From owner-freebsd-current@FreeBSD.ORG  Tue Mar  3 17:40:57 2009
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3DF111065883
	for <freebsd-current@freebsd.org>; Tue,  3 Mar 2009 17:40:57 +0000 (UTC)
	(envelope-from sam@freebsd.org)
Received: from ebb.errno.com (ebb.errno.com [69.12.149.25])
	by mx1.freebsd.org (Postfix) with ESMTP id 9E3E88FC17
	for <freebsd-current@freebsd.org>; Tue,  3 Mar 2009 17:40:54 +0000 (UTC)
	(envelope-from sam@freebsd.org)
Received: from trouble.errno.com (trouble.errno.com [10.0.0.248])
	(authenticated bits=0)
	by ebb.errno.com (8.13.6/8.12.6) with ESMTP id n23HerkB079048
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Tue, 3 Mar 2009 09:40:54 -0800 (PST) (envelope-from sam@freebsd.org)
Message-ID: <49AD6BA5.8080409@freebsd.org>
Date: Tue, 03 Mar 2009 09:40:53 -0800
From: Sam Leffler <sam@freebsd.org>
Organization: FreeBSD Project
User-Agent: Thunderbird 2.0.0.18 (X11/20081209)
MIME-Version: 1.0
To: Randy Bush <randy@psg.com>
References: <m27i37b3m8.wl%randy@psg.com>
In-Reply-To: <m27i37b3m8.wl%randy@psg.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-DCC-x.dcc-servers-Metrics: ebb.errno.com; whitelist
Cc: freebsd-current@freebsd.org
Subject: Re: wpa2 hostap setup
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 17:40:59 -0000

Randy Bush wrote:
> i386 (soekris) 8-current
>
> i currently have
>
> wlans_ath0="wlan0 wlan1"
> create_args_wlan0="wlanmode hostap channel 11 ssid rgnet-aden wep wepkey itsasecretsilly weptxkey 1 media autoselect mode 11g up"
> create_args_wlan1="wlanmode hostap ssid rg-free up"
> cloned_interfaces=bridge0
> ifconfig_bridge0="192.168.0.1 addm vr1 addm vr2 addm vr3 addm wlan0 addm wlan1 up"
> ifconfig_vr1=up
> ifconfig_vr2=up
> ifconfig_vr3=up
>
> i want to go to a more reasonable over the air crypt sceheme, e.g. wpa2.
> clients are mac, airport express, and winxp.  is there a well known
> recipe?
>
> i think i need to run hostapd with a hostapd.conf something like
>
>     interface=wlan0
>     ctrl_interface=/var/run/hostapd
>     ctrl_interface_group=0
>     ssid=rgnet-aden
>     country_code=JP
>     hw_mode=g
>     channel=42
>     auth_algs=3
>     wpa=1
>     wpa_passphrase=itsasecretsilly
>     wpa_key_mgmt=WPA-PSK
>
> i could not really understand the dual bssid stuff and many of the
> options.  and when i get that sorted, what do i do to my /etc/rc.conf?
>   
tools/tools/net80211/scripts has working scripts for many 
configurations.  Conversion to rc.conf variables may or may not always 
be possible (e.g. dynamic wds probably requires a setup.if_foo script 
for the moment).

BTW a bunch of the hostapd.conf stuff you show above is not used.  On 
freebsd hostapd is _only_ an authenticator.  Don't be fooled by all the 
linux-specific stuff you read on the web.

    Sam