What is Hostapd interworking? How to use it?

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP












0















I am very excited to use the interworking functionality of hostapd! I aim to do a network redirection once a client connects to my RPI access point. I am following this tutorial for RPI AP. In the hostapd reference The Interworking section contains a possible answer to making a captive portal (without authentication) to open a clients browser and direct it to my node.js server running on port 8001.



 # Network Authentication Type
# This parameter indicates what type of network authentication is used in the
# network.
# format: <network auth type indicator (1-octet hex str)> [redirect URL]
# Network Authentication Type Indicator values:
# 00 = Acceptance of terms and conditions
# 01 = On-line enrollment supported
# 02 = http/https redirection
# 03 = DNS redirection
#network_auth_type=00
#network_auth_type=02http://www.example.com/redirect/me/here/


I have a few questions.



  1. Is there any documentation of RPI AP tests with any interworking functioning? I can't seem to find much. If anyone has tested this let me know!



  2. Do I need other parameters to configure this interworking in my hostapd.conf? Right now I have the following and tested with countless variations adding and removing lines from the ieee802.11u interworking section.



    interface=wlan0 
    driver=nl80211
    ssid=RpiScopeSpot
    hw_mode=g
    channel=7
    wmm_enabled=0
    macaddr_acl=0
    auth_algs=1
    ignore_broadcast_ssid=0
    wpa=2
    wpa_passphrase=rpiscope
    wpa_key_mgmt=WPA-PSK
    wpa_pairwise=TKIP
    rsn_pairwise=CCMP

    #IEEE 802.11u-2011
    #Enable Interworking service
    interworking=1
    access_network_type=4
    internet=1
    asra=1
    esr=1
    uesa=1
    venue_group=2
    venue_type=1
    hessid=00:00:00:00:00:01
    roaming_consortium=01010101
    venue_name=eng:rpi Test Venue
    network_auth_type=02http://192.168.50.10:8001
    ipaddr_type_availability=04
    domain_name=192.168.50.10
    anqp_3gpp_cell_net=055,54
    nai_realm=0,192.168.50.10,13[5:6],21[2:4][5:7]


I have tested the following network_auth_type=02https://www.google.com & network_auth_type=02http://192.168.50.1 with no success.



  1. What exactly happens when a client connects to the my AP on both the RPI and client? I am asking because I would like to somehow catch this behaviour and manually open some browser on the client side.

I am logging all the hostapd and unable to see anything about this interworking running. I am logging by adding DAEMON_OPTS="-dd -t -f /home/pi/hostapd.log" to my /etc/default/hostapd. I am testing the results each time with sudo systemctl status hostapd and don't see any interworking behaviours.



  1. I have seen many RPI captive portal using Nodogsplash project that uses a possible NDS. What is happening here? Is it more then iptable routing? I am working through this project to work through what I am able to use. This project is simply overkill for what I need.


By default, NDS blocks everything, but intercepts port 80 requests.
An initial port 80 request will be generated on a client device, either by the >user manually browsing to an http web page, or automatically by the client >device’s built in Captive Portal Detection (CPD).




Additionally this is the closest thing I can see of someone at least referencing this hostapd in a different environment.










share|improve this question
























  • related: unix.stackexchange.com/questions/386242/… and unix.stackexchange.com/questions/212871/… and unix.stackexchange.com/questions/476701/…

    – Rui F Ribeiro
    Feb 14 at 10:40















0















I am very excited to use the interworking functionality of hostapd! I aim to do a network redirection once a client connects to my RPI access point. I am following this tutorial for RPI AP. In the hostapd reference The Interworking section contains a possible answer to making a captive portal (without authentication) to open a clients browser and direct it to my node.js server running on port 8001.



 # Network Authentication Type
# This parameter indicates what type of network authentication is used in the
# network.
# format: <network auth type indicator (1-octet hex str)> [redirect URL]
# Network Authentication Type Indicator values:
# 00 = Acceptance of terms and conditions
# 01 = On-line enrollment supported
# 02 = http/https redirection
# 03 = DNS redirection
#network_auth_type=00
#network_auth_type=02http://www.example.com/redirect/me/here/


I have a few questions.



  1. Is there any documentation of RPI AP tests with any interworking functioning? I can't seem to find much. If anyone has tested this let me know!



  2. Do I need other parameters to configure this interworking in my hostapd.conf? Right now I have the following and tested with countless variations adding and removing lines from the ieee802.11u interworking section.



    interface=wlan0 
    driver=nl80211
    ssid=RpiScopeSpot
    hw_mode=g
    channel=7
    wmm_enabled=0
    macaddr_acl=0
    auth_algs=1
    ignore_broadcast_ssid=0
    wpa=2
    wpa_passphrase=rpiscope
    wpa_key_mgmt=WPA-PSK
    wpa_pairwise=TKIP
    rsn_pairwise=CCMP

    #IEEE 802.11u-2011
    #Enable Interworking service
    interworking=1
    access_network_type=4
    internet=1
    asra=1
    esr=1
    uesa=1
    venue_group=2
    venue_type=1
    hessid=00:00:00:00:00:01
    roaming_consortium=01010101
    venue_name=eng:rpi Test Venue
    network_auth_type=02http://192.168.50.10:8001
    ipaddr_type_availability=04
    domain_name=192.168.50.10
    anqp_3gpp_cell_net=055,54
    nai_realm=0,192.168.50.10,13[5:6],21[2:4][5:7]


I have tested the following network_auth_type=02https://www.google.com & network_auth_type=02http://192.168.50.1 with no success.



  1. What exactly happens when a client connects to the my AP on both the RPI and client? I am asking because I would like to somehow catch this behaviour and manually open some browser on the client side.

I am logging all the hostapd and unable to see anything about this interworking running. I am logging by adding DAEMON_OPTS="-dd -t -f /home/pi/hostapd.log" to my /etc/default/hostapd. I am testing the results each time with sudo systemctl status hostapd and don't see any interworking behaviours.



  1. I have seen many RPI captive portal using Nodogsplash project that uses a possible NDS. What is happening here? Is it more then iptable routing? I am working through this project to work through what I am able to use. This project is simply overkill for what I need.


By default, NDS blocks everything, but intercepts port 80 requests.
An initial port 80 request will be generated on a client device, either by the >user manually browsing to an http web page, or automatically by the client >device’s built in Captive Portal Detection (CPD).




Additionally this is the closest thing I can see of someone at least referencing this hostapd in a different environment.










share|improve this question
























  • related: unix.stackexchange.com/questions/386242/… and unix.stackexchange.com/questions/212871/… and unix.stackexchange.com/questions/476701/…

    – Rui F Ribeiro
    Feb 14 at 10:40













0












0








0








I am very excited to use the interworking functionality of hostapd! I aim to do a network redirection once a client connects to my RPI access point. I am following this tutorial for RPI AP. In the hostapd reference The Interworking section contains a possible answer to making a captive portal (without authentication) to open a clients browser and direct it to my node.js server running on port 8001.



 # Network Authentication Type
# This parameter indicates what type of network authentication is used in the
# network.
# format: <network auth type indicator (1-octet hex str)> [redirect URL]
# Network Authentication Type Indicator values:
# 00 = Acceptance of terms and conditions
# 01 = On-line enrollment supported
# 02 = http/https redirection
# 03 = DNS redirection
#network_auth_type=00
#network_auth_type=02http://www.example.com/redirect/me/here/


I have a few questions.



  1. Is there any documentation of RPI AP tests with any interworking functioning? I can't seem to find much. If anyone has tested this let me know!



  2. Do I need other parameters to configure this interworking in my hostapd.conf? Right now I have the following and tested with countless variations adding and removing lines from the ieee802.11u interworking section.



    interface=wlan0 
    driver=nl80211
    ssid=RpiScopeSpot
    hw_mode=g
    channel=7
    wmm_enabled=0
    macaddr_acl=0
    auth_algs=1
    ignore_broadcast_ssid=0
    wpa=2
    wpa_passphrase=rpiscope
    wpa_key_mgmt=WPA-PSK
    wpa_pairwise=TKIP
    rsn_pairwise=CCMP

    #IEEE 802.11u-2011
    #Enable Interworking service
    interworking=1
    access_network_type=4
    internet=1
    asra=1
    esr=1
    uesa=1
    venue_group=2
    venue_type=1
    hessid=00:00:00:00:00:01
    roaming_consortium=01010101
    venue_name=eng:rpi Test Venue
    network_auth_type=02http://192.168.50.10:8001
    ipaddr_type_availability=04
    domain_name=192.168.50.10
    anqp_3gpp_cell_net=055,54
    nai_realm=0,192.168.50.10,13[5:6],21[2:4][5:7]


I have tested the following network_auth_type=02https://www.google.com & network_auth_type=02http://192.168.50.1 with no success.



  1. What exactly happens when a client connects to the my AP on both the RPI and client? I am asking because I would like to somehow catch this behaviour and manually open some browser on the client side.

I am logging all the hostapd and unable to see anything about this interworking running. I am logging by adding DAEMON_OPTS="-dd -t -f /home/pi/hostapd.log" to my /etc/default/hostapd. I am testing the results each time with sudo systemctl status hostapd and don't see any interworking behaviours.



  1. I have seen many RPI captive portal using Nodogsplash project that uses a possible NDS. What is happening here? Is it more then iptable routing? I am working through this project to work through what I am able to use. This project is simply overkill for what I need.


By default, NDS blocks everything, but intercepts port 80 requests.
An initial port 80 request will be generated on a client device, either by the >user manually browsing to an http web page, or automatically by the client >device’s built in Captive Portal Detection (CPD).




Additionally this is the closest thing I can see of someone at least referencing this hostapd in a different environment.










share|improve this question
















I am very excited to use the interworking functionality of hostapd! I aim to do a network redirection once a client connects to my RPI access point. I am following this tutorial for RPI AP. In the hostapd reference The Interworking section contains a possible answer to making a captive portal (without authentication) to open a clients browser and direct it to my node.js server running on port 8001.



 # Network Authentication Type
# This parameter indicates what type of network authentication is used in the
# network.
# format: <network auth type indicator (1-octet hex str)> [redirect URL]
# Network Authentication Type Indicator values:
# 00 = Acceptance of terms and conditions
# 01 = On-line enrollment supported
# 02 = http/https redirection
# 03 = DNS redirection
#network_auth_type=00
#network_auth_type=02http://www.example.com/redirect/me/here/


I have a few questions.



  1. Is there any documentation of RPI AP tests with any interworking functioning? I can't seem to find much. If anyone has tested this let me know!



  2. Do I need other parameters to configure this interworking in my hostapd.conf? Right now I have the following and tested with countless variations adding and removing lines from the ieee802.11u interworking section.



    interface=wlan0 
    driver=nl80211
    ssid=RpiScopeSpot
    hw_mode=g
    channel=7
    wmm_enabled=0
    macaddr_acl=0
    auth_algs=1
    ignore_broadcast_ssid=0
    wpa=2
    wpa_passphrase=rpiscope
    wpa_key_mgmt=WPA-PSK
    wpa_pairwise=TKIP
    rsn_pairwise=CCMP

    #IEEE 802.11u-2011
    #Enable Interworking service
    interworking=1
    access_network_type=4
    internet=1
    asra=1
    esr=1
    uesa=1
    venue_group=2
    venue_type=1
    hessid=00:00:00:00:00:01
    roaming_consortium=01010101
    venue_name=eng:rpi Test Venue
    network_auth_type=02http://192.168.50.10:8001
    ipaddr_type_availability=04
    domain_name=192.168.50.10
    anqp_3gpp_cell_net=055,54
    nai_realm=0,192.168.50.10,13[5:6],21[2:4][5:7]


I have tested the following network_auth_type=02https://www.google.com & network_auth_type=02http://192.168.50.1 with no success.



  1. What exactly happens when a client connects to the my AP on both the RPI and client? I am asking because I would like to somehow catch this behaviour and manually open some browser on the client side.

I am logging all the hostapd and unable to see anything about this interworking running. I am logging by adding DAEMON_OPTS="-dd -t -f /home/pi/hostapd.log" to my /etc/default/hostapd. I am testing the results each time with sudo systemctl status hostapd and don't see any interworking behaviours.



  1. I have seen many RPI captive portal using Nodogsplash project that uses a possible NDS. What is happening here? Is it more then iptable routing? I am working through this project to work through what I am able to use. This project is simply overkill for what I need.


By default, NDS blocks everything, but intercepts port 80 requests.
An initial port 80 request will be generated on a client device, either by the >user manually browsing to an http web page, or automatically by the client >device’s built in Captive Portal Detection (CPD).




Additionally this is the closest thing I can see of someone at least referencing this hostapd in a different environment.







linux networking hostapd






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Feb 14 at 16:29







colin rosati

















asked Feb 13 at 21:20









colin rosaticolin rosati

13




13












  • related: unix.stackexchange.com/questions/386242/… and unix.stackexchange.com/questions/212871/… and unix.stackexchange.com/questions/476701/…

    – Rui F Ribeiro
    Feb 14 at 10:40

















  • related: unix.stackexchange.com/questions/386242/… and unix.stackexchange.com/questions/212871/… and unix.stackexchange.com/questions/476701/…

    – Rui F Ribeiro
    Feb 14 at 10:40
















related: unix.stackexchange.com/questions/386242/… and unix.stackexchange.com/questions/212871/… and unix.stackexchange.com/questions/476701/…

– Rui F Ribeiro
Feb 14 at 10:40





related: unix.stackexchange.com/questions/386242/… and unix.stackexchange.com/questions/212871/… and unix.stackexchange.com/questions/476701/…

– Rui F Ribeiro
Feb 14 at 10:40










0






active

oldest

votes











Your Answer








StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













draft saved

draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f500493%2fwhat-is-hostapd-interworking-how-to-use-it%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes















draft saved

draft discarded
















































Thanks for contributing an answer to Unix & Linux Stack Exchange!


  • Please be sure to answer the question. Provide details and share your research!

But avoid


  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f500493%2fwhat-is-hostapd-interworking-how-to-use-it%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown






Popular posts from this blog

Peggy Mitchell

Palaiologos

The Forum (Inglewood, California)