openwrt之使能WPA3加密方式

openwrt 19.07主要版本带来了对WPA3的初始支持。 但是，默认情况下未启用WPA3

• 透过ubus查看支持的模式

root@OpenWrt:/# ubus call luci getFeatures
{
        "ipv6": true,
        "wpasupplicant": {
                "11ac": true,
                "11r": true,
                "owe": false,
                "acs": true,
                "eap": false,
                "11n": true,
                "sae": true,
                "suiteb192": false,
                "11w": true
        },
        "odhcpd": true,
        "cabundle": true,
        "offloading": true,
        "dropbear": true,
        "dnsmasq": {
                "gnu-getopt": true,
                "tftp": true,
                "dnssec": false,
                "conntrack": false,
                "dbus": false,
                "ipset": false,
                "ipv6": true,
                "lua": false,
                "inotify": true,
                "i18n": false,
                "loop-detect": true,
                "dumpfile": true,
                "dhcp": true,
                "dhcpv6": false,
                "idn": false,
                "id": false,
                "auth": false
        },
        "firewall": true,
        "hostapd": {
                "11ac": true,
                "11r": true,
                "owe": false,
                "acs": true,
                "eap": false,
                "11n": true,
                "sae": true,
                "suiteb192": false,
                "11w": true
        },
        "ipset": {
                "hash:ip,port": 5,
                "hash:mac": 0,
                "hash:ip,mac": 0,
                "hash:ip,port,ip": 5,
                "bitmap:ip,mac": 3,
                "hash:net,net": 2,
                "hash:net,iface": 6,
                "hash:ip": 4,
                "hash:net,port": 7,
                "hash:net,port,net": 2,
                "hash:ip,port,net": 7,
                "list:set": 3,
                "hash:net": 6,
                "bitmap:ip": 3,
                "bitmap:port": 3,
                "hash:ip,mark": 2
        },
        "sysntpd": true,
        "swconfig": true,
        "opkg": true
}

如果"sae": true，就是支持wpa3

• 查看makefile menuconfig

 .config - OpenWrt Configuration
 > Network ───────────────────────────────────────────────────────────────────────────────────────
  ┌───────────────────────────────────────── Network ──────────────────────────────────────────┐
  │  Arrow keys navigate the menu.  <Enter> selects submenus ---> (or empty submenus ----).    │  
  │  Highlighted letters are hotkeys.  Pressing <Y> includes, <N> excludes, <M> modularizes    │  
  │  features.  Press <Esc><Esc> to exit, <?> for Help, </> for Search.  Legend: [*] built-in  │  
  │  [ ] excluded  <M> module  < > module capable                                              │  
  │ ┌─────────^(-)───────────────────────────────────────────────────────────────────────────┐ │  
  │ │         < > vxlan.............................. Virtual eXtensible LAN config support  │ │  
  │ │         < > wakeonlan. Sends 'magic packets' to wake-on-LAN enabled ethernet adapters  │ │  
  │ │         < > wpa-cli...................... WPA Supplicant command line control utility  │ │  
  │ │         < > wpa-supplicant............................ WPA Supplicant (built-in full)  │ │  
  │ │         [ ] Add rfkill support                                                         │ │  
  │ │         (3) Minimum debug message priority                                             │ │  
  │ │         < > wpa-supplicant-basic........................... WPA Supplicant (11r, 11w)  │ │  
  │ │         < > wpa-supplicant-mesh-openssl........... WPA Supplicant (OpenSSL, 11s, SAE)  │ │  
  │ │         < >   wpa-supplicant-mesh-wolfssl........... WPA Supplicant (wolfSSL, 11s, SAE)│ │  
  │ │         < > wpa-supplicant-mini............................. WPA Supplicant (minimal)  │ │  
  │ │         < >   wpa-supplicant-openssl..................... WPA Supplicant (OpenSSL full)│ │  
  │ │         < >   wpa-supplicant-p2p.................... WPA Supplicant (Wi-Fi P2P support)│ │  
  │ │         < >   wpa-supplicant-wolfssl..................... WPA Supplicant (wolfSSL full)│ │  
  │ │         < > wpad......................... IEEE 802.1x Auth/Supplicant (built-in full)  │ │  
  │ │         < >   wpad-basic............... IEEE 802.1x Auth/Supplicant (WPA-PSK, 11r, 11w)│ │  
  │ │         <*>     wpad-basic-wolfssl....... IEEE 802.1x Auth/Supplicant (wolfSSL, 11r, 11│ │  
  │ │         < >   wpad-mesh-openssl........ IEEE 802.1x Auth/Supplicant (OpenSSL, 11s, SAE)│ │  
  │ │         < >     wpad-mesh-wolfssl........ IEEE 802.1x Auth/Supplicant (wolfSSL, 11s, SA│ │  
  │ │         < >   wpad-mini..................... IEEE 802.1x Auth/Supplicant (WPA-PSK only)│ │  
  │ │         < >     wpad-openssl.................. IEEE 802.1x Auth/Supplicant (OpenSSL ful│ │  
  │ └─────────v(+)───────────────────────────────────────────────────────────────────────────┘ │  
  ├────────────────────────────────────────────────────────────────────────────────────────────┤  
  │                  <Select>    < Exit >    < Help >    < Save >    < Load >                  │  
  └────────────────────────────────────────────────────────────────────────────────────────────┘  

项目	Value
hostapd-openssl	AP模式，WPA3支持
wpa-supplicant-openssl	sta模式，WPA3支持
wpad-openssl	AP+STA模式，WPA3支持
wpad-basic	支持WPA2 WEP
wpad-basic-wolfssl	AP+STA模式，WPA3支持

许多现有客户端设备将永远不支持WPA3，并且有些客户端设备支持WPA2，但无法连接到 的 AP 配置有WPA2 + WPA3混合模式，所有通常禁用wpa3即可

---