peter hessler @openbsd is a user on bsd.network. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.
peter hessler @openbsd @phessler

Welp, now I have *two* APs that support 802.1X authentication. That wasn't the point of buying them, but it might be fun for a future project.

· Web · 0 · 6

@qbit an oldish TP-Link AC750, and a new Asus RT-AC58U.

@phessler
Unifi AP AC pro. It's sooooo shiny!
@qbit

@florian @qbit couldn't pick one up in person in berlin today.

@phessler
All I hear is mimimi😋
Seriously though, if we ever get asked to run a network for a hackathon again I want two of those.
I'm running it with PoE (fewer cables!) And thanks to @sthen I have the unifi manager running on OpenBSD. Need to enable SNMP though, but waiting on @mwlucas book...
@qbit

YAY, and the one I'm bringing to can do the same SSID on both the 2.4 and 5Ghz bands.

@phessler are... are you working on an openbsd powered wifi appliance?

@chuck no. making sure my bgp tutorial has the interactive part...unlike last time :(.

@phessler You had me so excited for a second... I guess I now know what my next project should be :D

@chuck we have all the basic pieces already in base, as long as you pick a card that supports HostAP mode, you're good to go.

@phessler i've been rooting around in the open documentation for obsd as my edge router, which i'm starting to aggregate parts for. Having an obsd powered wifi AP on top of that would be a sweet combo. A simple matter of programming later for dashboarding the ap + setup and you've got homebrew unifi but with a sweet sweet obsd base.

Thats a lofty project but it might be fun :)

@chuck sounds like fun!

Most of my time is spent with bgp routers, with a little bit with wifi clients. Adding more support for various uplink clients is an interest, but ENOTIME.

@phessler I hear you on that one. I have more interests than I have time for as well.

Good luck on the BGP tutorial!

@phessler Hopefully UOttawa doesn't have the kind of control freak system RIT has (maybe had now). I don't know if the new Aruba system does it, but the old Cisco system would basically DoS any unauthorized APs. It would send de-auth packets to any clients trying to use "rogue" APs.

@kurtm I hope not!

Dan just tested, and apparently the wifi can connect to devices plugged into the wired network, so hopefully it isn't necessary?

@phessler I hope not too. Figured I'd mention it as a possibility so you can check before the tutorial starts :D

@kurtm I'm planning on spending part of Tuesday in that room, playing with things and generally testing it out just in case.

@phessler @kurtm Historically, has not been an issue.

OpenBSD's hostapd can do the DOS trick. I wonder if there's a way to DOS the DOSser...

@mwlucas @kurtm last year my problem was that the wifi was *down* during my tutorial. So, nobody could do any of the exercises.

I'm probably being overly paranoid, but once bitten twice Great White. youtube.com/watch?v=Bz61YQWZuY

@phessler @mwlucas I remember, I was there. Their wireless was all fscked up. It wasn't just the guest wifi that was having problems.

@mwlucas @phessler @kurtm There is no way to DOS the DOSser without ruining the channel for everyone, unless power to the DOSser's AP gets cut. Deauth frames only apply to clients, they cannot "kick-off" APs.