WAN through Hotspot 2.0/Passpoint

• Not all WiFi devices support WPA2 Enterprise security.
• WPA2 Enterprise security involves a username and password or certificates.
• Most printers, gaming consoles or IoT equipment only support WPA Personal.
• Should the need arise for them to also join an enterprise network we developed a central managed solution that can act as a bridge.
• This page provides a more detailed explanation of our solution.

Consider the following practical example.

• Meet Tim.
• Tim is the network administrator of a big university somewhere in Europe.
• The university participates in Eduroam.
• The university has a couple of scientists working on specialized equipment that only has network access through an Ethernet port.
• Each of these scientists will travel to other universities over the next few months to give demonstrations and talks.
• These universities also participate in Eduroam.
• Tim will now configure an Eduroam Travel Router on APdesk for each of these scientists.
• This will allow them to connect their specialized equipment to the router while the router uses the Hotspot 2.0 connection as the uplink.

• We would like to acknowledge and express our gratitude to the individuals who contributed to and provided valuable information and projects that served as references for developing this enhancement to MESHdesk and APdesk.
• https://github.com/hgot07/openwrt-passpoint
• https://simeononsecurity.com/guides/unlock-seamless-connectivity-hotspot-2.0-openwrt/

• RADIUSdesk now have a WPA-ENTERPRISE/HS2.0 UPLINKS applet that makes the management of WPA-Enterprise and Hotspot 2.0 uplinks a breeze.

• When you select a specific uplink, the detail for that uplink will be assigned to the AP or mesh node when it fetched its settings.
• The MESHdesk firmware contains a modified /lib/netifd/hostapd.sh file that allows the AP to be able to connect to Hotspot 2.0 networks.
• One very important item to remember if you are security conscious it the Domain Suffix Match. This protects you against Evil Twin attacks.
• Lets look at some sample configs ant feedback form the logread command.