M0n0wall installation at Mercado Wireless Network

We have a multi-node wireless network installed in a 144 apartment complex with 24 buildings. The one router that binds and rules them all is currently running m0n0wall. This article describes the configuration of the network as a whole and m0n0wall specficially. There were a number of gotchas involved in setting this up, so I lay them out here here in the hope it will save others some time.

Each node in the network resides in its own /27 subnet (full addresss details) and has its own dhcp server and DNS cache. All nodes route to one master node in a classic "star" point to multi-point configuration.

The master node in turn connects to the gateway node which is connected to a DSL modem using PPPoE for its connection. The gateway node also provides DHCP and NAT services to local office computers and a computer lab.

M0n0wall Gateway router Configuration

The gateway router has to provide the following services:

  • PPPoE connection management
  • local office subnet DHCP, NAT and firewall
  • wireless network NAT, captive portal and firewall
  • firewall between the office and wireless networks
  • wireless link to master node

In addition the following features are nice to have:

  • secure outside administration
  • offsite syslog reporting
  • remote IPSEC / PPTP access
  • Dynamic DNS updating so we could admin the router using a web address

M0n0wall provides the capabilities to do all this (and more).

to be continued - a work in progress

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.

Back to top