Template:HOSTAPD ACCESS POINT: Difference between revisions
From Variscite Wiki
No edit summary |
|||
| (9 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
< | <includeonly> | ||
== Configuring WiFi | == Configuring WiFi access point with hostapd == | ||
hostapd is a versatile tool for setting up a WiFi | hostapd is a versatile tool for setting up a WiFi access point and generally offers more options and flexibility compared to NetworkManager. For instance, hostapd enables the creation of a WiFi 6 access point, which is not currently possible with NetworkManager. | ||
While NetworkManager facilitates complete automation of WiFi, DHCP server, and NAT configuration, hostapd provides more granular control over these settings, making it a preferred choice for advanced configurations. | While NetworkManager facilitates complete automation of WiFi, DHCP server, and NAT configuration, hostapd provides more granular control over these settings, making it a preferred choice for advanced configurations. | ||
| Line 8: | Line 8: | ||
dnsmasq is a suitable option for providing DHCP and DNS services alongside hostapd. It's a lightweight DNS forwarder and DHCP server that can be easily integrated with hostapd. | dnsmasq is a suitable option for providing DHCP and DNS services alongside hostapd. It's a lightweight DNS forwarder and DHCP server that can be easily integrated with hostapd. | ||
=== | === Make sure interface (uap0) is not managed by NetworkManager === | ||
Before starting with hostapd, it's important that NetworkManager is not managing the access point interface (uap0). If NetworkManager is running, make sure uap0 is unmanaged: | Before starting with hostapd, it's important that NetworkManager is not managing the access point interface (uap0). If NetworkManager is running, make sure uap0 is unmanaged: | ||
| Line 16: | Line 16: | ||
unmanaged-devices=interface-name:uap0; | unmanaged-devices=interface-name:uap0; | ||
=== | === Create /etc/hostapd.conf === | ||
The next step is to create /etc/hostapd.conf. The following table shows how to configure 802.11bgn, 802.11ac, and 802.11ax access points: | The next step is to create /etc/hostapd.conf. The following table shows how to configure 802.11bgn, 802.11ac, and 802.11ax access points: | ||
| Line 31: | Line 31: | ||
|} | |} | ||
Note: When copying the text above, your file may contain zero width spaces at the end of each line (appearing as `^^k` in nano or hex `e2 80 8b` in hexdump). This will cause hostapd to fail. You can fix it by running: | |||
# sed 's/\xe2\x80\x8b//g' /etc/hostapd.conf > /etc/hostapd_cleaned.conf && mv /etc/hostapd_cleaned.conf /etc/hostapd.conf | |||
=== Configure /etc/dnsmasq.conf === | |||
<pre> | <pre> | ||
| Line 39: | Line 43: | ||
no-dhcp-interface=wlan0 # Disable DHCP on wlan0 | no-dhcp-interface=wlan0 # Disable DHCP on wlan0 | ||
no-dhcp-interface=wfd0 # Disable DHCP on wfd0 | no-dhcp-interface=wfd0 # Disable DHCP on wfd0 | ||
# Configure ipv4 address range | |||
dhcp-range=192.168.10.10,192.168.10.100,12h # Set the DHCP range and lease time | dhcp-range=192.168.10.10,192.168.10.100,12h # Set the DHCP range and lease time | ||
# Configure ipv6 address range | |||
dhcp-range=fd00:1234::10,fd00:1234::100,12h # Set the DHCPv6 range and lease time | |||
# Enable Router Advertisement (RA) to inform clients of the IPv6 prefix | |||
enable-ra | |||
</pre> | </pre> | ||
Then, start hostapd and dnsmasq: | Then, assign uap0 an ip and start hostapd and dnsmasq: | ||
# ip addr add 192.168.10.1/24 dev uap0 | |||
# ip -6 addr add fd00:1234::1/64 dev uap0 | |||
# systemctl restart hostapd | # systemctl restart hostapd | ||
# systemctl restart dnsmasq | # systemctl restart dnsmasq | ||
Optionally | At this point, devices can connect and dhcp an ip address using the access point on uap0. | ||
=== Optionally configure NAT between uap0 and eth0: === | |||
<pre> | <pre> | ||
| Line 53: | Line 69: | ||
# iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT | # iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT | ||
# iptables -A FORWARD -i uap0 -o eth0 -j ACCEPT | # iptables -A FORWARD -i uap0 -o eth0 -j ACCEPT | ||
</pre> | </pre> | ||
</ | and allow ip forwarding by appending /etc/sysctl.conf: | ||
# /etc/sysctl.conf | |||
net.ipv4.ip_forward=1 | |||
net.ipv6.conf.all.forwarding=1 | |||
Now, devices connecting to the access point on uap0 will have network access through eth0. | |||
</includeonly> | |||