Loosely inspired by ​Marten how-to build a FreeBSD AP I will show the use of Multiple SSID aka as VAP (VirtualAccessPoints) to build ​La Fonera like device. Provide restricted access which expose your full personal network and a limited access for people visiting and passing by.

Procedure

Assuming your have already setup your FreeBSD installation, else use the Handbook or my guide for FreeBSDOnEmbeddedDevice is you like.

To be put into /etc/rc.conf

# Eudoroam internal wired and wireless
ifconfig_sis0="up"
create_args_wlan0="wlanmode hostap mode 11g ssid eduroam.test up"
ifconfig_bridge0="addm wlan0 addm sis0 up"
ipv4_addrs_bridge0="192.168.42.1/24 192.168.1.2/24"

# Wireless Leiden Hub
ifconfig_sis2="up"
create_args_wlan1="wlanmode hostap bssid mode 11g ssid
ap-raam.snuit.wleiden.net up"
ifconfig_bridge1="addm wlan1 addm sis2 DHCP"

# Authentication enabled on my personal access point (wlan0)
hostapd_enable="YES"

To be put in /etc/hostapd.conf

interface=wlan0
driver=bsd

logger_syslog=-1
logger_syslog_level=0
logger_stdout=-1
logger_stdout_level=2
dump_file=/tmp/hostapd.dump
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0

macaddr_acl=0
auth_algs=1

wpa=1
wpa_passphrase=FooBarPass
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP TKIP
EOF

Misc

Wireless card used: # pciconf -vl | grep -A 4 ath0

ath0@pci0:0:14:0:       class=0x020000 card=0x1600185f chip=0x001b168c
rev=0x01 hdr=0x00
   vendor     = 'Atheros Communications Inc.'
   device     = 'AR5006 family 802.11abg Wireless NIC'
   class      = network