Date: Wed, 6 Feb 2013 13:38:11 -0600 From: Adam Vande More <amvandemore@gmail.com> To: Kurt Buff <kurt.buff@gmail.com> Cc: freebsd-net@freebsd.org Subject: Re: Guest network on corporate LAN - options for security Message-ID: <CA%2BtpaK0kqnk47JAfOwGxj46-V4sP7GwwVAm%2BdWP-OH6X8vvqTw@mail.gmail.com> In-Reply-To: <CADy1Ce7nw0EKjDndZsdgiA9u8q%2BKkskc0=91MVZ4pcAZ-Ogddg@mail.gmail.com> References: <CADy1Ce7nw0EKjDndZsdgiA9u8q%2BKkskc0=91MVZ4pcAZ-Ogddg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Feb 6, 2013 at 1:29 PM, Kurt Buff <kurt.buff@gmail.com> wrote: > All, > > If this isn't the right list for this, please let me know. > > Quite some time ago, I set up an unsecured guest VLAN in our network, > providing wireless access to all of the sundry devices that staff and > visitors carry. I set up a small FreeBSD machine to serve IP addresses > via DHCP, and that was dead simple. > > However, there are now other tenants in our building, and the subnet > is getting too much bandwidth and address consumption - the range I > set up is completely filled, and the VLAN is consuming about half of > our Internet pipe, which is far too much for my comfort. > > I suspect the other tenants are leeching. > > Does anyone have ideas on how I can leverage that FreeBSD box to control > this? > If it were me, I would consider replacing the FreeBSD Box with PfSense. It has a lot of managment features built in so if you're looking to get those without a big time sink otherwise, something like that is the way to go. -- Adam Vande More
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2BtpaK0kqnk47JAfOwGxj46-V4sP7GwwVAm%2BdWP-OH6X8vvqTw>