The PAE group address is a special multicast MAC address that wired supplicants will listen for when they want to start authentication with an 802.1X authenticator (hostapd). When hostapd detects a new wired connection, it will send an EAP-REQUEST-IDENTITY frame to this special MAC address when use_pae_group_addr=1. For a wireless supplicant, hostapd would not use this special MAC address, because it uses the STA MAC address from the 802.11 association request. If you want to allow multiple wired supplicants on the same Ethernet port, then I think you need to define a list of wired supplicant MAC addresses in an Access Control List (I have not tried this). On Tue, Apr 21, 2020 at 10:55 AM <erwin@xxxxxxxxxx> wrote: > > Hi, > > What does this mean: > > ...Means that port is blocked as long one station uses this? > use_pae_group_addr=1 > > > Means it, that port is blocked as long as a station uses this? Is this > only during authentication the case. Or is it blocked for the hole time > of authenticated status? > > What should I use if I want to authenticate stations via hostapd against > a freeradius server on wired way? > > Thanks, > > Erwin > > > > > _______________________________________________ > Hostap mailing list > Hostap@xxxxxxxxxxxxxxxxxxx > http://lists.infradead.org/mailman/listinfo/hostap _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
