Add Radius auth and secure SSIDs

This commit is contained in:
Petko Bordjukov 2023-10-29 13:04:30 +02:00
parent 7d60b8f7b9
commit fcaad99372
1 changed files with 90 additions and 6 deletions

View File

@ -31,9 +31,8 @@ config wifi-iface 'wifinet0'
option macaddr '02:0f:20:23:00:00'
# Security
option ssid 'OpenFest2023'
option encryption 'sae-mixed'
option key 'OpenFest2023'
option ssid 'OpenFest'
option encryption 'none'
option ieee80211w '2' # Protected management frames
option ocv '1' # Operating channel validation
option isolate '1' # Client isolation
@ -69,9 +68,94 @@ config wifi-iface 'wifinet1'
option macaddr '02:0f:20:23:00:01'
# Security
option ssid 'OpenFest2023'
option encryption 'sae-mixed'
option key 'OpenFest2023'
option ssid 'OpenFest'
option encryption 'none'
option ieee80211w '2' # Protected management frames
option ocv '1' # Operating channel validation
option isolate '1' # Client isolation
option airtime_bss_weight '1' # Airtime fairness BSS weight
# Fast roaming
option ieee80211r '1'
option ft_over_ds '0' # Use Fast Transition over the air
option auth_cache '1'
option rsn_preauth '1'
option ft_psk_generate_local '1'
# Radio measurement, client steering
option ieee80211k '1'
option rrm_neighbor_report '1'
option rrm_beacon_report '1'
option stationary_ap '1'
option bss_transition '1'
option mbo '1'
option time_advertisement '2'
option time_zone 'GMT0'
# STA Power management
option wnm_sleep_mode '0'
option wnm_sleep_mode_no_keys '1'
option uapsd '0' # Work-around for bugs in power management
config wifi-iface 'wifinet2'
option device 'radio0'
option mode 'ap'
option network 'wifi'
option macaddr '02:0f:20:23:00:02'
# Security
option ssid 'OpenFest Secure'
option encryption 'wpa3-mixed'
option auth_server '10.20.0.2'
option auth_port '1812'
option auth_secret 'radius_secret'
option acct_server '10.20.0.2'
option acc_port '1813'
option acc_secret 'radius_secret'
option ieee80211w '2' # Protected management frames
option ocv '1' # Operating channel validation
option isolate '1' # Client isolation
option airtime_bss_weight '1' # Airtime fairness BSS weight
# Fast roaming
option ieee80211r '1'
option ft_over_ds '0' # Use Fast Transition over the air
option auth_cache '1'
option rsn_preauth '1'
option ft_psk_generate_local '1'
# Radio measurement, client steering
option ieee80211k '1'
option rrm_neighbor_report '1'
option rrm_beacon_report '1'
option stationary_ap '1'
option bss_transition '1'
option mbo '1'
option time_advertisement '2'
option time_zone 'GMT0'
# STA Power management
option wnm_sleep_mode '0'
option wnm_sleep_mode_no_keys '1'
option uapsd '0' # Work-around for bugs in power management
config wifi-iface 'wifinet3'
option device 'radio1'
option mode 'ap'
option network 'wifi'
option macaddr '02:0f:20:23:00:03'
# Security
option ssid 'OpenFest Secure'
option encryption 'wpa3-mixed'
option auth_server '10.20.0.2'
option auth_port '1812'
option auth_secret 'radius_secret'
option acct_server '10.20.0.2'
option acc_port '1813'
option acc_secret 'radius_secret'
option ieee80211w '2' # Protected management frames
option ocv '1' # Operating channel validation
option isolate '1' # Client isolation