2015-12-13 - Re: [GRASE-Hotspot] Access Point Configuration

Header Data

From: Timothy White <ti***8@gmail.com>
Message Hash: c1bdad6208e1a356291dfd6d9d0f74c93e78da5721124fe10c548fc71bd3375f
Message ID: <CAESLx0KPUxkMyxvm6_rXoyOkjFoGdyBTaBVjp-Jf7ZPbL-E6MQ@mail.gmail.com>
Reply To: <CAA_X3qd6ewHTJy=dD4KxQ=Mk4Z0YdDnhZ5uJcA94qoXBw3txkA@mail.gmail.com>
UTC Datetime: 2015-12-13 03:50:43 UTC
Raw Date: Sun, 13 Dec 2015 20:50:43 +1000

Raw message 

Hi Gary

Can you please post some more information about your setup (excluding the
WAP for now, as it appears that the WAP isn't the problem).

Firstly what Debian/Ubuntu version you are using, and the package versions
of Grase. The following commands copy and pasted will help if you show us
the responses
lsb_release -a
apt-cache policy grase-\*

How is your hardware setup? What is your WAN network card, what is the IP
range of that network, what's the upstream router etc. Are you using the
default Grase ip range on the LAN? Have you ensured that the LAN interface
is set to not be managed by network manager, and to be manually configured?
Showing us the output of the following commands, and screenshots of the
network settings and coova chilli settings pages from the Radmin interface
would help.
/sbin/ifconfig
cat /etc/network/interfaces

Also, just to be clear, and I've said this before. Your WAP IP address
doesn't need to be in the same range as the Grase Hotspot at all. It can be
in it's own "management" range, which means that none of the clients by
default can access it, and neither can the Grase server. Because the
Wireless clients are just bridged to the LAN (Layer 2), the WAP doesn't
even need an IP if you want! IP's are Layer 3, and we operate on the Layer
2 level (as well as the Layer 3). While not true security, putting the
WAP's on a totally different IP range is a good way to prevent clients from
poking around easily and trying to exploit your WAPs.

Regards

Tim

On Sun, Dec 13, 2015 at 12:27 AM, Gary Wright <wr***g@gmail.com>
wrote:

> No. It disables internet on the server also.
>
>
> On Friday, December 11, 2015, Drazen Zuvela <dr***a@radez.hr>
> wrote:
>
>> Do you reaching internet?
>> Dana 12. pro 2015. 06:25 osoba Gary Wright <wr***g@gmail.com>
>> napisala je:
>>
>> Connect my laptop.  I get an IP 10.1.0.12.  I don't get a grade login,
>> but I do get rad min.
>>
>> Sent from Gary Wrights iPhone -
>> 951-514-1632
>>
>> On Dec 11, 2015, at 9:53 AM, drazen <dr***a@radez.hr> wrote:
>>
>> Lets go basic check.
>> Leave that AP out.
>> Can you connect your desktop or notebook by wire to grase LAN side?
>> When you do that, your desktop/notebook network card must get IP from
>> grase in range 10.1.0.xx
>> (this will NOT happen if Grase is set up wrong, or your desktop card has
>> static preset)
>>
>> If OK, when you open browser you should get grase log-in page.
>> You will NOT receive login page if your network card MAC is already
>> registered computer account at grase.
>> In both cases, with log-in or without, you should reach internet. You
>> should reach grase web interface too:
>> 10.1.0.1/grase/radmin/
>>
>> If everything as explained I would say that Grase setting is ok and it is
>> working correctly.
>>
>> Now the most probably, your AP is doing DHCP. It should be turned off.
>> Check this detail and try again.
>>
>>
>>
>>
>> On 12/11/2015 03:07 PM, Gary Wright wrote:
>>
>> I think I'm almost there.  What is weird is when I connect my AP I cannot
>> access the internet anymore from my server.
>>
>>
>>
>> Is this supposed to be happening; two scenarios:
>>
>> 1.  When the AP is not plugged into grase server, and I can access the
>> internet, WAN is set to eth0 and LAN is set to enth1 as it shows in
>> ifconfig.
>>
>> 2.  When I plug in the AP to the grase server, it flips.  It says WAN is
>> on eth1 and LAN is on eth0, yet on the status page it shows WAN on eth0 and
>> LAN on tun0
>>
>> 3. When plugged in I can connect to my SSID (grace guest), but I don't
>> get a grase login.
>>
>> Is that right?
>>
>> Gary Wright
>> 951-514-1632 Cell
>> 760-730-6603 Home
>> wr***g@gmail.com
>>
>>
>> On Thu, Dec 10, 2015 at 11:45 AM, drazen <dr***a@radez.hr> wrote:
>>
>> That is correct. This is what i suggest you couple of weeks ago.
>>
>>
>> On 12/10/2015 07:56 PM, Gary Wright wrote:
>>
>> Thanks Drazen.  I actually meant the IP of my AP.  It should not be in
>> the DHCP range of the clients, correct?
>>
>> Sent from Gary Wrights iPhone -
>> 951-514-1632
>>
>> On Dec 10, 2015, at 7:42 AM, drazen <dr***a@radez.hr> wrote:
>>
>> Partly correct
>> Last address from subnet range depends of "netmask" If netmask is
>> 255.255.255.0 only 255 adress available. So 10.1.0.1 to 10.1.0.255
>> I suggest you some online IP calculator or android app at play store. The
>> are plenty handy ones.
>>
>>
>> On 12/10/2015 02:19 PM, Gary Wright wrote:
>>
>> But the IP needs to be in the 10.1.0. Range correct?  If I start DHCP at
>> 11 then my last octet could be 10,9,8...?
>>
>> Sent from Gary Wrights iPhone -
>> 951-514-1632
>>
>> On Dec 10, 2015, at 2:09 AM, Timothy White <ti***8@gmail.com> wrote:
>>
>> Hi Gary
>>
>> I'm not familar with this device. However, you will need SSID's on your
>> radios, otherwise there isn't anything for your clients to connect to.
>> Then, you probably just need to bridge the Radios to the Ethernet I think.
>> You also probably don't want your Ethernet to have an IP in the Grase
>> Hotspot range, as that IP will be given out to clients unless you adjust
>> your DHCP range.
>>
>> Regards
>>
>> Tim
>>
>> On Thu, Dec 10, 2015 at 2:13 PM, Gary Wright <wr***g@gmail.com>
>> wrote:
>>
>> This is my configuration on my 1130ag access point.  Is this correct?  Do
>> I need to set an SSID on the ap?  I see neither of my Radio's have IP's?
>> interface Dot11Radio0
>>  no ip address
>>  no ip route-cache
>>  shutdown
>>  station-role root
>>  bridge-group 1
>>  bridge-group 1 subscriber-loop-control
>>  bridge-group 1 block-unknown-source
>>  no bridge-group 1 source-learning
>>  no bridge-group 1 unicast-flooding
>>  bridge-group 1 spanning-disabled
>> !
>> interface Dot11Radio1
>>  no ip address
>>  no ip route-cache
>>  shutdown
>>  dfs band 3 block
>>  channel dfs
>>  station-role root
>>  bridge-group 1
>>  bridge-group 1 subscriber-loop-control
>>  bridge-group 1 block-unknown-source
>>  no bridge-group 1 source-learning
>>  no bridge-group 1 unicast-flooding
>>  bridge-group 1 spanning-disabled
>> !
>> interface FastEthernet0
>>  no ip address
>>  no ip route-cache
>>  duplex auto
>>  speed auto
>>  bridge-group 1
>>  no bridge-group 1 source-learning
>>  bridge-group 1 spanning-disabled
>> !
>> interface BVI1
>>  ip address 10.1.0.2 255.255.255.0
>>  no ip route-cache
>> !
>> ip default-gateway 10.1.0.1
>> ip http server
>> no ip http secure-server
>> ip http help-path
>> <http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag>
>> http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
>> bridge 1 route ip
>> !
>> !
>> !
>> line con 0
>> line vty 0 4
>>  login local
>> !
>> end
>>
>>
>>
>> Gary Wright
>> 951-514-1632 Cell
>> 760-730-6603 Home
>> wr***g@gmail.com
>>
>>
>> On Wed, Nov 25, 2015 at 12:34 PM, drazen <dr***a@radez.hr> wrote:
>>
>> Adjustment at Wifi radio device:
>> 1. Wireless interface working mode "AP"
>> 2. Disable DHCP on device
>> 3. No any encription on interface (no WPA WEP ,) leave it "open"
>> 4. LAN port set to static IP. Say 10.1.0.2 (This is for easy
>> administration device in the future)
>> 5. Network mode "Bridge" (This may be optional)
>>
>> Adjustment at Grase:
>> 6. set DHCPStart to 11 (at least.)
>> So Grase is at 10.1.0.1 . You will have 10.1.0.2 up to 10.1.0.10
>> available for you static devices.
>>
>> 1. to 3. are extremely important.
>>
>> Drazen
>>
>>
>>
>> On 11/25/2015 06:04 PM, Gary Wright wrote:
>>
>> I just finished successfully loading grasehotspot.  I don't see any
>> recommended configure settings for AP's?  Did I miss that somewhere?
>>
>> I'm using a Cisco 1130 for my church guest access.
>>
>> Typical setting would be nice.
>>
>> Thanks
>> Gary
>>
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> <http://grasehotspot.org>http://grasehotspot.org
>> --- You received this message because you are subscribed to the Google
>> Groups "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> <http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/>
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/56561B47.1030007%40radez.hr>
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/56561B47.1030007%40radez.hr
>> .
>>
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> <http://grasehotspot.org>http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> <http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/>
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAA_X3qfmdoUMRQhZ7DT-A6RVftgdknWkvm97D78ubdDG35UtRA%40mail.gmail.com
>> .
>>
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> <http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/>
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAESLx0JH3J6LLQFFDrNwTxwJM8JMB73AO%2ByxAPSSMKHe7ZJzMA%40mail.gmail.com>
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAESLx0JH3J6LLQFFDrNwTxwJM8JMB73AO%2ByxAPSSMKHe7ZJzMA%40mail.gmail.com
>> .
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/206ED70E-AAE2-409A-B071-BF1AD0275F67%40gmail.com>
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/206ED70E-AAE2-409A-B071-BF1AD0275F67%40gmail.com
>> .
>>
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/56699D4B.6050402%40radez.hr>
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/56699D4B.6050402%40radez.hr
>> .
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> <http://grasehotspot.org>http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/509DE854-3732-41DD-B81C-16DE0E83780A%40gmail.com>
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/509DE854-3732-41DD-B81C-16DE0E83780A%40gmail.com
>> .
>>
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> <http://grasehotspot.org>http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/5669D65D.7040702%40radez.hr?utm_medium=email&utm_source=footer>
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/5669D65D.7040702%40radez.hr
>> .
>>
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> <http://grasehotspot.org>http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAA_X3qe4uM2%3D0GGZ8AQbBo_O4_MuvxgerGrBjb%2B0TChXGxp3-w%40mail.gmail.com?utm_medium=email&utm_source=footer>
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAA_X3qe4uM2%3D0GGZ8AQbBo_O4_MuvxgerGrBjb%2B0TChXGxp3-w%40mail.gmail.com
>> .
>>
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> http://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/566B0D95.8020604%40radez.hr
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/566B0D95.8020604%40radez.hr?utm_medium=email&utm_source=footer>
>> .
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> https://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/711BAA8B-9ED3-417C-9A75-58FB2F57B3F8%40gmail.com
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/711BAA8B-9ED3-417C-9A75-58FB2F57B3F8%40gmail.com?utm_medium=email&utm_source=footer>
>> .
>>
>> --
>> This mailing list is for the Grase Hotspot Project
>> http://grasehotspot.org
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Grase Hotspot" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to gr***e@grasehotspot.org.
>> To post to this group, send email to gr***t@grasehotspot.org.
>> Visit this group at
>> https://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
>> To view this discussion on the web visit
>> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/8cdd6bb0-108a-4172-ac62-9311a2240402%40email.android.com
>> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/8cdd6bb0-108a-4172-ac62-9311a2240402%40email.android.com?utm_medium=email&utm_source=footer>
>> .
>>
>
>
> --
> Gary Wright
> 951-514-1632 Cell
> 760-730-6603 Home
> wr***g@gmail.com
>
>
> --
> This mailing list is for the Grase Hotspot Project http://grasehotspot.org
> ---
> You received this message because you are subscribed to the Google Groups
> "Grase Hotspot" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to gr***e@grasehotspot.org.
> To post to this group, send email to gr***t@grasehotspot.org.
> Visit this group at
> https://groups.google.com/a/grasehotspot.org/group/grase-hotspot/.
> To view this discussion on the web visit
> https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAA_X3qd6ewHTJy%3DdD4KxQ%3DMk4Z0YdDnhZ5uJcA94qoXBw3txkA%40mail.gmail.com
> <https://groups.google.com/a/grasehotspot.org/d/msgid/grase-hotspot/CAA_X3qd6ewHTJy%3DdD4KxQ%3DMk4Z0YdDnhZ5uJcA94qoXBw3txkA%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
>

Thread