WAP gateway config

[Matt Herzog]

Hello.

I have an Atheros PCI card in my firewall/gateway machine.
It seems fully configured because the clients see a good strong signal 
but I can't get a dhcp lease from it. I'm not bothering with WEP just yet.

I followed the instructions found here:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-wireless.html

I ran these commands:
sysctl net.link.ether.bridge.enable=1
sysctl net.link.ether.bridge.config="wi0,vr0"
sysctl net.inet.ip.forwarding=1

The ath0 is bridged with the vr0 which is the internal NIC.
dhcpd is running on vr0. I have the following in my ipf.conf:
pass in quick on ath0 from any to any
pass out quick on ath0 from any to any

un /root# wicontrol ath0
NIC serial number:                      [  ]
Station name:                           [ unaligned.com ]
SSID for IBSS creation:                 [ wap ]
Current netname (SSID):                 [ wap ]
Desired netname (SSID):                 [ wap ]
Current BSSID:                          [ 00:0f:3d:ae:36:e0 ]
Channel list:                           [ ffe ]
IBSS channel:                           [ 11 ]
Current channel:                        [ 11 ]
Comms quality/signal/noise:             [ 0 13 0 ]
Promiscuous mode:                       [ Off ]
Intersil-Prism2 based card:             [ 1 ]
Port type (1=BSS, 3=ad-hoc):            [ 6 ]
MAC address:                            [ 00:0f:3d:ae:36:e0 ]
TX rate (selection):                    [ 11 ]
TX rate (actual speed):                 [ 11 ]
RTS/CTS handshake threshold:            [ 2312 ]
Create IBSS:                            [ Off ]
Access point density:                   [ 1 ]
Power Mgmt (1=on, 0=off):               [ 0 ]
Max sleep time:                         [ 100 ]
WEP encryption:                         [ Off ]
TX encryption key:                      [ 1 ]
Encryption keys:                        [  ][  ][  ][  ]

My entire ifconfig:

fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=8<VLAN_MTU>
	inet 24.98.219.30 netmask 0xfffffe00 broadcast 255.255.255.255
	ether 00:03:47:0b:74:7b
	media: Ethernet autoselect (100baseTX <full-duplex>)
	status: active
ath0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	inet 10.0.0.2 netmask 0xffffff00 broadcast 10.0.0.255
	ether 00:0f:3d:ae:36:e0
	media: IEEE 802.11 Wireless Ethernet DS/11Mbps <hostap> (autoselect <hostap>)
	status: associated
	ssid mycod 1:mycod
	channel 11 authmode OPEN powersavemode OFF powersavesleep 100
	rtsthreshold 2312 protmode CTS
	wepmode OFF weptxkey 1
vr0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
	inet 10.0.0.1 netmask 0xffffff00 broadcast 10.0.0.255
	ether 00:d0:68:01:55:a3
	media: Ethernet autoselect (100baseTX <full-duplex>)
	status: active
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
	inet 127.0.0.1 netmask 0xff000000