2018-03-21 07:15:31 +01:00
|
|
|
hw_mode=g
|
|
|
|
|
channel=2
|
|
|
|
|
ssid=TestFT
|
|
|
|
|
utf8_ssid=1
|
|
|
|
|
ctrl_interface=/var/run/hostapd
|
|
|
|
|
r1_key_holder=000000000002
|
|
|
|
|
nas_identifier=dummy2
|
|
|
|
|
|
|
|
|
|
wpa=2
|
|
|
|
|
# Can support WPA-EAP and FT-EAP (space separated list) at the same
|
|
|
|
|
# time but we want to force FT
|
|
|
|
|
wpa_key_mgmt=FT-EAP
|
|
|
|
|
wpa_pairwise=CCMP
|
|
|
|
|
ieee8021x=1
|
|
|
|
|
eap_server=1
|
2021-08-17 18:45:00 +02:00
|
|
|
eap_user_file=/tmp/secrets/eap-user.text
|
2018-03-21 07:15:31 +01:00
|
|
|
ca_cert=/tmp/certs/cert-ca.pem
|
|
|
|
|
server_cert=/tmp/certs/cert-server.pem
|
|
|
|
|
private_key=/tmp/certs/cert-server-key.pem
|
|
|
|
|
wpa_ptk_rekey=30
|
|
|
|
|
wpa_group_rekey=80
|
|
|
|
|
ieee80211w=1
|
|
|
|
|
rsn_preauth=1
|
|
|
|
|
disable_pmksa_caching=0
|
|
|
|
|
# Allow PMK cache to be shared opportunistically among configured interfaces
|
|
|
|
|
# and BSSes (i.e., all configurations within a single hostapd process).
|
|
|
|
|
okc=1
|
|
|
|
|
mobility_domain=1234
|
|
|
|
|
reassociation_deadline=60000
|
|
|
|
|
r0kh=12:00:00:00:00:01 dummy1 000102030405060708090a0b0c0d0e0f
|
|
|
|
|
r0kh=12:00:00:00:00:02 dummy2 000102030405060708090a0b0c0d0e0f
|
|
|
|
|
r1kh=12:00:00:00:00:01 00:00:00:00:00:01 000102030405060708090a0b0c0d0e0f
|
|
|
|
|
r1kh=12:00:00:00:00:02 00:00:00:00:00:02 000102030405060708090a0b0c0d0e0f
|
|
|
|
|
# Push mode only needed for 8021x, not PSK mode since msk already known
|
|
|
|
|
pmk_r1_push=1
|
2019-05-09 19:14:14 +02:00
|
|
|
ft_over_ds=0
|
2018-03-21 07:15:31 +01:00
|
|
|
ap_table_expiration_time=36000
|
|
|
|
|
ap_table_max_size=10
|
|
|
|
|
rrm_neighbor_report=1
|
