On Tue, Oct 12, 2021 at 05:34:45PM +0200, Marco Gaiarin wrote: > For my home i need to setup two AP, using LEDE/OpenWRT, but i want to use > different WPA_PSK for different MAC address, but possibly using one central > configuration repository. > Clearly, i can 'rsync' the 'wpa_psk' file between the AP, but it is really > and hack. > > I've read of 'wpa_psk_radius', that seems the thing i need, but i'm not able > to find and example on how configure RADIUS server. That depends on which RADIUS server you are thinking of using here. The passphrase is provided in a Tunnel-Password attribute (as defined in RFC 2868). The only example within hostap.git is in an automated test case for this functionality where a python script using pyrad implements a minimal RADIUS authentication server for this: build_tunnel_password() function at https://w1.fi/cgit/hostap/tree/tests/hwsim/test_radius.py#n1151 but that is unlikely to be of much help or a more likely deployment options with a complete RADIUS server implementation. I'd recommend searching for Tunnel-Password in the documentation of whichever RADIUS server you are using. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
