openwrt 19.07主要版本带来了对WPA3的初始支持。 但是,默认情况下未启用WPA3
- 透过ubus查看支持的模式
root@OpenWrt:/# ubus call luci getFeatures
{
"ipv6": true,
"wpasupplicant": {
"11ac": true,
"11r": true,
"owe": false,
"acs": true,
"eap": false,
"11n": true,
"sae": true,
"suiteb192": false,
"11w": true
},
"odhcpd": true,
"cabundle": true,
"offloading": true,
"dropbear": true,
"dnsmasq": {
"gnu-getopt": true,
"tftp": true,
"dnssec": false,
"conntrack": false,
"dbus": false,
"ipset": false,
"ipv6": true,
"lua": false,
"inotify": true,
"i18n": false,
"loop-detect": true,
"dumpfile": true,
"dhcp": true,
"dhcpv6": false,
"idn": false,
"id": false,
"auth": false
},
"firewall": true,
"hostapd": {
"11ac": true,
"11r": true,
"owe": false,
"acs": true,
"eap": false,
"11n": true,
"sae": true,
"suiteb192": false,
"11w": true
},
"ipset": {
"hash:ip,port": 5,
"hash:mac": 0,
"hash:ip,mac": 0,
"hash:ip,port,ip": 5,
"bitmap:ip,mac": 3,
"hash:net,net": 2,
"hash:net,iface": 6,
"hash:ip": 4,
"hash:net,port": 7,
"hash:net,port,net": 2,
"hash:ip,port,net": 7,
"list:set": 3,
"hash:net": 6,
"bitmap:ip": 3,
"bitmap:port": 3,
"hash:ip,mark": 2
},
"sysntpd": true,
"swconfig": true,
"opkg": true
}
如果"sae": true,就是支持wpa3
- 查看makefile menuconfig
.config - OpenWrt Configuration
> Network ───────────────────────────────────────────────────────────────────────────────────────
┌───────────────────────────────────────── Network ──────────────────────────────────────────┐
│ Arrow keys navigate the menu. <Enter> selects submenus ---> (or empty submenus ----). │
│ Highlighted letters are hotkeys. Pressing <Y> includes, <N> excludes, <M> modularizes │
│ features. Press <Esc><Esc> to exit, <?> for Help, </> for Search. Legend: [*] built-in │
│ [ ] excluded <M> module < > module capable │
│ ┌─────────^(-)───────────────────────────────────────────────────────────────────────────┐ │
│ │ < > vxlan.............................. Virtual eXtensible LAN config support │ │
│ │ < > wakeonlan. Sends 'magic packets' to wake-on-LAN enabled ethernet adapters │ │
│ │ < > wpa-cli...................... WPA Supplicant command line control utility │ │
│ │ < > wpa-supplicant............................ WPA Supplicant (built-in full) │ │
│ │ [ ] Add rfkill support │ │
│ │ (3) Minimum debug message priority │ │
│ │ < > wpa-supplicant-basic........................... WPA Supplicant (11r, 11w) │ │
│ │ < > wpa-supplicant-mesh-openssl........... WPA Supplicant (OpenSSL, 11s, SAE) │ │
│ │ < > wpa-supplicant-mesh-wolfssl........... WPA Supplicant (wolfSSL, 11s, SAE)│ │
│ │ < > wpa-supplicant-mini............................. WPA Supplicant (minimal) │ │
│ │ < > wpa-supplicant-openssl..................... WPA Supplicant (OpenSSL full)│ │
│ │ < > wpa-supplicant-p2p.................... WPA Supplicant (Wi-Fi P2P support)│ │
│ │ < > wpa-supplicant-wolfssl..................... WPA Supplicant (wolfSSL full)│ │
│ │ < > wpad......................... IEEE 802.1x Auth/Supplicant (built-in full) │ │
│ │ < > wpad-basic............... IEEE 802.1x Auth/Supplicant (WPA-PSK, 11r, 11w)│ │
│ │ <*> wpad-basic-wolfssl....... IEEE 802.1x Auth/Supplicant (wolfSSL, 11r, 11│ │
│ │ < > wpad-mesh-openssl........ IEEE 802.1x Auth/Supplicant (OpenSSL, 11s, SAE)│ │
│ │ < > wpad-mesh-wolfssl........ IEEE 802.1x Auth/Supplicant (wolfSSL, 11s, SA│ │
│ │ < > wpad-mini..................... IEEE 802.1x Auth/Supplicant (WPA-PSK only)│ │
│ │ < > wpad-openssl.................. IEEE 802.1x Auth/Supplicant (OpenSSL ful│ │
│ └─────────v(+)───────────────────────────────────────────────────────────────────────────┘ │
├────────────────────────────────────────────────────────────────────────────────────────────┤
│ <Select> < Exit > < Help > < Save > < Load > │
└────────────────────────────────────────────────────────────────────────────────────────────┘
项目 | Value |
---|---|
hostapd-openssl | AP模式,WPA3支持 |
wpa-supplicant-openssl | sta模式,WPA3支持 |
wpad-openssl | AP+STA模式,WPA3支持 |
wpad-basic | 支持WPA2 WEP |
wpad-basic-wolfssl | AP+STA模式,WPA3支持 |
许多现有客户端设备将永远不支持WPA3,并且有些客户端设备支持WPA2,但无法连接到 的 AP 配置有WPA2 + WPA3混合模式,所有通常禁用wpa3即可