From owner-freebsd-questions@FreeBSD.ORG Fri Apr 23 06:15:10 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2E68316A4CE for ; Fri, 23 Apr 2004 06:15:10 -0700 (PDT) Received: from skutsje.san.webweaving.org (skutsje.san.webweaving.org [209.132.96.45]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0FF9343D1D for ; Fri, 23 Apr 2004 06:15:10 -0700 (PDT) (envelope-from dirkx@webweaving.org) Received: from skutsje.san.webweaving.org (localhost [127.0.0.1]) i3ND7sEJ087414 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 23 Apr 2004 06:07:54 -0700 (PDT) (envelope-from dirkx@webweaving.org) Received: from localhost (dirkx@localhost)i3ND7r8h087411; Fri, 23 Apr 2004 06:07:54 -0700 (PDT) (envelope-from dirkx@webweaving.org) X-Authentication-Warning: skutsje.san.webweaving.org: dirkx owned process doing -bs Date: Fri, 23 Apr 2004 06:07:53 -0700 (PDT) From: Dirk-Willem van Gulik X-X-Sender: dirkx@skutsje.san.webweaving.org To: Darryl Hoar In-Reply-To: <002e01c42932$4768f160$0701a8c0@darryl> Message-ID: <20040423060229.P54360@skutsje.san.webweaving.org> References: <002e01c42932$4768f160$0701a8c0@darryl> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-questions@freebsd.org Subject: Re: Freebsd machine as a wireless access point ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Apr 2004 13:15:10 -0000 On Fri, 23 Apr 2004, Darryl Hoar wrote: > I have a spare PC with Freebsd installed on it. Can I configure > this machine to be a wireless access point ? Install a prism 2 card and do something like (assuming fxp0 is your upstream iface and wi0 your card in AP mode). rc.conf ifconfig_wi0="inet 10.0.0.1/24 ssid myap channel 11 mediaopt hostap" gateway_enable="YES" natd_enable="YES" natd_interface="fxp0" Then install from ports isc-dhcpd with a config like: ddns-update-style none; always-broadcast on; subnet 10.0.0.0 netmask 255.255.255.0 { range 10.0.0.10 10.0.0.100; option broadcast-address 10.0.0.255; option subnet-mask 255.255.255.0; option routers 10.0.0.1; } You rpopralby want do add a crrect option domain-name-servers 10.0.0.1; etc, etc. The above is not secure in any way - so you may want to add WEP for a start and then get more serious; add ipfw packet filtering and nail things shut. DW.