archlinux hostapd

1

    iw list

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

cd /etc/systemd/network/
vim 05-eth0.network
[Match]
Name=enp1s0
[Network]
DHCP=yes

vim 07-br0.netdev
[NetDev]
Name=br0
Kind=bridge

vim 10-eth1.network
[Match]
Name=enp3s0
[Network]
Bridge=br0

vim 15-wlan0.network
[Match]
Name=wlp2s0b1
[Network]
Bridge=br0

vim 20-br0.network
[Match]
Name=br0
[Network]
DNS=192.168.50.1
Address=192.168.97.1/24

1
2

sudo iptables -vnL 
sudo iptables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

#edit /etc/hostapd/hostapd.conf

interface=wlp2s0b1
# if wlan0 already added to br0, uncomments this line
bridge=br0
# 驱动接口类型
driver=nl80211
# 国家或地区代码 (ISO/IEC 3166-1) 
country_code=CN
# 热点名
ssid=test2
# hostapd日志设置
logger_syslog=-1
logger_syslog_level=2
logger_stdout=-1
logger_stdout_level=2
ctrl_interface=/run/hostapd
ctrl_interface_group=0
# 工作模式 (a = IEEE 802.11a (5 GHz), b = IEEE 802.11b (2.4 GHz)
# a = IEEE 802.11a, b = IEEE 802.11b, g = IEEE 802.11g, ad = IEEE 802.11ad (60 GHz)
hw_mode=g
# 使用信道
channel=5
beacon_int=100
dtim_period=2
# 允许最大连接数
max_num_sta=5
# Bit 字段: bit0 = WPA, bit1 = WPA2
wpa=2
rts_threshold=-1
fragm_threshold=-1
macaddr_acl=0
auth_algs=1
# 1: hide ssid, 0: default
ignore_broadcast_ssid=0
wmm_enabled=1
wmm_ac_bk_cwmin=4
wmm_ac_bk_cwmax=10
wmm_ac_bk_aifs=7
wmm_ac_bk_txop_limit=0
wmm_ac_bk_acm=0
wmm_ac_be_aifs=3
wmm_ac_be_cwmin=4
wmm_ac_be_cwmax=10
wmm_ac_be_txop_limit=0
wmm_ac_be_acm=0
wmm_ac_vi_aifs=2
wmm_ac_vi_cwmin=3
wmm_ac_vi_cwmax=4
wmm_ac_vi_txop_limit=94
wmm_ac_vi_acm=0
wmm_ac_vo_aifs=2
wmm_ac_vo_cwmin=2
wmm_ac_vo_cwmax=3
wmm_ac_vo_txop_limit=47
wmm_ac_vo_acm=0
eapol_key_index_workaround=0
eap_server=0
own_ip_addr=127.0.0.1

wpa_passphrase=hostapd0
# 加密算法
wpa_key_mgmt=WPA-PSK
# 加密协议；禁用不安全的 TKIP
wpa_pairwise=TKIP
rsn_pairwise=CCMP

1

systemctl enable hostapd

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

#vim /etc/dnsmasq.conf
interface=wlp2s0b1
listen-address=192.168.97.1
  
#no-dhcp-interface=
dhcp-range=192.168.97.10,192.168.97.20,12h
# route
dhcp-option=3,192.168.97.1
# dns
dhcp-option=6,192.168.97.1

#打开Linux主机网络数据转发功能
  
echo 1 > /proc/sys/net/ipv4/ip_forward 

sudo hostapd /etc/hostapd/hostapd.conf

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

sudo pacman -S iw
#check is support AP mode
iw list
ip link add name br0 type bridge
ip link set br0 up
ip link set eth0 up
ip link set eth0 master br0
# show bridge info
bridge link

sudo ip addr add 192.168.49.1/24 dev wlp2s0b1
sudo ip link set wlp3s0 up
sudo systemctl start dnsmasq.service
sudo nft add rule nat post ip saddr 192.168.49.0/24 oif enp2s0 snat 172.16.xxx.xxx
sudo hostapd /etc/hostapd/hostapd.conf
sudo hostapd -B /etc/hostapd/hostapd.conf
sudo systemctl start hostapd.service 
#设置无线接入点IP地址,命令如下: 
  
sudo ip addr add 192.168.49.1/24 dev wlp2s0b1  
sudo ip link set wlp2s0b1 up

#启动 hostapd和dnsmasq
hostapd /etc/hostapd/hostapd.conf
hostapd -B /etc/hostapd/hostapd.conf

#or  
systemctl start hostapd.service
systemctl start dnsmasq.service