[SATLUG] stupid WAP question

Daniel J. Givens daniel at rugmonster.org
Thu Jul 1 22:18:42 CDT 2010

You can do this with dd-wrt. There is an option to set the WAN port to just another switch port. You would then setup VLANs so that the wireless is on one and wired ports another. The port you connect to your firewall would then be a "trunk" port with both VLANs. On the firewall, you would then need to configure two 802.1q VLAN virtual interfaces with unique IPs on separate subnets. 

This is going to get you into some fun networking concepts. Have fun googling. I don't have my wrt54g anymore, but I've done this exact setup before. 


On Jul 1, 2010, at 16:53, travis+ml-satlug at subspacefield.org wrote:

> Hey all, so I have weird WAP problems I want to solve.
> Basically, these WLANs are going to be on seperate legs of my firewall.
> That is, I have no need for the WAP's built in firewall.
> A couple of questions:
> 1) Which firmware (tomato, dd-wrt, openwrt) do you recommend and why?
> Currently I have dd-wrt and openwrt I think, on two WAPs.
> 2) Is there a way to have WLAN traffic NOT go through firewall
>   when traversing to a wired port?
>   Basically I just want a box that bridges the WLAN and the link to my
>   firewall.
>   I want to be able to have two-way traffic from the firewall to wifi clients,
>   and from clients to firewall (and out to internet).
>   I also want to be able to manage WAP from the firewall link (my LAN is
>   connected to the firewall, not directly to WAP).
> 3) Related to 2, is there a way to have it not go through NAT,
>   so that the firewall sees the real IPs, and not the WAN IP of the WAP?
> This would all be so much easier if I had a Linux shell and not some stupid GUI.
> Thanks much!  I've spent 8+ hours on this with no luck.
> T
> -- 
> A Weapon of Mass Construction
> My emails do not have attachments; it's a digital signature that your mail
> program doesn't understand. | http://www.subspacefield.org/~travis/ 
> If you are a spammer, please email john at subspacefield.org to get blacklisted.
> -- 
> _______________________________________________
> SATLUG mailing list
> SATLUG at satlug.org
> http://alamo.satlug.org/mailman/listinfo/satlug to manage/unsubscribe
> Powered by Rackspace (www.rackspace.com)

More information about the SATLUG mailing list