inet6 fe80::92a4:deff:fe2f:1dbb%ath0 prefixlen 64 scopeid 0x4
media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap>
status: associated
ssid "The Realm" channel 1 (2412 Mhz 11g) bssid 90:a4:de:2f:1d:bb
authmode WPA privacy MIXED deftxkey 3 AES-CCM 2:128-bit
AES-CCM 3:128-bit txpower 31.5 scanvalid 60 bgscan bgscanintvl 300
bgscanidle 250 roam:rssi11g 7 roam:rate11g 5 protmode OFF burst
-apbridge dtimperiod 1
and an pciconf -lv
***@pci0:0:12:0: class=0x020000 card=0x1012185f chip=0x0013168c rev=0x01 hdr=0x00
class = network
subclass = ethernet
I had my wireless working, my Sony TV was streaming Netflix for days, my
iPod was able to browse the internet as well as my android phone and
even my Debian laptop was working. Now, my TV can't associate, if it
does, it refuses to get an IP address from the DHCP server (which is
running)
[admin-VTAYb1pdGXLrCY3N83BgTx4hnT+Y9+***@public.gmane.org]/root(7): ps auxf | grep dhcpd
dhcpd 24379 0.0 0.8 3156 2040 ?? Is Sun05AM 0:01.56
/usr/local/sbin/dhcpd -user dhcpd -group _dhcp -chroot /var/dhcpd
-cf /var/dhcpd/etc/dhcpd.conf vr0
root 60213 0.0 0.1 376 256 p0 R+ 10:32PM 0:00.00 grep
dhcpd
[1.2.3-RELEASE]
[admin-VTAYb1pdGXLrCY3N83BgTx4hnT+Y9+***@public.gmane.org]/root(8):
My iPod Touch and my Android phone are able to associate and get an IP
without any issues, but they cannot browse, I've confirmed this by being
able to browse my LAN from both devices but I am unable to get to
google.com for example, or anywhere else. I've also confirmed that my TV
never does get an IP as when trying to connect Wirelessly, it is unable
to get to my local webserver running on the same subnet as the DHCP
daemon.
So I am unsure what I missed, I'm pretty sure this is a configuration
issue with the firewall (basic details are below, if more is needed, by
all means ask).
Interfaces -> OPT2 (Wireless)
Check box checked to enable device
Description: Wireless
Type: DHCP
Bridge with: LAN
Standard: 802.11g
Mode: Access Point
802.11g OFDM Protection Mode: Protection mode off
SSID: The Realm
Transmit Power: 99
Channel: Auto (usually ch1 is used)
WPA: Enable WPA check box checked
PSK: SoMe ReAlLy LoNg PaSs WoRd
WPA Mode: Both
WPA Key Management Mode: Pre Shared Key
Authentication: Open System Authentication
WPA Pairwise: AES
Key Rotation: 60
Master Key Regeneration: 3600
Firewall -> Rules -> Lan
Action: Pass
Interface: LAN
Protocol: Any
Source: LAN Subnet
Destination: Any
Gateway: Default (192.168.0.1)
Description: Default LAN -> any
Firewall -> Rules -> Wireless
Action: Pass
Interface: Wireless
Protocol: Any
Source: LAN subnet (was any but someone on IRC recommended the
change to 'LAN subnet')
Destination: Any
Gateway: Default (192.168.0.1)
Description: Wi-Fi Out
If any other configuration details are required, please let me know and
I will provide them, but bear in mind, I don't know where/how pfSense
stores it's configuration files, The above data was typed manually from
the web interface.
[1] http://store.netgate.com/Netgate-m1n1wall-2D3-2D13-Black-P216.aspx
[2] http://store.netgate.com/KIT-ALIX-5004MP-DUAL-P190C34.aspx
--
Chris Brennan
--
A: Yes.
GPG: D5B20C0C (6741 8EE4 6C7D 11FB 8DA8 9E4A EECD 9A84 D5B2 0C0C)
--------------------------------------------------------------------------
A: Yes.
Q: Are you sure?
http://xkcd.com/84/ | http://xkcd.com/149/ | http://xkcd.com/549/A: Because it reverses the logical flow of conversation.
Q: Why is top posting frowned upon?
GPG: D5B20C0C (6741 8EE4 6C7D 11FB 8DA8 9E4A EECD 9A84 D5B2 0C0C)
---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org
Commercial support available - https://portal.pfsense.org
