OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: WPA enterprise / 802.1x ?

From: Stuart Henderson (stuspacehopper.org)
Date: Sun Aug 29 2010 - 05:02:33 CDT


On 2010-08-29, Robert <infosecdie-optimisten.net> wrote:
> according to several sources [1,2,3] 802.1x (WPA enterprise) is not
> supported with native tools.
> The wpa_supplicant package doesn't help either, since it doesn't
> support WPA.
>
> Is there *any* other solution how I could get this to work on a laptop?
> I'm even considering a qemu session with Linux inside and direct
> access to a USB WLAN adapter, or a small portable access point that
> supports 802.1x.

this last option seems the most straightforward, but you would
specifically need something that can act as a client bridge (sometimes
also called STA mode) and can authenticate with 802.1x in that mode
(that's not a given, even if the device supports 802.1x in AP mode),
so check fairly carefully.

ubiquiti nanostation is about the smallest of the ones I know that
have this option (I haven't tested it in this mode myself though),
it's very small but is really meant as an outdoor CPE/AP and only
has power-over-ethernet so may be a bit messy with cables...

(don't look too closely at the trick needed to build a non-WDS
client bridge, it's pretty disgusting ;)