Hi Jouni,<br>Thanks for the quick response. Actually, the main idea of sending EAPOL packets over UDP is that I want to map the access layer authentication mechanism to application layer (just like to mimic the concept of WISPr which does for example the eap packets handling over the application layer). The main requirement of using the hostapd as switch/wireless AP is to avoid the real hardware and have software based authenticator /Radius Client.<br>
<br>I have found one more link where wpa_supplicant and hostapd are tested on wired LAN for EAP-PEAP.<br><a href="http://inl.info.ucl.ac.be/blogs/08-10-01-sample-configurations-hostapd-and-wpa-supplicant-make-it-work-wired-connection">http://inl.info.ucl.ac.be/blogs/08-10-01-sample-configurations-hostapd-and-wpa-supplicant-make-it-work-wired-connection</a><br>
<br>Can we try the same thing with EAP-SIM where:<br>wpa_supplicant (supplicant) <--> hostapd (authenticator + AAA Server)<br><br>I have also played with the eapol_test, but it combines the supplicant and Radius Client. I am trying to use the wpa_supplicant as EAP-Peer and hostapd as EAP-Authenticator (standalone or with co-located AAA Server). If hostapd is used as EAP-Authenticator only, then it is flexible to use it with external AAA Server e.g. FreeRadius.<br>
<br>wpa_supplicant (supplicant) <--> hostapd (authenticator) <----> FreeRadius (AAA Server)<br><br>Any suggestions for that.<br><br>BR,<br>A.Chaudry<br><br><br><div class="gmail_quote">On Fri, Sep 7, 2012 at 4:25 PM, Jouni Malinen <span dir="ltr"><<a href="mailto:j@w1.fi" target="_blank">j@w1.fi</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On Fri, Sep 07, 2012 at 02:19:54PM +0200, Chaudry Chaudry wrote:<br>
<br>
> I am planning to use wpa_supplicant and hostapd on the wired LAN for<br>
> EAP-SIM testing.<br>
<br>
</div>> *CONFIG_CTRL_IFACE_UDP=y*<br>
<div class="im">><br>
><br>
> Normally the EAPOL packets are transported between authenticator and<br>
> supplicant and they are encapsulated within Ethernet frames directly. Now<br>
> from the above parameter, are we changing the control interface to UDP over<br>
> which the EAPOL packets are encapsulated first or what?<br>
<br>
</div>No, that has nothing to do with EAPOL - it control which communication<br>
mechanism is used with the control interface that wpa_supplicant<br>
provides for external programs like wpa_cli.<br>
<div class="im"><br>
> In the<br>
> wpa_supplicant and hostapd, is it possible to send the eapol packets over<br>
> UDP between EAP-Peer and authenticator ?<br>
<br>
</div>No, that is not supported. Why would you want to send EAPOL packets over<br>
UDP?<br>
<div class="im"><br>
> Secondly, is it possible to use the hostapd as switch (authenticator)<br>
> instead of real switch for EAP-SIM testing over wired LAN. From the<br>
> documentation, it can be guessed that hostapd can be configured as<br>
> standalone switch as well. Did anybody try that so far?<br>
<br>
</div>While it would be possible to implement a managed wired switch with<br>
hostapd used as the authenticator, this would require additional<br>
components to control the IEEE 802.1X port to block frames.<br>
<br>
Do you have a particular reason for running this over wired LAN and to<br>
do that with full IEEE 802.1X capable switch design? What exactly are<br>
you trying to test? If you are just looking for a test setup for EAP-SIM<br>
testing, there are much simpler ways of doing that with hostapd and<br>
wpa_supplicant (or eapol_test for that matter).<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Jouni Malinen PGP id EFC895FA<br>
_______________________________________________<br>
HostAP mailing list<br>
<a href="mailto:HostAP@lists.shmoo.com">HostAP@lists.shmoo.com</a><br>
<a href="http://lists.shmoo.com/mailman/listinfo/hostap" target="_blank">http://lists.shmoo.com/mailman/listinfo/hostap</a><br>
</font></span></blockquote></div><br>