M0n0wall installation at Mercado Wireless Network
We have a multi-node wireless network installed in a 144 apartment complex with 24 buildings. The one router that binds and rules them all is currently running m0n0wall. This article describes the configuration of the network as a whole and m0n0wall specficially. There were a number of gotchas involved in setting this up, so I lay them out here here in the hope it will save others some time.
Each node in the network resides in its own /27 subnet (full addresss details) and has its own dhcp server and DNS cache. All nodes route to one master node in a classic "star" point to multi-point configuration.
The master node in turn connects to the gateway node which is connected to a DSL modem using PPPoE for its connection. The gateway node also provides DHCP and NAT services to local office computers and a computer lab.
M0n0wall Gateway router Configuration
The gateway router has to provide the following services:
- PPPoE connection management
- local office subnet DHCP, NAT and firewall
- wireless network NAT, captive portal and firewall
- firewall between the office and wireless networks
- wireless link to master node
In addition the following features are nice to have:
- secure outside administration
- offsite syslog reporting
- remote IPSEC / PPTP access
- Dynamic DNS updating so we could admin the router using a web address
M0n0wall provides the capabilities to do all this (and more).
to be continued - a work in progress
So Cal Free Net.org
Comments
Post new comment