Chaudry Chaudry | 20 Aug 2012 15:12
Picon

Testing wap_supplicant over LAN

Hi,
I want to ask if it possible to test wpa_supplicant over LAN by giving the interface "-i" as eth0 instead of wlan0 as input parameter. I know about "eapol_test", but I want to use EAP-SIM peer over LAN only and "eapol_test" is combination of EAP-Peer and Radius Client. Any pointer to this will be appreciated.

BR,
A. Chaudry

_______________________________________________
HostAP mailing list
HostAP <at> lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap
Jouni Malinen | 20 Aug 2012 15:42
Picon

Re: Testing wap_supplicant over LAN

On Mon, Aug 20, 2012 at 03:12:47PM +0200, Chaudry Chaudry wrote:
> I want to ask if it possible to test wpa_supplicant over LAN by giving the
> interface "-i" as eth0 instead of wlan0 as input parameter. I know about
> "eapol_test", but I want to use EAP-SIM peer over LAN only and "eapol_test"
> is combination of EAP-Peer and Radius Client. Any pointer to this will be
> appreciated.

You can use wpa_supplicant for wired IEEE 802.1X authentication, so if
you have a suitable authenticator (likely some kind of managed switch or
build your own using hostapd), you can use that to run EAPOL/EAP
authentication over wired ethernet. Alternatively, preauth_test could be
used to do this using the RSN pre-authentication ethertype instead of
EAPOL, but the end result is more or less the same.

--

-- 
Jouni Malinen                                            PGP id EFC895FA
Chaudry Chaudry | 20 Aug 2012 15:58
Picon

Re: Testing wap_supplicant over LAN

Hi,
Thanks for the quick reply.

As from hostapd documentation, it is said that it can be used as a standalone Wireless AP.
But you have mentioned below:
"build  your own switch using hostapd".
Can it also be used as a standalone EAP- SIM Server/authenticator (sort of switch) which is working on "eth0" port? Right?
If it is so, on the wireless LAN, wpa_supplicant scans the AP by SSID. On the wired lan, how can the wpa_supplicant can point to some particular switch (actually hosted by hostapd). Does wpa_supplicant also receives any input regarding ip address of authenticator as we have for eapol_test which takes the IP address of AAA Server?

Any pointer to this?

BR,
AAMER


On Mon, Aug 20, 2012 at 3:42 PM, Jouni Malinen <j <at> w1.fi> wrote:
On Mon, Aug 20, 2012 at 03:12:47PM +0200, Chaudry Chaudry wrote:
> I want to ask if it possible to test wpa_supplicant over LAN by giving the
> interface "-i" as eth0 instead of wlan0 as input parameter. I know about
> "eapol_test", but I want to use EAP-SIM peer over LAN only and "eapol_test"
> is combination of EAP-Peer and Radius Client. Any pointer to this will be
> appreciated.

You can use wpa_supplicant for wired IEEE 802.1X authentication, so if
you have a suitable authenticator (likely some kind of managed switch or
build your own using hostapd), you can use that to run EAPOL/EAP
authentication over wired ethernet. Alternatively, preauth_test could be
used to do this using the RSN pre-authentication ethertype instead of
EAPOL, but the end result is more or less the same.

--
Jouni Malinen                                            PGP id EFC895FA
_______________________________________________
HostAP mailing list
HostAP <at> lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap

_______________________________________________
HostAP mailing list
HostAP <at> lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap
Chaudry Chaudry | 22 Aug 2012 08:50
Picon

Re: Testing wap_supplicant over LAN

Hi Jouni,
Any hint towards the wpa_supplicant and hostapd testing over LAN? It would be appreciated.

BR,
Chaudry

On Mon, Aug 20, 2012 at 3:58 PM, Chaudry Chaudry <novalystitag <at> gmail.com> wrote:
Hi,
Thanks for the quick reply.

As from hostapd documentation, it is said that it can be used as a standalone Wireless AP.
But you have mentioned below:
"build  your own switch using hostapd".
Can it also be used as a standalone EAP- SIM Server/authenticator (sort of switch) which is working on "eth0" port? Right?
If it is so, on the wireless LAN, wpa_supplicant scans the AP by SSID. On the wired lan, how can the wpa_supplicant can point to some particular switch (actually hosted by hostapd). Does wpa_supplicant also receives any input regarding ip address of authenticator as we have for eapol_test which takes the IP address of AAA Server?

Any pointer to this?

BR,
AAMER



On Mon, Aug 20, 2012 at 3:42 PM, Jouni Malinen <j <at> w1.fi> wrote:
On Mon, Aug 20, 2012 at 03:12:47PM +0200, Chaudry Chaudry wrote:
> I want to ask if it possible to test wpa_supplicant over LAN by giving the
> interface "-i" as eth0 instead of wlan0 as input parameter. I know about
> "eapol_test", but I want to use EAP-SIM peer over LAN only and "eapol_test"
> is combination of EAP-Peer and Radius Client. Any pointer to this will be
> appreciated.

You can use wpa_supplicant for wired IEEE 802.1X authentication, so if
you have a suitable authenticator (likely some kind of managed switch or
build your own using hostapd), you can use that to run EAPOL/EAP
authentication over wired ethernet. Alternatively, preauth_test could be
used to do this using the RSN pre-authentication ethertype instead of
EAPOL, but the end result is more or less the same.

--
Jouni Malinen                                            PGP id EFC895FA
_______________________________________________
HostAP mailing list
HostAP <at> lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap


_______________________________________________
HostAP mailing list
HostAP <at> lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap

Gmane