# $NetBSD: wpa_supplicant.conf,v 1.5 2023/10/10 07:21:00 nia Exp $ # # example wpa_supplicant config # # please refer to the wpa_supplicant.conf man page # wpa_cli and dhcpcd won't work well if you have no ctrl_interface set # the value must be a directory, the sockets will be named after the interfaces ctrl_interface=/var/run/wpa_supplicant/ # if non-root should be allowed to send wpa_supplicant commands via wpa_cli # name a group whose members will be Allowed(tm) ctrl_interface_group=wheel # an unencrypted network network={ ssid="Freifunk" key_mgmt=NONE priority=10 } # simple WPA-PSK, a favourite with conferences and hotel networks network={ ssid="SomeConference" key_mgmt=WPA-PSK psk="secretKey" priority=20 } # a private WPA-PSK that doesn't broadcast its SSID network={ ssid="HomeSweetHome" key_mgmt=WPA-PSK psk="secretKey" scan_ssid=1 priority=30 } # WEP .. all the stopping power of a "please keep off the lawn" sign # least common denominator "security" so it's formally not open network={ ssid="TheLawn" key_mgmt=NONE wep_tx_keyidx=0 #wep_key0="pleasekeepoff" wep_key0=706c656173656b6565706f6666 priority=2 } # using eduroam for more examples: ## eduroam with PEAP/MSCHAPv2 #network={ # ssid="eduroam" # scan_ssid=1 # # # The 'identity' is the username used for authentication. # identity="user1234@your.university.domain" # # # add yours # password="myPassword" # # # download a fitting CA cert and put the path to it here # ca_cert="/etc/openssl/certs/eduroam-CA-cert.pem" # # # where the authentication requests should be routed to # anonymous_identity="anonymous@your.university.domain" # # key_mgmt=WPA-EAP # auth_alg=OPEN # eap=PEAP # phase2="auth=MSCHAPV2" # # priority=5 #} # ## eduroam with EAP-TLS #network={ # ssid="eduroam" # scan_ssid=1 # # # The 'identity' is the username used for authentication. # identity="user1234@your.university.domain" # # client_cert="/home/you/eduroam/user.cert" # private_key="/home/you/eduroam/user.key" # private_key_passwd="s3kr3t" # # # download a fitting CA cert and put the path to it here # ca_cert="/etc/openssl/certs/eduroam-CA-cert.pem" # # # where the authentication requests should be routed to # anonymous_identity="anonymous@your.university.domain" # # key_mgmt=WPA-EAP # auth_alg=OPEN # eap=TLS # # priority=4 #} # ## eduroam with TTLS+PAP #network={ # ssid="eduroam" # scan_ssid=1 # # # The 'identity' is the username used for authentication. # identity="user1234@your.university.domain" # # # add yours # password="myPassword" # # # download a fitting CA cert and put the path to it here # ca_cert="/etc/openssl/certs/eduroam-CA-cert.pem" # # # where the authentication requests should be routed to # anonymous_identity="anonymous@your.university.domain" # # key_mgmt=WPA-EAP # auth_alg=OPEN # eap=TTLS # phase2="auth=PAP" # # priority=3 #} #