Loosely inspired by ​Marten how-to build a FreeBSD AP I will show the use of Multiple SSID aka as VAP (VirtualAccessPoints) to build ​La Fonera like device. Provide restricted access which expose your full personal network and a limited access for people visiting and passing by.

Procedure

Assuming your have already setup your FreeBSD installation, else use the Handbook or my guide for FreeBSDOnEmbeddedDevice is you like.

XXX: Explain and document raw config files

To be put into /etc/rc.conf

# Eudoroam internal wired and wireless
ifconfig_sis0="up"
create_args_wlan0="wlanmode hostap mode 11g ssid eduroam.test up"
ifconfig_bridge0="addm wlan0 addm sis0 up"
ipv4_addrs_bridge0="192.168.42.1/24 192.168.1.2/24"

# Wireless Leiden Hub
ifconfig_sis2="up"
create_args_wlan1="wlanmode hostap bssid mode 11g ssid
ap-raam.snuit.wleiden.net up"
ifconfig_bridge1="addm wlan1 addm sis2 DHCP"

# Authentication enabled on my personal access point (wlan0)
hostapd_enable="YES"

To be put in /etc/hostapd.conf

interface=wlan0
driver=bsd

logger_syslog=-1
logger_syslog_level=0
logger_stdout=-1
logger_stdout_level=2
dump_file=/tmp/hostapd.dump
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0

macaddr_acl=0
auth_algs=1

wpa=1
wpa_passphrase=FooBarPass
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP TKIP
EOF

Misc

Wireless card used: # pciconf -vl | grep -A 4 ath0

ath0@pci0:0:14:0:       class=0x020000 card=0x1600185f chip=0x001b168c
rev=0x01 hdr=0x00
   vendor     = 'Atheros Communications Inc.'
   device     = 'AR5006 family 802.11abg Wireless NIC'
   class      = network