We're doing some wireless deployment on a much broader scale and using cheaper, less configurable hardware ... We need to have an upstream source that can handle user Authentication/Routing/Bandwidth control, and from what I can tell, PPPoE on FreeBSD seems to be the way to go.
However, I am stumped with this issue -- if joesixpack hops onto the wireless net, sniffs an IP and then finds an unused one, will the PPPoE gateway not allow his traffic to pass because of lack of authentication? I also know that PPPoE does proxyarp'ing instead of actual routing, and then you configure routing on top of that ... will the layer 3 routing still happen if the person isn't authenticated/proxy'd? They'll be able to associate with the AP, and they'll be able to snag find an IP address ... once they have that, theoretically the box will just move the traffic along instead of checking to see if it's ran through PPPoE.
Also, from what I've read, PPPoE fires up ppp -direct which starts the proxy arping ... anybody know if there is a way to append something to this script so that I can manage traffic/bandwidth shaping using pf? It'd be *really* hottt if I could tell a customer that they just need to reconnect to go from 256kbps to 768kbps or whatever.
Thanks!
randal
However, I am stumped with this issue -- if joesixpack hops onto the wireless net, sniffs an IP and then finds an unused one, will the PPPoE gateway not allow his traffic to pass because of lack of authentication? I also know that PPPoE does proxyarp'ing instead of actual routing, and then you configure routing on top of that ... will the layer 3 routing still happen if the person isn't authenticated/proxy'd? They'll be able to associate with the AP, and they'll be able to snag find an IP address ... once they have that, theoretically the box will just move the traffic along instead of checking to see if it's ran through PPPoE.
Also, from what I've read, PPPoE fires up ppp -direct which starts the proxy arping ... anybody know if there is a way to append something to this script so that I can manage traffic/bandwidth shaping using pf? It'd be *really* hottt if I could tell a customer that they just need to reconnect to go from 256kbps to 768kbps or whatever.
Thanks!
randal
Facebook
Twitter