2️⃣ Wi-Fi with 802.1X

Step 1 - hostapd

While you are still in 'Classic mode'

Make the following changes to hostapd.conf

hostapd.conf holds the configuration for our software defined AP

Open the file:

sudo nano /etc/wlanpi-server/conf/hostapd.conf

Should look like this on entry:

# WLAN SSID
ssid=wlanpi_server

# WPA-PSK
wpa_passphrase=wifipros

# Mode options: a=5GHz / g=2.4GHz
hw_mode=g

# Set 2.4GHz Channel - 1,6,11
# Set 5GHz Channel - 36,40,44,48,149,153,157,161,165
channel=6

# Set Country Code (Use your own country code here)
country_code=US
ieee80211d=1

# Set Interface and Driver to user
interface=wlan0
driver=nl80211

# IEEE 802.11n SETTINGS
ieee80211n=1
#ht_capab=[HT40+][SHORT-GI-20][SHORT-GI-40][DSSS_CCK-40]

# IEEE 802.11ac SETTINGS
ieee80211ac=1
#vht_oper_chwidth=1
vht_capab=[SU-BEAMFORMEE-1][HTC-VHT-1][VHT-LINK-ADAPT2][MAX-AMSDU-7935][GF]
#vht_oper_centr_freq_seg0_idx=42

# Set Security Parameters (WPA2-Personal here)
wpa=2
wpa_key_mgmt=WPA-PSK
rsn_pairwise=CCMP

# Enable WMM :)
wmm_enabled=1
uapsd_advertisement_enabled=1

# Enable BSS Load which advertises the number of connected clients      
bss_load_update_period=50

# Channel utilization does not seem to be supported by Intel AX210
# chan_util_avg_period=600

hostapd Edits

1. Comment out wpa_passphrase=wifipros

   #wpa_passphrase=wifipros
   ...

2. Change wpa_key_mgmt= fromWPA-PSK to WPA-EAP

   ...
   # Set Security Parameters (WPA2-Personal here)
   wpa=2
   wpa_key_mgmt=WPA-EAP
   rsn_pairwise=CCMP
   ...

hostapd Additions

1. Add this to the bottom of the file:\

   #FreeRADIUS Server Config
   auth_server_addr=127.0.0.1
   auth_server_port=1812
   auth_server_shared_secret=testing123
   
   #EAP Config 8021X
   own_ip_addr=127.0.0.1
   ieee8021x=1

Server mode

Now we make the switch over to 'server mode'

1. Via FPMS Modes > Server Mode

2. WLAN Pi reboots into server mode

   1. Default DHCP server is already up and running

   2. Soft AP is configured by hostapd.conf file

   3. SSID should be up and broadcasting

3. What happens when you attempt to join this SSID?

   1. QR Code?

   2. Manually select your WLAN Pi SSID

4. Attempt authentication with

   1. lameuser

   2. user1

   3. user2

5. Once successfully associated, do you get an IP address? Confirm this!