Configuring WPA for Free BSD
This configuration guide is for a user who would like to connect their laptop running FreeBSD 6.0 to the LBLnet secured wireless network. The instructions are specific to laptops running FreeBSD 6.0 kernel and equipped with Cisco Aironet 802.11 a/b/g wireless adapter (AIR-CB21AG-A-K9), though they may apply to other similar operating systems.
...
From hereafter, we assume a functional FreeBSD 6.0 laptop with the Cisco Aironet wireless adapter, the login user is root and home directory is /root.
The /boot/loader.conf file
Add the following two lines to the loader.conf file:
...
These two lines load the crypto services support that is required for the secured wireless connection. The CCMP module provides AES-CCMP crypto support and the TKIP module provides TKIP+Michael crypto support for 802.11 devices.
Build the wpa_supplicant from FreeBSD ports collection
Before building the wpa_supplicant software form the ports collection, take time to verify that there is no other wpa_supplicant installed with the "user" distribution set. The default wpa_supplicant may not be built with the required EAP support.
...
Note that you will need a separate network block for each of the SSID you intend to connect to.
Click here to download the latest LBL certificate (August 2017)
(In some browsers, you may have to right-click and choose Save Link As...)
This file is required for the TTLS tunnel ssl encryption. Please make sure that the file is placed in the directory as specified in the wpa_supplicant.conf ca_cert directive.
Verification
If you would like to verify the authenticity of this file, you can use the below:
...
# openssl x509 -noout -in rad.lbl.gov.crt -fingerprint -sha1
SHA1 Fingerprint=2F:6F:1B:4D:D0:47:58:BD:1B:E7:6B:64:B0:D1:7C:37:34:85:15:7A
Connect to the LBLnet Secured Wireless Network
To connect to the LBLnet secured wireless network, bring up the wireless network interface and run the wpa_supplicant software in background mode. After successful AP association and authentication, request the client network IP from LBLnet using the dhclient. The commands are as follow:
...
