Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- by teward
- (1) Logon to your pfSense screen after the pfSense's initial configuration has been done. http://imgur.com/Ht1hI6r
- (2) Configure your OPT1 interface with a static IPv4 address and the proper CIDR for the subnet. Make sure it's not a subnet already assigned elsewhere.
- http://imgur.com/opFSUto
- (3) Firewall > Aliases. Create a new alias like seen in this screenshot, then save it and reload the firewall configuration on the next page where it prompts you once you hit save: http://imgur.com/itbM7rW
- You'll see this when it's done reloading: http://imgur.com/M0Uczua
- (4) Firewall rules time! Firewall > Rules. Choose the OPT1 interface or the relevant interface for your needs. Initially, it'll be an empty ruleset.
- (5) Add a new rule to the top (the "add -^" button), and structure it like so: http://imgur.com/xEnaYOM This will deny the OPT1 subnet access to any other private IP address ranges on the pfSense. Save the rule and you'll go back to the rules page, with the new rule added. Don't hit "reload configuration" yet!
- (6) Add another rule, this time to the bottom. (the "add -v" button) Structure that rule like so: http://imgur.com/MHvDrey Hit save, then on the next page hit the button to reload the configuration to activate the rules.
- (7) You're pretty much done, your rules will look like this for the OPT1 interface: http://imgur.com/zzSRCfg
- As for client separation, that varies from access point to access point, so I can't really help you here as that configuration will vary widely.
Advertisement
Add Comment
Please, Sign In to add comment
