Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #3810

Re: Network configuration with a IPFire firewall and some wifi routers

From Pascal Hambourg <pascal@plouf.fr.eu.org>
Newsgroups comp.os.linux.networking
Subject Re: Network configuration with a IPFire firewall and some wifi routers
Date 2016-07-12 15:04 +0200
Organization Plouf !
Message-ID <nm2ptj$575$1@saria.nerim.net> (permalink)
References <20160709161626.226a7a4e@gaston.baronie.vez> <nlrj4l$10r5$1@saria.nerim.net> <20160712133814.6a479bf4@gaston.baronie.vez>

Show all headers | View raw


Le 12/07/2016 à 13:38, Nicolas FRANCOIS (AKA El Bofo) a écrit :
>
> One thing that confuses me is that I have to provide an IP address in
> the Internet section of the configuration, which has to be different
> from the address in the LAN section.

Yes. It is a router, and the purpose of a router is to interconnect 
between otherwise separated networks. Usually, each interface has an 
address in the network it is connected to.

> I wonder if I can give an address
> in the same network, in the bridge option...

I strongly warn against doing so. If the configuration interface does 
not prohibit it, it can cause trouble because the address will work only 
on one interface and Murphy's law states that it will be the wrong one. 
If you use the device as a router and don't connect anything to the WAN 
interface, just give it an address from an unused subnet.

>> It depends whether you want to use them as bridges (through a LAN
>> port) or as routers (through the WAN port, usually with NAT). A
>> bridge means that the wireless network is part of the mail LAN, with
>> the same IP subnet and parameters. A router means that the wireless
>> network is a separate network. When used as a bridge, make sure the
>> embedded DHCP server is disabled.
>
> So who's going to give an IP address to the devices connecting via
> wifi ?

A DHCP server you set up on the main LAN. It can run on the IPFire box.
Actually you could even use the DHCP server embedded in the access point 
if it allows to configure the default router and DNS addresses in the 
DHCP options (by default it uses its own address, which is wrong for you).

> For now I have one router working "correctly", in router mode. One
> thing I didn't saw before is that I can configure the second router in
> "repeater mode".

Repeater mode is for wireless networks, to extend the range of a primary 
access point. You don't want this.

Bridge mode does not require specific support in the device firmware, 
only the ability to disable the DHCP server if it does not suit your needs.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Network configuration with a IPFire firewall and some wifi routers "Nicolas FRANCOIS (AKA El Bofo)" <nicolas.francois@free.fr> - 2016-07-09 16:16 +0200
  Re: Network configuration with a IPFire firewall and some wifi routers Pascal Hambourg <pascal@plouf.fr.eu.org> - 2016-07-09 21:26 +0200
    Re: Network configuration with a IPFire firewall and some wifi routers "Nicolas FRANCOIS (AKA El Bofo)" <nicolas.francois@free.fr> - 2016-07-12 13:38 +0200
      Re: Network configuration with a IPFire firewall and some wifi routers Pascal Hambourg <pascal@plouf.fr.eu.org> - 2016-07-12 15:04 +0200
  Re: Network configuration with a IPFire firewall and some wifi routers Aleksandar Kuktin <akuktin@gmail.com> - 2016-07-15 16:23 +0000

csiph-web