
Golden Villas is an affordable housing location in South Park, San Diego. it has 44 dwellings in 11 buildings, and a community room. A local non-profit manages the housing. The residents are a broad demographic and are mostly families with children.
In Feb 2005, Socalfreenet volunteers descended en masse and installed two rooftop access points, a gateway sharing and firewall device in the office to provide wireless coverage for the entire complex.
At the same time, they also completely cleared out the disused community room and installed a complete computer lab with six computers donated by the San Diego Futures foundation.
This has been a flagship installation. Most of the residents here use the internet, as well as many surrounding houses. The system has been incredibly stable, with outages measured in minutes per year.
Note: This document was a 'living' document during the planning phase, and as such was never quite up to date. And so far it has not been updated to reflect the final outcome on the installation day. However we're leaving it here in this state to serve as a guide for the next install and/or interested readers. Please don't mistake it as "The whole truth and nothing but the truth.".
This document is a central planning document for the Golden Villa installation day. The address is
http://maps.google.com/maps?q=3385%20Elm%20St%2C%20san%20diego%2C%20ca and the start time is 10am.
The installation has four parts:
Below are the details for each part of the installation.
The main AP will be located on the peak of the roof which contains the office. The AP will be mounted directly on the wall and the antenna will be in a short pole screwed directly onto the roof peak. A supplied Cat-5 cable will run down the roof and through a new hole into the office where it will be connected to a router which will split the cable internet between the office network and wireless network.
The network configuration is detailed here and there is a separate step by step covering the m0n0wall configuration and Netgate HS3000 AP configuration.
The following equipment has been purchased for the installation:
Netgate HS3000 which includes a 50 ft outdoor cat-5 cable
SuperPass 8dBi 10 degree downtilt omni
Hyperlinktech Lightning Protector
Soekris 4501 in case with m0n0wall
Purchase a drill bit to put the cable through the office wall
Purchase sealant to fill the hole after we put the cable through
Solve the problem of extending the ethernet cable if necessary.
Configure the MikroTik
Configure the AP
The second wireless AP will be mounted at the other end of the complex. It will operate in repeater mode.
The following equipment has been purchased for the installation:
We will receive 6 computers running fresh installations of either Win2k or WinXP, complete with keyboard, mouse and monitors. They need to be hooked together into a switch with a D-Link kit which will get the signal from the main AP.
The following equipment has been purchased for the installation:
D-Link Bridge Kit to hook up the lab to the network
Cat-5 cables
Need an 8 port hub
Need a few power strips
Pick up the donated computers
The following equipment has been purchased for the installation:
Eight D-Link Kits - already programmed for socalfreenet.org (thanks John Kim!)
Ground lug
"U" clamps and matching wood screww
Radiator clamps
Here is a brief description of how we configured the two Netgate HS3000 250mW APs we're using at Golden Villas.
Setup is very much like configuring any AP, but with one twist - adding the WDS (Wireless Distribution System) setup. The basic steps are:
At this point we stopped to check that everything was working ok via wireless. Note that the AP resets between almost any setting change, so there is a pause and lost connection during this period.
Next we configured the LAN settings to match the network design, as follows:
At this point, of course, you need to switch the computer IP used. We actually plugged into the previously configured m0n0wall box and connected wirelessly. The m0n0wall gave us an IP and after going through the captive portal we could surf the net as hoped.
The last step was to turn on WDS support. The HS3000 requires that both "master" and "repeater" be set to point to each other. A convenient way to get the required MAC addresses is to use the Wireless Site Survey link, assuming both radios are on. Of course there are also stickers on the metal case and on the box they came in.
Now you're ready to test. This turned out to be a little tricky. Most client software doesn't give you any control over which AP you connect to and may even ping-pong between APs. So not only is hard to force the client to use a particular AP (e.g. the repeater instead of the master), most software won't even tell you the MAC address of the AP you're connected with. Before we worked out the test technique below we saw a lot of strange behaviour. Very slow links, dropped packets etc.
Skipping to what worked, we turned on the master AP but left the antenna disconnected (key step!). A few feet away we put the 2nd 'repeater' AP with its 8dBi omni connected. Then we took a laptop a few rooms away - i.e. far enough for the master to be too weak, but a good signal from the repeater was available. (This proved much better than our first approach of leaving both antennas on and taking the repeater AP a few rooms away.
It was interesting to start a ping to both radios and watch the results. From two separate pings to 10.12.11.130 and 10.12.11.131 the ping time for the connected radio was 1-2ms and double that for the other. As we walked away with the laptop and the client software switched from the master AP to the repeater, the pings first started timing out and then the times reversed with the shorter time for the repeater.
After the above we were satisfied that we had the network ready to install. Phew!
Here are the steps taken to program monowall for use at Golden Villas apartments with a Soekris 4501 box. Read the Network Configuration in conjunction with this guide.
The latest version of m0n0wall available was used, 1.2b3. It was configured as follows.
That's the important settings completed. Everything should basically work at this point and its worth stopping to make sure.
We want to keep the LAN completely firewalled from the WLAN so we need some rules to ensure that it is:
Unfortunately now we can't admin the firewall via wireless on the WLAN, so we add another rule. We make this rule very specific:
At this point it shold now be possible to access https://10.12.11.1 from a client on the WLAN port (i.e. a wireless client once WLAN is connected to an AP).
Some more settings will complete the configuration:
That's it! Save the configuration just to be safe (under Diagnostices -> Backup/Restore).
Drew, Seren, Jason and Michael did a site survey today at Golden Villa affordable housing apartments. Here's the report.
Two access points mounted at each end of the L shaped layout should be sufficient to provide adequate coverage throughout the complex. The buildings are 2 story with 4 units per building and attenuate the signal markedly. However the proposed AP layout allows most units in the buildings to receive a direct signal.
For equipment, we could either go our usual route and have a main AP with both 802.11a and 802.11b radios and a second AP relaying from there. Total cost approx $1300.
Alternatively, we could use a WDS-based solution either based on an inside AP-160 and two Sputnik AP 200 or the Netgate HS3000 (both about $900).
In addition, in the main office we'd either place an embedded PC running m0n0wall or a Sputnik 160 is possible if we go the WDS route.
In short, we could build a system for all 44 occupants and the computer lab for $1000 - $1500.
We saw 4-5 APs during out site survey - much fewer than normal.
The buildings form a rough L shape, with the office located on the leg of the L but towards the corner. It is wrapped around a road on the inside of the L with a gorge on the outside all around. Single dwelling houses are on the opposite side of the road.
The office has an existing Cox business cable connection and is the rooftop we used to place the test equipment (there are also 4 apartments in the building). The test AP was a 200mW Senao CB3 plus, http://www.wlanparts.com/product/NL2611CB3PLUS, with an 8.5 dBi 10 degree downtilt antenna, http://www.superpass.com/SPDG6O-D10.html. Right opposite the office is a community building where they plan to create a small computer lab.
With three laptops containing various combinations of built-in (Centrino) and external cards (30mW Atheros-based Netgear and 50mw? D-Link non-prism) we walked around all the buildings while running a continuous 1500 byte ping to the AP. When the pings started dropping we marked that as the edge of useful range.
Using this criteria, we determined that over half the buildings could be covered with one AP. Two remaining buildings had incomplete coverage. Some of those apartments could get good coverage from their front windows, but not beyond. Assuming the same propagation, we concluded that another AP mounted on the last roof of the tip of the L, but closer to the L corner would provide the whole complex with good coverage. The houses across the road on the inside of the L would also get good coverage, and likely the houses across the gorge (though there weren't many, and the downtilt makes it less likely).
None of the rooftops are flat. We decided that mounting a standard L shaped bracket like that used for satellite dishes on the end of the building at the peak of the roof would be simple and effective and allow the antenna to rise about 1 foot above the roofline. We could route outdoor Cat-5 cable to the roof via the water downpipes which are open at the bottom and then up to the box following side roof trim panels. A tall ladder will be needed for the installation day.
At the office location we will need to drill through the office walls like cable TV installers do. Inside will be power and the internet feed.
At the other building location the power box has a double outlet underneath the main meter box (5 meters - 4 units plus 'house'). We would need to add a water-resistant housing for the PoE. A simple 4x4x4 electrical box would suffice and could be mounted directly on the wall (perhaps even surrounding the double outlet box?).
Dirt surrounds all buildings so driving a grounding rod for lightning protection should be straight forward.
Standard relay:
$ 40 - 2 x LMR-400 N-male N-male cables $ 20 - lightning arrestor $ 45 - PoE $ 65 - downtilt 8.5 dBi omni $ 50 - 802.11a 'backfire' antenna $ 14 - U.FL pigtail $ 70 - 802.11a radio $320 - Metrix kit (with 200mW 802.11b radio) $ 20 - misc fittings (copper, cat-5, hose clamps) ------ ~$650 each radio
Sputnik based:
$ 20 - 1 x LMR-400 N-male N-male cables $ 20 - lightning arrestor $ 45 - PoE $ 65 - downtilt 8.5 dBi omni $290 - www.sputnik.com/products/aps/ap200.html $ 20 - misc futtings ----- ~$460 - includes tax on sputnik
Netgate HS3000 based:
$ 20 - lightning arrestor $ 65 - downtilt 8.5 dBi omni $355 - www.netgate.com/product_info.php?products_id=41 ---- ~$440 - 250mW HS3000 comes with lots of odds/ends
Sputnik 160 (WDS only)
~$110 - with tax and ship
M0n0wall based Nokia IP110
$100 - Nokia IP110 from Ebay ??? $ 20 - HD to CF adapter (mini-box) ---- $130 - with ship - very approx!
M0n0wall based Soekris:
$161 - net4501 with case $ 9 - power supply $ 10 - CF card ---- ~$190 - includes tax
This started out being short but ended up pretty complete. Please ask any questions about anything that isn't clear.
If we can get the go ahead fairly quickly, we could schedule this installation quite soon. This will be a very worthwhile addition to this community as well as a great wireless learning experience for everyone, so I hope to see a few new faces on install day :-) .
Our intrepid band of volunteers really pulled through today with the most complex single-day install we've ever accomplished!
For starters, there was the common room that become a computer lab. Then there was the dual node installation of a main AP and a second rooftop repeater AP. These were all driven by a newly installed router, firewall and captive portal box (a soekris box running m0n0wall). Many, many thanks to all of you, both the regulars and the newcomers. With one less person, it would have been hard to finish in one day.
We've learnt a lot in the past year and are applying it more consistently. In particular, we've found that the more work we can do before getting onsite, the smoother the day will go. This allows more time to cope with the unexpected.
Some specific things we've learnt previously and applied well this time:
Many, many thanks to the volunteers who showed up on the day and who provided critical support beforehand, including: Seren, Drew, Jason, Michael, Dave, Dlan, Stewart, Marc, Joe, Ben, Matt and Mike S. Not to forget our president Lee, who also wrote a wonderful thank you. All your contributions were vital.
Although all's well that ended well, there were some 'learning opportunities' during the day. The reason for mentioning them here is not to dwell on them, but rather to make note so we can avoid these problems in the future if possible.
| Used for | Name & Link | Approx Price | Qty |
|---|---|---|---|
| Gateway | Soekris 4501 | $206 | 1 |
| 8MB CF card, cables | $15 | 1 | |
| Radios | HS3000 | $320 | 2 |
| Antennas | downtilt 8dBi | $65 | 2 |
| lightning protector | $20 | 2 | |
| Cables | 1.5M N-Male N-Male | $18 | 2 |
| Masts | 1" aluminum offcuts | $5 | 2 |
| Misc | Mounting hardware, electrical hardware | ~$50 | 1 |
| Volunteers | Pizza Lunch | $50 | 1 |
a work in progress - the final tally is still being worked out