On 1/30/07, Kristian Lampen <[EMAIL PROTECTED]> wrote:
Peter Teunissen schrieb:
>
>>
>> 2. Is it correct to place the WiFi Access Point connected to the switch,
>> or better directly to the Debian Router?
> Best would be to have another NIC on the router for the WAP (or use a
> PCI WLAN card), so you can have stricter rules in the FW for wireless
> clients. For instance, allow only certain (DHCP per mac address
> assigned) IP's to access the LAN from the WLAN and let others only
> access the WAN. WLAN in inherently less secure than wired networking,
> so it'd be nice to keep them separated.
1. After thinking of this a little bit I got a knot in my brain! What is
the difference between a WLAN Access Point and for example a Laptop with
a WLAN-Usbstick? Is every PC with an WLAN-Usbstick/PCI-WLAN-Card and an
Ethernetcard an Accesspoint, if the traffic from WLAN is routed to the
Ethernet or DSL?
While the chipsets of some wlan cards (and USB sticks, I believe)
allow them to be used as APs (assuming the driver supports this, e.g.
Madwifi with Atheros chipsets allow the card to be brought up in
Master mode, i.e. AP), not all do, and even those that do would
normally be configured as clients, not APs (in Madwifi, Managed mode).
If the card is brought up as an AP, wireless devices can connect
directly to it; it will have an SSID, and can be configured with
WEP/WPA/WPA2. If it is a client, other wireless devices can't connect
directly to it; but all traffic that enters the network by some other
means (connecting to an AP or wired switch, etc.) and makes it to the
machine with the card can then be routed out through the wireless
card, to whatever wireless AP the card is associated with, and from
there to anything that's connected to the AP.
HTH,
Celejar
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
