iwd: comment out mostly everything

This commit is contained in:
Aminda Suomalainen 2025-08-04 09:24:45 +03:00
parent 67d09fc12b
commit 728e9278b6
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
4 changed files with 13 additions and 12 deletions

View File

@ -14,6 +14,7 @@ use_default_interface=true
# Build-in network configuration including DHCP client (and server when
# tethering), true if not using systemd-networkd!
#EnableNetworkConfiguration=true
#EnableNetworkConfiguration=false
# NOTE! Disable this in case of trouble connecting to network entirely!
@ -22,17 +23,17 @@ use_default_interface=true
# Generate a different spoofed MAC address for every SSID. Some networks
# configured in /var/lib/iwd/ have a new MAC address for every connection.
AddressRandomization=network
#AddressRandomization=network
# Randomize only 3 last octets of MAC. Reveals the manufacturer, but doesn't
# set the locally administered bit. However the range is 00:00:01 to 00:00:FE
# (254 possible addresses!)
# Helsinki City WLAN (and variations) doesn't seem to like "full" (default)
AddressRandomizationRange=nic
#AddressRandomizationRange=nic
# Always require management frame protection. May break things especially with
# legacy networks and hardware! Switch to 1 (default) for only when supported
# by both sides (downgrade attack possible?).
ManagementFrameProtection=2
#ManagementFrameProtection=2
# It must be 1 for Lumina (ThinkPad T470) and MikroTik Chateau 5G to accept
# each other, otherwise fallback to open guest network happens.
#ManagementFrameProtection=1
@ -46,7 +47,7 @@ EnableIPv6=true
# systemd-resolved. NOTE! Must be used in conjunction with
# EnableNetworkConfiguration!
#NameResolvingService=systemd
#NameResolvingService=none
NameResolvingService=none
# Default 300, lower preferred by system. Useful when WiFi is known faster
# than ethernet like having 10 Mbps switch from time before the building had
# anything faster than DSL...

View File

@ -1,9 +1,9 @@
[Settings]
#[Settings]
#AlwaysRandomizeAddress=true
# Disables connections without Management Frame Protection (and TKIP)
TransitionDisable=true
#TransitionDisable=true
# Requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=open
#DisabledTransitionModes=open
[IPv4]
DNS=127.0.0.1 127.0.0.53

View File

@ -1,10 +1,10 @@
# This SSID is "private-cafe-sample", it comes from the filename
[Settings]
#[Settings]
#AlwaysRandomizeAddress=true
# Disables TKIP and connections without Management Frame Protection
TransitionDisable=true
#TransitionDisable=true
# Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=personal,enterprise,open
#DisabledTransitionModes=personal,enterprise,open
[Security]
Passphrase=MySuperSecretPassphraseThatDoesNotReadHere

View File

@ -4,9 +4,9 @@ AutoConnect=true
# MAC address override. Takes priority over AlwaysRandomizeAddress
#AddressOverride=
# Disables TKIP and connections without Management Frame Protection
TransitionDisable=true
#TransitionDisable=true
# Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=personal,enterprise,open
#DisabledTransitionModes=personal,enterprise,open
[Security]
Passphrase=MySuperSecretPassphraseThatDoesNotReadHere