diff --git a/source/manual/how-tos/images/interface_wireless_radius_1.png b/source/manual/how-tos/images/interface_wireless_radius_1.png new file mode 100644 index 00000000..d687120e Binary files /dev/null and b/source/manual/how-tos/images/interface_wireless_radius_1.png differ diff --git a/source/manual/how-tos/images/interface_wireless_radius_2.png b/source/manual/how-tos/images/interface_wireless_radius_2.png new file mode 100644 index 00000000..dd63e543 Binary files /dev/null and b/source/manual/how-tos/images/interface_wireless_radius_2.png differ diff --git a/source/manual/how-tos/images/interface_wireless_radius_3.png b/source/manual/how-tos/images/interface_wireless_radius_3.png new file mode 100644 index 00000000..0c344683 Binary files /dev/null and b/source/manual/how-tos/images/interface_wireless_radius_3.png differ diff --git a/source/manual/how-tos/images/interface_wireless_radius_4.png b/source/manual/how-tos/images/interface_wireless_radius_4.png new file mode 100644 index 00000000..2a9145ae Binary files /dev/null and b/source/manual/how-tos/images/interface_wireless_radius_4.png differ diff --git a/source/manual/how-tos/interface_wireless_internal.rst b/source/manual/how-tos/interface_wireless_internal.rst new file mode 100644 index 00000000..26408c71 --- /dev/null +++ b/source/manual/how-tos/interface_wireless_internal.rst @@ -0,0 +1,98 @@ +======================================== +Interfaces: Wireless Networks (INTERNAL) +======================================== + +This page is about setting up a wireless interface in access point mode to +create your own WLAN. In this mode, your Laptops and handhelds can connect +to your OPNsense without an external access point for home and enterprise +environments. For home networks step over step two and don't setup the +802.1X service in the network settings. +For external access point, just create a cabled network (usually Ethernet) +and connect the access point to the other end. + + +.. Warning:: + + FreeBSD supports wireless adapters in access point (infrastructure) mode, + but this functionality is limited to some drivers and there may be some, + which do not support all options available via the web interface. + Please make sure that you buy a wireless card that is supported to avoid + these problems. + + +Configuration +============= + +Step 1 +------ + +Create a wireless clone interface and assign it. + + +Step 2 - Prepare RADIUS +----------------------- + + +.. image:: images/interface_wireless_radius_2.png + +Create a new client, which is the AP. +For example, name it localhost, choose a secret and the CIDR 127.0.0.0/8. +The secret is later used in the wireless settings. + +.. image:: images/interface_wireless_radius_4.png + +Next, switch to the users menu and create a new user (for example for yourself). +The username and the password are used to authenticate later. +The rest of the settings can be left on their defaults. + + +Step 3 - Prepare WLAN +--------------------- + +.. image:: images/interface_wireless_radius_1.png + +======================= ======================================== +Enable Check +Description WLAN +IPv4 Configuration Type Static IPv4 +======================= ======================================== + + +======================= ======================================== +IPv4 address A network +IPv4 Upstream Gateway WLAN +======================= ======================================== + + +================================ ========================================================== +Persist common settings Check (save for all clones) +Standard 802.11g or another standard your adapter supports +Regulatory settings Choose your country +Mode Access Point +SSID Name of the wireless network +WEP Unchecked +WPA Checked with your PSK (WLAN password if wanted) +WPA Mode WPA2 +WPA Key Management Mode Extensible Authentication +Authentication Open System Authentication +WPA Pairwise AES +Enable IEEE802.1X Authentication Check if you want to use RADIUS authentication +802.1X Server IP Address 127.0.0.1 (if you want RADIUS) +802.1X Server Port 1812 (if you want RADIUS) +802.1X Server Shared Secret The password you configured in step 2 (if you want RADIUS) +================================ ========================================================== + +Step 4 - Connect +---------------- + +.. Info:: + This is system specific - this screenshot is for a Linux distribution with + KDE Plasma Workspaces 5, with the system language set to German. + +.. image:: images/interface_wireless_radius_3.png + + +To connect to the network, set the security setting to "WPA/WPA2 Enterprise" +and the authentication setting to "Protected EAP (PEAP)". +The inner authentication should be set to MSCHAPv2, and the username and password are the ones you +set up in the RADIUS plugin. diff --git a/source/manual/howtos.rst b/source/manual/howtos.rst index 454a8cc8..b9c3b58a 100644 --- a/source/manual/howtos.rst +++ b/source/manual/howtos.rst @@ -29,6 +29,7 @@ How-tos how-tos/haproxy how-tos/haproxy_howtos how-tos/insight + how-tos/interface_wireless_internal how-tos/installaws how-tos/ips-feodo how-tos/ips-geoip