Modifying my network layout for wireless

segfault · #1 (**permalink**) 09-02-2003, 08:52 AM

Hi,

I should have my wireless node up in the next month or two, but before it goes live I would like to make sure it all going to work

Here is what I have at the moment:

The bit with the grey background is what I have thought about doing. Rather than plugging my wireless AP into my switch, I would rather plug it into my gateway so that I can firewall it. I was going to add a second ethernet card into my gateway and plug my AP into that (with a crossover cable).

However, if I stuck the IP address of the AP into my browser on one of my machines on the network, it wouldn't be able to access the web interface on the AP. I guess I would have to enable NAT for the AP in the same way I do for the internal ADSL modem in my gateway. Is that right?

My AP and the eth1 card in the gateway are on a different network (10.x.x.x) from the local LAN (192.168.x.x). Will this be a problem?

I hope this all makes sense - I had to write it in a bit of a hurry.

Feel free to share your network layout - I'd be interested in hearing what other people are doing/have done.

JJ · #2 (**permalink**) 09-02-2003, 02:09 PM

I have a different setup with an external ADSL router.
and a second firewall for the wireless AP.

I set my gateway on the desktops to the ADSL router.

To access the AP I have a static route on the ADSL router pointing back to the Second firewall which is connected to the Wireless side.

So any requests for the AP's IP address is directed back to the AP firewall.
Clumbsy but it works.
I have had to set the gateway of the wireless' firewall to be out to the wireless network for other reasons.

Maybe for you a static route out to the wireless AP will work (showing my ignorance) Help.....me......

ops:

puddpunk · #3 (**permalink**) 09-11-2003, 09:55 AM

Quote:

The bit with the grey background is what I have thought about doing. Rather than plugging my wireless AP into my switch, I would rather plug it into my gateway so that I can firewall it.

Good Idea. Control is a Good Thing

Hope you like IPtables

(or try firehol...)

Quote:

I was going to add a second ethernet card into my gateway and plug my AP into that (with a crossover cable).

However, if I stuck the IP address of the AP into my browser on one of my machines on the network, it wouldn't be able to access the web interface on the AP. I guess I would have to enable NAT for the AP in the same way I do for the internal ADSL modem in my gateway. Is that right?

I dont think so... I can't really be bothered drawing pictures, but here is some ascii art:

Code:

 ^^^^^^^^^^

   {INTERNET}

 ----------

 	|

 	|

  MODEM

 	|

 	| <------------ eth0, 192.186.1.0/24

 ---------

 | Server|

 ---------

 	| <------------ eth1, 90.0.0.0/24

 	|

 	|------------------

  |	|	|	|

  ------------

  |	LAN  |

  ------------

Sorry about that.

It is an oversimplification (how do you draw a pptp tunnel?) but the point is I can access my modems HTTP interface (on 192.168.1.254) from my desktop machine (90.0.0.5) with no extra bells/whistles/gongs set up.

Quote:

I hope this all makes sense - I had to write it in a bit of a hurry.

Feel free to share your network layout - I'd be interested in hearing what other people are doing/have done.

Yep Yep, If I get a node near me, i'll see what I can do about redesigning my network

Cheers,
Chris.