Changes between Version 30 and Version 31 of expansion/gw16159

Timestamp:

09/03/2025 07:48:08 PM (3 days ago)

Author:

Blake Stewart

Comment:

WPA3 configurations + notes on mesh

expansion/gw16159

@@ -352 +352 @@
 [=#kernel-patches]
 === Kernel Patches
-There is a small set of kernel patches from !MorseMicro which may improve the experience for 802.11ah for specific use cases. Gateworks has found these patches to be unnecessary for most use cases including AP, STA, and 802.11S MESH. These patches from !MorseMicro exist for several LTS kernels at https://github.com/MorseMicro/linux
+There is a small set of kernel patches from !MorseMicro which may improve the experience for 802.11ah for specific use cases. Gateworks has found these patches to be unnecessary for most use cases including AP, STA, and 802.11s MESH. These patches from !MorseMicro exist for several LTS kernels at https://github.com/MorseMicro/linux
 
 Here is an evaluation of the various patches for a 6.6 kernel:
@@ -461 +461 @@
  * [https://github.com/MorseMicro/hostap/blob/v1.14/hostapd_s1g_configuration.md hostapd_s1g_configuration]
 
-Example configurations:
- * infrastructure mode using WPA2:
+
+Below are examples for configuring WPA2/WPA3 AP + STA, along with WPA3 Mesh.
+ * Infrastructure mode using WPA2:
   - AP:
 {{{#!bash
-cat << EOF > hostapd_s1g.conf
+cat << EOF > hostapd_s1g_wpa2.conf
 interface=wlan0
 logger_syslog=-1
@@ -530 +531 @@
 rsn_pairwise=CCMP
 EOF
-hostapd_s1g ./hostapd_s1g.conf -B
+hostapd_s1g ./hostapd_s1g_wpa2.conf -B
 ifconfig wlan0 192.168.1.1
 iperf3 -s
@@ -536 +537 @@
   * STA:
 {{{#!bash
+#wpa_passphrase generates WPA2 wpa_supplicant configuration
 wpa_passphrase_s1g HaLow-WPA2 strongpassword123 > wpa_supplicant_s1g.conf
-wpa_supplicant_s1g -iwlan0 -c ./wpa_supplicant_s1g.conf &
+#ensure wlan0 interface is up
+ifconfig wlan0 up
+#Start wpa_supplicant_s1g, send to background (replace & with -d for debug)
+wpa_supplicant_s1g -i wlan0 -c ./wpa_supplicant_s1g.conf &
+#assign static IP; DHCP is not part of this example
 ifconfig wlan0 192.168.1.128
 iperf3 -c 192.168.1.1
 }}}
- * 802.11s MESH using WPA3:
+
+ * Infrastructure mode using WPA3:
+  * AP:
+{{{#!bash
+cat << EOF > hostapd_s1g_wpa3.conf
+interface=wlan0
+logger_syslog=-1
+logger_syslog_level=2
+logger_stdout=-1
+logger_stdout_level=2
+ctrl_interface=/var/run/hostapd
+ctrl_interface_group=0
+ssid=HaLow-WPA3
+country_code=US
+hw_mode=a
+beacon_int=100
+dtim_period=2
+max_num_sta=255
+rts_threshold=-1
+fragm_threshold=-1
+macaddr_acl=0
+auth_algs=3
+ignore_broadcast_ssid=0
+wmm_enabled=1
+wmm_ac_bk_cwmin=4
+wmm_ac_bk_cwmax=10
+wmm_ac_bk_aifs=7
+wmm_ac_bk_txop_limit=0
+wmm_ac_bk_acm=0
+wmm_ac_be_aifs=3
+wmm_ac_be_cwmin=4
+wmm_ac_be_cwmax=10
+wmm_ac_be_txop_limit=0
+wmm_ac_be_acm=0
+wmm_ac_vi_aifs=2
+wmm_ac_vi_cwmin=3
+wmm_ac_vi_cwmax=4
+wmm_ac_vi_txop_limit=94
+wmm_ac_vi_acm=0
+wmm_ac_vo_aifs=2
+wmm_ac_vo_cwmin=2
+wmm_ac_vo_cwmax=3
+wmm_ac_vo_txop_limit=47
+wmm_ac_vo_acm=0
+ieee80211ah=1
+s1g_prim_chwidth=1
+s1g_prim_1mhz_chan_index=0
+s1g_capab=[SHORT-GI-ALL]
+eapol_key_index_workaround=0
+own_ip_addr=127.0.0.1
+channel=28
+op_class=71
+#WPA3 / SAE configuration
+wpa=2
+wpa_key_mgmt=SAE
+ieee80211w=2
+sae_pwe=2
+rsn_pairwise=CCMP
+sae_password=HalowDemo123
+EOF
+#Start the AP with configuration in background.
+#For quick (foreground) debugging, remove the -B flag
+hostapd_s1g ./hostapd_s1g_wpa3.conf -B
+#Configure static IP
+ifconfig wlan0 192.168.1.1
+#Start iperf3 server for connection testing
+iperf3 -s
+}}}
+  * STA:
+   {{{#!bash
+#wpa_passphrase_s1g is only to create WPA2 configurations; create conf manually
+cat << EOF > wpa_supplicant_s1g_wpa3.conf
+update_config=1
+
+pmf=2
+sae_pwe=1
+network={
+        ssid="HaLow-WPA3"
+        key_mgmt=SAE
+        pairwise=CCMP
+        psk="strongpassword123"
+}
+EOF
+
+#Ensure interface is up
+ifconfig wlan0 up
+#Start wpa_supplicant_s1g, send to background (replace & with -d for debug)
+wpa_supplicant_s1g -i wlan0 -c ./wpa_supplicant_s1g_wpa3.conf &
+#Configure static IP, as dhcp is not present in example.
+ifconfig wlan0 192.168.1.128
+iperf3 -c 192.168.1.1
+}}}
+
+
+ * 802.11s Mesh using WPA3:
 {{{#!bash
 cat << EOF > wpa_supplicant_s1g.conf
@@ -551 +651 @@
 mesh_fwding=1
 network={
-        ssid="HaLow-WPA3"
+        ssid="HaLow-WPA3-Mesh"
         key_mgmt=SAE
         mode=5
@@ -567 +667 @@
 }
 EOF
+ifconfig wlan0 up
 wpa_supplicant_s1g -iwlan0 -c wpa_supplicant_s1g.conf &
 }}}
+
+   * Note: wpa_supplicant_s1g automatically configures the interface type from 'managed' to 'mesh point' when configured for mesh. It is cleaner practice and recommended for production systems, to setup the interface as a mesh point explicitly. 
+{{{#!bash
+#optional: delete wlan0 interface
+iw dev wlan0 del
+iw phy phy0 interface add mesh0 type mp
+
+#morse_cli sanity check
+#morse_cli requires interface to talk to the driver; ensure interface is up 
+ifconfig mesh0 up
+#morse_cli defaults to wlan0, so to use it we need to manually state -i mesh0
+morse_cli -i mesh0 version
+}}}
+
 
 More information on mesh and 802.11s can be found on our [https://trac.gateworks.com/wiki/wireless/wifi/mesh mesh networks] wiki page.