difos/package
Bernd Naumann 98d91e4d5e hostapd: Radius based VLANs on AP with PSK
This patch allows the user to set `auth_server` and related settings on
non WPA2 Enterprise AP modes in `/etc/config/wireless`, too, so the
Radius Attributes for Dynamic VLAN Assignment can be fetched from Radius.

Without this patch, `auth_server` and other needed options are only
written to `hostapd-phy<n>.conf` when `option encryption wpa2` is set.

`hostapd` however supports "Station MAC address -based authentication" for
non WPA Enterprise Modes, too.

A classic approch is to use `accept_mac_file` which contains MAC addr
and VLAN-ID pairs. But, using `accept_mac_file` does not support
VLAN assignment for unknown stations.

This is a sample `freeradius3` config, where a known station
("7e:a6:a7:2a:93:d2") is assigned to VLAN `65` and unknown stations are
assigned to VLAN `67`.

```
"7ea6a72a93d2" Cleartext-Password := "7ea6a72a93d2"
        Tunnel-Type = "VLAN",
        Tunnel-Medium-Type = "IEEE-802",
        Tunnel-Private-Group-Id = 65

DEFAULT Cleartext-Password := "%{User-Name}"
        Tunnel-Type = "VLAN",
        Tunnel-Medium-Type = "IEEE-802",
        Tunnel-Private-Group-Id = 67
```

Other option is to configure known stations via `accept_mac_file` and
using only Radius for unknown stations.

I tested this patch only with `wpa_key_mgmt=WPA-PSK`, and assumed that
it should work with other Encryption/Access Mode, too.

Signed-off-by: Bernd Naumann <bernd.naumann@kr217.de>
2022-06-08 16:04:04 +02:00
..
base-files base-files: simplify restorecon logic 2022-05-02 21:11:05 +01:00
boot realtek: add support for ZyXEL GS1900-24E 2022-06-06 10:30:50 +02:00
devel strace: Update to version 5.16 2022-02-01 21:25:02 +01:00
firmware ipq40xx: add Aruba AP-365 specific BDF 2022-06-02 16:50:12 +02:00
kernel kernel: bump 5.10 to 5.10.119 2022-06-06 19:20:02 +02:00
libs wolfssl: enable CPU crypto instructions 2022-06-07 10:56:49 +02:00
network hostapd: Radius based VLANs on AP with PSK 2022-06-08 16:04:04 +02:00
system fstools: update to git HEAD 2022-06-02 08:01:31 +01:00
utils ucode: update to latest Git HEAD 2022-06-01 13:45:53 +02:00
Makefile build: fix opkg install step for large package selection 2021-05-12 11:13:53 +02:00