qacafe - ip test solutions
Knowledge Base > Wireless > How do I configure CDRouter to use a wireless LAN interface?

How do I configure CDRouter to use a wireless LAN interface?

To use a wireless LAN interface with CDRouter, you must have a supported wireless network card installed. In order to use WPA, you must have DriverLoader installed from Linuxant.

The testvar lanInterface should be configured to the corresponding network device. On Redhat and Fedora systems, this is usually ethX. On SuSE and Ubuntu/Debian systems, this is usually wlanX. You should not use a wifiX interface. These interfaces are normally used for monitoring only.

The testvar lanType should be set to 802.11b, 802.11a, or 802.11g depending on the wireless card you are using.

The testvar lanSSID should be configured using the SSID of the wireless router or access point. Note that the SSID must be broadcast.

Basic wireless with no security

Example: 

   testvar lanInterface        eth3
   testvar lanType             802.11g
   testvar lanSSID             my-network
   testvar lanWEPKey           off

WEP

To use WEP, you must configure the lanWEPKey using either a 40 or 128 bit WEP key. For 40 bit WEP keys, enter 10 hex digits. For 128 bit WEP keys, enter 26 hex digits. If no WEP key is specified, the existing WEP key (if any) of the wireless interface is used. To disable WEP configure the lanWEPKey to 'off'.

Example with 128 bit WEP: 

   testvar lanInterface        eth3
   testvar lanType             802.11g
   testvar lanSSID             my-network
   testvar lanWEPKey           0102030405060708090a010203

WPA-PSK

To use WPA-PSK (WPA with preshared keys) or WPA2-PSK (WPA2 with preshared keys), you must configure the wirelessAuthType to WPA-PSK and the wpaMode to WPA or WPA2, respectively. The lanWEPKey should be configured to "off". You must also configure the desired cipher and wpaKey. The wpaKey can be either a pass phrase or 64 character hexidecimal string.

Wireless WPA-PSK example: 

   testvar lanInterface        eth3
   testvar lanType             802.11g
   testvar lanSSID             my-network
   testvar lanWEPKey           off
   testvar wirelessAuthType    WPA-PSK
   testvar wpaMode             WPA 
   testvar wpaCipher           TKIP 
   testvar wpaKey              qacafe123

Wireless WPA2-PSK example: 

   testvar lanInterface        eth3
   testvar lanType             802.11g
   testvar lanSSID             my-network
   testvar lanWEPKey           off
   testvar wirelessAuthType    WPA-PSK
   testvar wpaMode             WPA2 
   testvar wpaCipher           AES-CCMP 
   testvar wpaKey              qacafe123

WPA-RADIUS

To configure WPA-RADIUS, you should configure the wirelessAuthType to WPA-RADIUS and the wpaMode to WPA or WPA2, respectively. You should also enable the built-in RADIUS server and an EAP type that supports WPA. Note: eap-md5 is not a valid EAP type for WPA-RADIUS.

The RADIUS client on the device should be configured with the IP address of the remoteHostIp in your configuration file.

Wireless WPA-RADIUS example: 

   testvar lanInterface        eth3
   testvar lanType             802.11g
   testvar lanSSID             my-network
   testvar lanWEPKey           off
   testvar wirelessAuthType    WPA-RADIUS 
   testvar wpaCipher           TKIP
   testvar wpaMode             WPA 

   # -- enable RADIUS
   testvar enableRADIUSserver  yes
   testvar radiusSecret        qacafe123

   # -- select a valid EAP type that supports WPA-RADIUS
   testvar eapType             eap-tls

   # -- enable 802.1x
   testvar lanUseEAPOL         yes

Wireless WPA2-RADIUS example: 

   testvar lanInterface        eth3
   testvar lanType             802.11g
   testvar lanSSID             my-network
   testvar lanWEPKey           off
   testvar wirelessAuthType    WPA-RADIUS 
   testvar wpaCipher           AES-CCMP
   testvar wpaMode             WPA2 

   # -- enable RADIUS
   testvar enableRADIUSserver  yes
   testvar radiusSecret        qacafe123

   # -- select a valid EAP type that supports WPA2-RADIUS
   testvar eapType             eap-tls

   # -- enable 802.1x
   testvar lanUseEAPOL         yes