wpa_supplicant.conf revision 1.1
11.1Sspz# example wpa_supplicant config
21.1Sspz#
31.1Sspz# please refer to the wpa_supplicant.conf man page
41.1Sspz
51.1Sspz# wpa_cli and dhcpcd won't work well if you have no ctrl_interface set
61.1Sspz# the value must be a directory, the sockets will be named after the interfaces
71.1Sspzctrl_interface=/var/run/wpa_supplicant/
81.1Sspz
91.1Sspz# if non-root should be allowed to send wpa_supplicant commands via wpa_cli
101.1Sspz# name a group whose members will be Allowed(tm)
111.1Sspzctrl_interface_group=wheel
121.1Sspz
131.1Sspz# WEP .. all the stopping power of a "please keep off the lawn" sign
141.1Sspz# least common denominator "security" so it's formally not open
151.1Sspznetwork={
161.1Sspz	ssid="TheLawn"
171.1Sspz	key_mgmt=NONE
181.1Sspz	wep_tx_keyidx=0
191.1Sspz	#wep_key0="pleasekeepoff"
201.1Sspz	wep_key0=706c656173656b6565706f6666
211.1Sspz	priority=2
221.1Sspz}
231.1Sspz
241.1Sspz# simple WPA-PSK, a favourite with conferences and hotel networks
251.1Sspznetwork={
261.1Sspz	ssid="SomeConference"
271.1Sspz	key_mgmt=WPA-PSK
281.1Sspz	psk="secretKey"
291.1Sspz}
301.1Sspz
311.1Sspz# using eduroam for more examples:
321.1Sspz
331.1Sspz## eduroam with PEAP/MSCHAPv2
341.1Sspz#network={
351.1Sspz#	ssid="eduroam"
361.1Sspz#	scan_ssid=1
371.1Sspz#
381.1Sspz#	# The 'identity' is the username used for authentication.
391.1Sspz#	identity="user1234@your.university.domain"
401.1Sspz#
411.1Sspz#	# add yours
421.1Sspz#	password="myPassword"
431.1Sspz#
441.1Sspz#	# download a fitting CA cert and put the path to it here
451.1Sspz#	ca_cert="/etc/openssl/certs/eduroam-CA-cert.pem"
461.1Sspz#
471.1Sspz#	# where the authentication requests should be routed to
481.1Sspz#	anonymous_identity="anonymous@your.university.domain"
491.1Sspz#
501.1Sspz#	key_mgmt=WPA-EAP
511.1Sspz#	auth_alg=OPEN
521.1Sspz#	eap=PEAP
531.1Sspz#	phase2="auth=MSCHAPv2"
541.1Sspz#
551.1Sspz#	priority=5
561.1Sspz#}
571.1Sspz#
581.1Sspz## eduroam with EAP-TLS
591.1Sspz#network={
601.1Sspz#	ssid="eduroam"
611.1Sspz#	scan_ssid=1
621.1Sspz#
631.1Sspz#	# The 'identity' is the username used for authentication.
641.1Sspz#	identity="user1234@your.university.domain"
651.1Sspz#
661.1Sspz#	client_cert="/home/you/eduroam/user.cert"
671.1Sspz#	private_key="/home/you/eduroam/user.key"
681.1Sspz#	private_key_passwd="s3kr3t"
691.1Sspz#
701.1Sspz#	# download a fitting CA cert and put the path to it here
711.1Sspz#	ca_cert="/etc/openssl/certs/eduroam-CA-cert.pem"
721.1Sspz#
731.1Sspz#	# where the authentication requests should be routed to
741.1Sspz#	anonymous_identity="anonymous@your.university.domain"
751.1Sspz#
761.1Sspz#	key_mgmt=WPA-EAP
771.1Sspz#	auth_alg=OPEN
781.1Sspz#	eap=TLS
791.1Sspz#
801.1Sspz#	priority=4
811.1Sspz#}
821.1Sspz#
831.1Sspz## eduroam with TTLS+PAP
841.1Sspz#network={
851.1Sspz#	ssid="eduroam"
861.1Sspz#	scan_ssid=1
871.1Sspz#
881.1Sspz#	# The 'identity' is the username used for authentication.
891.1Sspz#	identity="user1234@your.university.domain"
901.1Sspz#
911.1Sspz#	# add yours
921.1Sspz#	password="myPassword"
931.1Sspz#
941.1Sspz#	# download a fitting CA cert and put the path to it here
951.1Sspz#	ca_cert="/etc/openssl/certs/eduroam-CA-cert.pem"
961.1Sspz#
971.1Sspz#	# where the authentication requests should be routed to
981.1Sspz#	anonymous_identity="anonymous@your.university.domain"
991.1Sspz#
1001.1Sspz#	key_mgmt=WPA-EAP
1011.1Sspz#	auth_alg=OPEN
1021.1Sspz#	eap=TTLS
1031.1Sspz#	phase2="auth=PAP"
1041.1Sspz#
1051.1Sspz#	priority=3
1061.1Sspz#}
1071.1Sspz#
108