Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Jan 2009 11:53:44 -0900
From:      Mel <>
Cc:        regis505 <>
Subject:   Re: wireless nic - access point
Message-ID:  <>
In-Reply-To: <>
References:  <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Tuesday 13 January 2009 06:00:08 regis505 wrote:
> I installed a D-Link WDA-2320 (Atheros chipset) wireless nic on my FreeBSD
> 7.1 system. I configured it as an access point. I read many posts on that
> topic and I am confused whether I need to bridge the wireless network to
> the wired network or just let the FreeBSD gateway to manage that.
> So far, I can connect from a wireless client to the FreeBSD Access Point (I
> can ping any machines on the wired network) but I cannot go beyond that and
> I would be very pleased if someone would explain what to do in terms of
> ipfilter NAT or routing to access the Internet from a wireless client. I
> have 3 network cards: ath0 (wireless -, bge0 (wired-
>, bce0 (Internet - DHCP). The wired network is behind an
> ipfilter firewall ( and wired computers are NATed.

If what you're saying is "I cannot reach the internet", then you're missing a 
NAT rule for to any. If you're unable to ping hosts on the 
wireless network other then the AP, then apbridge is likely turned off.

Otherwise, in pf syntax:
pass in on $int_if from $int_if:network to $wire_if:network             \
        tag WLAN_LAN keep state label "wlan_lan"
pass in on $wire_if from $wire_if:network to $int_if:network            \
        tag LAN_WLAN keep state label "lan_wlan"

should be enough to allow traffic from wireless to wire if you're default 
blocking. I don't know of a real advantage to bridge these, as traffic will 
go through AP physically regardless.

Problem with today's modular software: they start with the modules
    and never get to the software part.

Want to link to this message? Use this URL: <>