[PATCH 0/7] Support for multiple RADIUS Tunnel-* attributes

Tom Barthe jeltz+hostap at auro.re
Mon Oct 11 04:24:30 PDT 2021


This patch adds support for multiple candidate passphrases and VLAN IDs
in RADIUS Access-Accept messages, like in the following example:

	Tunnel-Type:1 = VLAN
	Tunnel-Medium-Type:1 = IEEE-802
	Tunnel-Password:1 = "passphrase1"
	Tunnel-Private-Group-Id:1 = "101"
	Tunnel-Type:2 = VLAN
	Tunnel-Medium-Type:2 = IEEE-802
	Tunnel-Password:2 = "passphrase2"
	Tunnel-Private-Group-Id:2 = "102"
	Tunnel-Type:3 = VLAN

It can be used to replicate a useful feature found in some commercial
products (usually called "Dynamic PSK", "Identity PSK" or "Private
PSK"), in which the access point picks the VLAN ID depending on the
passphrase.

Please note that this is my first attempt at contributing to hostap, so
the code quality is probably way below the expectations of the projet.

Tom Barthe (7):
  Support for RADIUS attributes filtering by tag
  Replace some vlan_ids with vlan_descriptions
  Add a per PSK vlan_description
  Fix selection of Tunnel* attributes by tag
  Add default_radius_vlan in sta_info
  Retrieve and use a per-PSK vlan_description
  Remove useless variable

 src/ap/ap_config.c                            | 23 ++++++++--
 src/ap/ap_config.h                            |  5 +-
 src/ap/ieee802_11.c                           | 16 +------
 src/ap/ieee802_11_auth.c                      | 44 +++++++++++++++---
 src/ap/ieee802_1x.c                           |  2 +-
 src/ap/sta_info.h                             |  3 +-
 src/ap/wpa_auth.c                             | 29 +++++++-----
 src/ap/wpa_auth.h                             |  5 +-
 src/ap/wpa_auth_glue.c                        | 46 +++++++++++--------
 src/radius/radius.c                           | 42 ++++++++++-------
 src/radius/radius.h                           |  5 +-
 tests/fuzzing/eapol-key-auth/eapol-key-auth.c |  6 +--
 12 files changed, 140 insertions(+), 86 deletions(-)

-- 
2.30.2




More information about the Hostap mailing list