📄 hostapd.conf
字号:
##### hostapd configuration file ############################################### Empty lines and lines starting with # are ignored# AP netdevice name (without 'ap' postfix, i.e., wlan0 uses wlan0ap for# management frames); ath0 for madwifiinterface=wlan0# In case of madwifi and nl80211 driver interfaces, an additional configuration# parameter, bridge, must be used to notify hostapd if the interface is# included in a bridge. This parameter is not used with Host AP driver.#bridge=br0# Driver interface type (hostap/wired/madwifi/prism54/test/none/nl80211/bsd);# default: hostap). nl80211 is used with all Linux mac80211 drivers.# Use driver=none if building hostapd as a standalone RADIUS server that does# not control any wireless/wired driver.# driver=hostap# hostapd event logger configuration## Two output method: syslog and stdout (only usable if not forking to# background).## Module bitfield (ORed bitfield of modules that will be logged; -1 = all# modules):# bit 0 (1) = IEEE 802.11# bit 1 (2) = IEEE 802.1X# bit 2 (4) = RADIUS# bit 3 (8) = WPA# bit 4 (16) = driver interface# bit 5 (32) = IAPP# bit 6 (64) = MLME## Levels (minimum value for logged events):# 0 = verbose debugging# 1 = debugging# 2 = informational messages# 3 = notification# 4 = warning#logger_syslog=-1logger_syslog_level=2logger_stdout=-1logger_stdout_level=2# Dump file for state information (on SIGUSR1)dump_file=/tmp/hostapd.dump# Interface for separate control program. If this is specified, hostapd# will create this directory and a UNIX domain socket for listening to requests# from external programs (CLI/GUI, etc.) for status information and# configuration. The socket file will be named based on the interface name, so# multiple hostapd processes/interfaces can be run at the same time if more# than one interface is used.# /var/run/hostapd is the recommended directory for sockets and by default,# hostapd_cli will use it when trying to connect with hostapd.ctrl_interface=/var/run/hostapd# Access control for the control interface can be configured by setting the# directory to allow only members of a group to use sockets. This way, it is# possible to run hostapd as root (since it needs to change network# configuration and open raw sockets) and still allow GUI/CLI components to be# run as non-root users. However, since the control interface can be used to# change the network configuration, this access needs to be protected in many# cases. By default, hostapd is configured to use gid 0 (root). If you# want to allow non-root users to use the contron interface, add a new group# and change this value to match with that group. Add users that should have# control interface access to this group.## This variable can be a group name or gid.#ctrl_interface_group=wheelctrl_interface_group=0##### IEEE 802.11 related configuration ######################################## SSID to be used in IEEE 802.11 management framesssid=test# Country code (ISO/IEC 3166-1). Used to set regulatory domain.# Set as needed to indicate country in which device is operating.# This can limit available channels and transmit power.#country_code=US# Enable IEEE 802.11d. This advertises the country_code and the set of allowed# channels and transmit power levels based on the regulatory limits. The# country_code setting must be configured with the correct country for# IEEE 802.11d functions.# (default: 0 = disabled)#ieee80211d=1# Operation mode (a = IEEE 802.11a, b = IEEE 802.11b, g = IEEE 802.11g,# Default: IEEE 802.11bhw_mode=a# Channel number (IEEE 802.11)# (default: 0, i.e., not set)# Please note that some drivers (e.g., madwifi) do not use this value from# hostapd and the channel will need to be configuration separately with# iwconfig.channel=60# Beacon interval in kus (1.024 ms) (default: 100; range 15..65535)beacon_int=100# DTIM (delivery trafic information message) period (range 1..255):# number of beacons between DTIMs (1 = every beacon includes DTIM element)# (default: 2)dtim_period=2# Maximum number of stations allowed in station table. New stations will be# rejected after the station table is full. IEEE 802.11 has a limit of 2007# different association IDs, so this number should not be larger than that.# (default: 2007)max_num_sta=255# RTS/CTS threshold; 2347 = disabled (default); range 0..2347# If this field is not included in hostapd.conf, hostapd will not control# RTS threshold and 'iwconfig wlan# rts <val>' can be used to set it.rts_threshold=2347# Fragmentation threshold; 2346 = disabled (default); range 256..2346# If this field is not included in hostapd.conf, hostapd will not control# fragmentation threshold and 'iwconfig wlan# frag <val>' can be used to set# it.fragm_threshold=2346# Rate configuration# Default is to enable all rates supported by the hardware. This configuration# item allows this list be filtered so that only the listed rates will be left# in the list. If the list is empty, all rates are used. This list can have# entries that are not in the list of rates the hardware supports (such entries# are ignored). The entries in this list are in 100 kbps, i.e., 11 Mbps = 110.# If this item is present, at least one rate have to be matching with the rates# hardware supports.# default: use the most common supported rate setting for the selected# hw_mode (i.e., this line can be removed from configuration file in most# cases)#supported_rates=10 20 55 110 60 90 120 180 240 360 480 540# Basic rate set configuration# List of rates (in 100 kbps) that are included in the basic rate set.# If this item is not included, usually reasonable default set is used.#basic_rates=10 20#basic_rates=10 20 55 110#basic_rates=60 120 240# Short Preamble# This parameter can be used to enable optional use of short preamble for# frames sent at 2 Mbps, 5.5 Mbps, and 11 Mbps to improve network performance.# This applies only to IEEE 802.11b-compatible networks and this should only be# enabled if the local hardware supports use of short preamble. If any of the# associated STAs do not support short preamble, use of short preamble will be# disabled (and enabled when such STAs disassociate) dynamically.# 0 = do not allow use of short preamble (default)# 1 = allow use of short preamble#preamble=1# Station MAC address -based authentication# Please note that this kind of access control requires a driver that uses# hostapd to take care of management frame processing and as such, this can be# used with driver=hostap or driver=nl80211, but not with driver=madwifi.# 0 = accept unless in deny list# 1 = deny unless in accept list# 2 = use external RADIUS server (accept/deny lists are searched first)macaddr_acl=0# Accept/deny lists are read from separate files (containing list of# MAC addresses, one per line). Use absolute path name to make sure that the# files can be read on SIGHUP configuration reloads.#accept_mac_file=/etc/hostapd.accept#deny_mac_file=/etc/hostapd.deny# IEEE 802.11 specifies two authentication algorithms. hostapd can be# configured to allow both of these or only one. Open system authentication# should be used with IEEE 802.1X.# Bit fields of allowed authentication algorithms:# bit 0 = Open System Authentication# bit 1 = Shared Key Authentication (requires WEP)auth_algs=3# Send empty SSID in beacons and ignore probe request frames that do not# specify full SSID, i.e., require stations to know SSID.# default: disabled (0)# 1 = send empty (length=0) SSID in beacon and ignore probe request for# broadcast SSID# 2 = clear SSID (ASCII 0), but keep the original length (this may be required# with some clients that do not support empty SSID) and ignore probe# requests for broadcast SSIDignore_broadcast_ssid=0# TX queue parameters (EDCF / bursting)# default for all these fields: not set, use hardware defaults# tx_queue_<queue name>_<param># queues: data0, data1, data2, data3, after_beacon, beacon# (data0 is the highest priority queue)# parameters:# aifs: AIFS (default 2)# cwmin: cwMin (1, 3, 7, 15, 31, 63, 127, 255, 511, 1023)# cwmax: cwMax (1, 3, 7, 15, 31, 63, 127, 255, 511, 1023); cwMax >= cwMin# burst: maximum length (in milliseconds with precision of up to 0.1 ms) for# bursting## Default WMM parameters (IEEE 802.11 draft; 11-03-0504-03-000e):# These parameters are used by the access point when transmitting frames# to the clients.## Low priority / AC_BK = background#tx_queue_data3_aifs=7#tx_queue_data3_cwmin=15#tx_queue_data3_cwmax=1023#tx_queue_data3_burst=0# Note: for IEEE 802.11b mode: cWmin=31 cWmax=1023 burst=0## Normal priority / AC_BE = best effort#tx_queue_data2_aifs=3#tx_queue_data2_cwmin=15#tx_queue_data2_cwmax=63#tx_queue_data2_burst=0# Note: for IEEE 802.11b mode: cWmin=31 cWmax=127 burst=0## High priority / AC_VI = video#tx_queue_data1_aifs=1#tx_queue_data1_cwmin=7#tx_queue_data1_cwmax=15#tx_queue_data1_burst=3.0# Note: for IEEE 802.11b mode: cWmin=15 cWmax=31 burst=6.0## Highest priority / AC_VO = voice#tx_queue_data0_aifs=1#tx_queue_data0_cwmin=3#tx_queue_data0_cwmax=7#tx_queue_data0_burst=1.5# Note: for IEEE 802.11b mode: cWmin=7 cWmax=15 burst=3.3## Special queues; normally not user configurable##tx_queue_after_beacon_aifs=2#tx_queue_after_beacon_cwmin=15#tx_queue_after_beacon_cwmax=1023#tx_queue_after_beacon_burst=0##tx_queue_beacon_aifs=2#tx_queue_beacon_cwmin=3#tx_queue_beacon_cwmax=7#tx_queue_beacon_burst=1.5# 802.1D Tag (= UP) to AC mappings# WMM specifies following mapping of data frames to different ACs. This mapping# can be configured using Linux QoS/tc and sch_pktpri.o module.# 802.1D Tag 802.1D Designation Access Category WMM Designation# 1 BK AC_BK Background# 2 - AC_BK Background# 0 BE AC_BE Best Effort# 3 EE AC_BE Best Effort# 4 CL AC_VI Video# 5 VI AC_VI Video# 6 VO AC_VO Voice# 7 NC AC_VO Voice# Data frames with no priority information: AC_BE# Management frames: AC_VO# PS-Poll frames: AC_BE# Default WMM parameters (IEEE 802.11 draft; 11-03-0504-03-000e):# for 802.11a or 802.11g networks# These parameters are sent to WMM clients when they associate.# The parameters will be used by WMM clients for frames transmitted to the# access point.## note - txop_limit is in units of 32microseconds# note - acm is admission control mandatory flag. 0 = admission control not# required, 1 = mandatory# note - here cwMin and cmMax are in exponent form. the actual cw value used# will be (2^n)-1 where n is the value given here#wme_enabled=1## Low priority / AC_BK = backgroundwme_ac_bk_cwmin=4wme_ac_bk_cwmax=10wme_ac_bk_aifs=7wme_ac_bk_txop_limit=0wme_ac_bk_acm=0# Note: for IEEE 802.11b mode: cWmin=5 cWmax=10## Normal priority / AC_BE = best effortwme_ac_be_aifs=3wme_ac_be_cwmin=4wme_ac_be_cwmax=10wme_ac_be_txop_limit=0wme_ac_be_acm=0# Note: for IEEE 802.11b mode: cWmin=5 cWmax=7## High priority / AC_VI = videowme_ac_vi_aifs=2wme_ac_vi_cwmin=3wme_ac_vi_cwmax=4wme_ac_vi_txop_limit=94wme_ac_vi_acm=0# Note: for IEEE 802.11b mode: cWmin=4 cWmax=5 txop_limit=188## Highest priority / AC_VO = voicewme_ac_vo_aifs=2wme_ac_vo_cwmin=2wme_ac_vo_cwmax=3wme_ac_vo_txop_limit=47wme_ac_vo_acm=0# Note: for IEEE 802.11b mode: cWmin=3 cWmax=4 burst=102# Static WEP key configuration## The key number to use when transmitting.# It must be between 0 and 3, and the corresponding key must be set.# default: not set#wep_default_key=0# The WEP keys to use.# A key may be a quoted string or unquoted hexadecimal digits.# The key length should be 5, 13, or 16 characters, or 10, 26, or 32# digits, depending on whether 40-bit (64-bit), 104-bit (128-bit), or# 128-bit (152-bit) WEP is used.# Only the default key must be supplied; the others are optional.# default: not set#wep_key0=123456789a#wep_key1="vwxyz"#wep_key2=0102030405060708090a0b0c0d#wep_key3=".2.4.6.8.0.23"# Station inactivity limit## If a station does not send anything in ap_max_inactivity seconds, an# empty data frame is sent to it in order to verify whether it is# still in range. If this frame is not ACKed, the station will be# disassociated and then deauthenticated. This feature is used to# clear station table of old entries when the STAs move out of the# range.## The station can associate again with the AP if it is still in range;# this inactivity poll is just used as a nicer way of verifying# inactivity; i.e., client will not report broken connection because# disassociation frame is not sent immediately without first polling# the STA with a data frame.# default: 300 (i.e., 5 minutes)
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -