Linux/WPA の履歴(No.10)

Wi-Fi Protected Access

#navi(contents-page-name): No such page: Linux

CONTENTS

はじめに
WPA対応機器
WPA Personal
- WPA Supplicant
WPA Enterprise
- FreeRADIUS

REFERENCES

はじめに†

Wireless Projecter Adaptorとは関係ない。
Windows Product Activation氏ね。

wpa_supplicantで動くようにks2101のdriverをつくる?らしい…

WPA EnterpriseはExtensible Authentication Protocol (EAP) を使う。RADIUS鯖つくるんですか？
WPA HomeはPre-Shared Key (PSK) + Temporal Key Integrity Protocol (TKIP)
Advanced Encryption Standard (AES) も実験するんですか？
なんか仕様書には、以下の設定ができるように書いてあるんだけど、実験するにはどういう環境が必要なのかいまいち調べてないから、わからない。

WPA関連MIB

MIB	description
DOT11_RSN_ENABLED	WPA enable or disable
DOT11_RSN_CONFIG_MULTICAST_CIPHER	WEP40,TKIP,CCMP(AES),WEP104
DOT11_RSN_CONFIG_UNICAST_CIPHER	WEP40,TKIP,CCMP(AES),WEP104
DOT11_RSN_CONFIG_AUTH_SUITE	WPA(802.1x),WPA(PreSharedKey),WPA-none(11Adhoc)
DOT11_PMK_TSC
DOT11_GMK1_TSC
DOT11_GMK2_TSC

AuthenticationSuite Set? これは、WindowsXPのNDIS5.1の場合以下の設定で対応するってことらしい。(OID_802_11_AUTHENTICATION_MODE,OID_802_11_WEP_STATUS) wpa_supplicantはどーなのかな？

ENABLED	UNICAST_CIPHER	MULTICAST_CIPHER	AUTH_SUITE
WPA enable	TKIP	TKIP	WPA(PreSharedKey)
WPA enable	TKIP	WEP40	WPA(PreSharedKey)
WPA enable	CCMP(AES)	CCMP(AES)	WPA(PreSharedKey)
WPA enable	CCMP(AES)	TKIP	WPA(PreSharedKey)
WPA enable	CCMP(AES)	WEP40	WPA(PreSharedKey)
WPA enable	TKIP	TKIP	WPA(802.1x)
WPA enable	TKIP	WEP40	WPA(802.1x)
WPA enable	CCMP(AES)	CCMP(AES)	WPA(802.1x)
WPA enable	CCMP(AES)	TKIP	WPA(802.1x)
WPA enable	CCMP(AES)	WEP40	WPA(802.1x)

↑

WPA対応機器†

MELCO高いけど買う？
- (金子)買わないと実験できないんでない?買いましょう。
- /h/ Host APを設定すれば実験できなくはないですが，Host AP自体の正当性を検証しないといけないので厄介。買うのが吉。

I-O DATA WN-APG/BBR
I-O DATA WN-AG/CB2
SSID ioAirportAp13

WPA-PSK hidemaru4000en

↑

WPA Personal†

APを先に設定
- TKIPを使うのか，AES-COMを使うのか
- Pre-Shared Key
WLANカードをAP設定にあわせる。
11a 34, 38, 42, 46

↑

WPA Supplicant†

FreeBSD ｶﾞ━━ΣΣ(ﾟДﾟ;)━━ﾝ

# portinstall security/wpa_supplicant/
[Updating the pkgdb <format:bdb1_btree> in /var/db/pkg ... - 204 packages found (-0 +0)  done]
** Port marked as IGNORE: security/wpa_supplicant:
        is not supported on FreeBSD < 6.0

Debian

# apt-get install wpasupplicant

# cat /etc/default/wpasupplicant 
ENABLED=1
OPTIONS="-Dmadwifi -iath0 -c/etc/wpa_supplicant.conf -dd -w"

# cat /etc/wpa_supplicant.conf 
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
ap_scan=1
network={
   ssid="ioAirportAp13"
   psk="hidemaru4000en"
   priority=5
}

# /etc/init.d/wpasupplicant start
Starting wpasupplicant: Initializing interface 'ath0' conf '/etc/wpa_supplicant.conf' driver 'madwifi'
Configuration file '/etc/wpa_supplicant.conf' -> '/etc/wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant.conf'
ctrl_interface='/var/run/wpa_supplicant'
ctrl_interface_group=0
ap_scan=1
Line: 4 - start of a new network block
ssid - hexdump_ascii(len=13):
     69 6f 41 69 72 70 6f 72 74 41 70 31 33            ioAirportAp13   
PSK (ASCII passphrase) - hexdump_ascii(len=14): [REMOVED]
priority=5 (0x5)
PSK (from passphrase) - hexdump(len=32): [REMOVED]
Priority group 5
   id=0 ssid='ioAirportAp13'
Daemonize..
done.

# iwconfig ath0
ath0      IEEE 802.11g  ESSID:"ioAirportAp13"  
          Mode:Managed  Frequency:2.472 GHz  Access Point: 00:A0:B0:6A:09:00   
          Bit Rate:36 Mb/s   Tx-Power:50 dBm   Sensitivity=0/3  
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:41E0-9CF8-AF33-EDF7-00DD-4CC4-3C9D-2277   Security mode:restricted
          Power Management:off
          Link Quality=46/94  Signal level=-49 dBm  Noise level=-95 dBm
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

# dhclient ath0
Internet Software Consortium DHCP Client 2.0pl5
Copyright 1995, 1996, 1997, 1998, 1999 The Internet Software Consortium.
All rights reserved.

Please contribute if you find this software useful.
For info, please visit http://www.isc.org/dhcp-contrib.html

sit0: unknown hardware address type 776
eth1: unknown hardware address type 24
sit0: unknown hardware address type 776
eth1: unknown hardware address type 24
Listening on LPF/ath0/00:a0:b0:4c:5b:b8
Sending on   LPF/ath0/00:a0:b0:4c:5b:b8
Sending on   Socket/fallback/fallback-net
DHCPDISCOVER on ath0 to 255.255.255.255 port 67 interval 7
DHCPOFFER from 192.168.104.1
DHCPREQUEST on ath0 to 255.255.255.255 port 67
DHCPACK from 192.168.104.1
bound to 192.168.104.3 -- renewal in 43200 seconds.

# ifconfig ath0
ath0      Link encap:Ethernet  HWaddr 00:A0:B0:4C:5B:B8  
          inet addr:192.168.104.3  Bcast:192.168.104.255  Mask:255.255.255.0
          inet6 addr: fe80::2a0:b0ff:fe4c:5bb8/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:319 errors:24 dropped:0 overruns:0 frame:24
          TX packets:40 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:199 
          RX bytes:98324 (96.0 KiB)  TX bytes:5139 (5.0 KiB)
          Interrupt:10 Memory:dfc3f000-dfc4f000

# ping 192.168.104.1
PING 192.168.104.1 (192.168.104.1) 56(84) bytes of data.
64 bytes from 192.168.104.1: icmp_seq=1 ttl=127 time=0.627 ms

↑

WPA Enterprise†

↑

FreeRADIUS†

FreeBSD

# portinstall net/freeradius

Debian

# apt-get install freeradius

SSID	ioAirportAp13
WPA-PSK	hidemaru4000en