mirror of
https://github.com/Telecominfraproject/wlan-lanforge-scripts.git
synced 2025-10-30 10:22:34 +00:00
Version of lf_wifi_fire that creates EAP-TLS 802.1x authenticated station
This commit is contained in:
Jed Reynolds
234
lf_wifi_dot1x.bash
Executable file
234
lf_wifi_dot1x.bash
Executable file
@@ -0,0 +1,234 @@
|
||||
#!/bin/bash
|
||||
|
||||
# This script is an attempt to simplify the creation of stations and connections for said stations.
|
||||
# One UDP connection will be created for each station.
|
||||
# The number of stations, station SSID, encryption type and passphrase, number of packets to send, and transmit rates
|
||||
# can all be configured with the below options.
|
||||
# Required values are SSID, radio, and upstream port.
|
||||
# Note: The upstream port will be designated to Endpoint A and station to Endpoint B.
|
||||
# -m Manager IP or hostname.
|
||||
# -r Resource number.
|
||||
# -w Which radio to use i.e. wiphy0 wiphy1 etc.
|
||||
# -n Number of stations to create.
|
||||
# -s SSID for stations.
|
||||
# -e Encryption type: open|wep|wpa|wpa2.
|
||||
# -k Passphrase for when AP is encrypted.
|
||||
# -a The upstream port to which station(s) will connect.
|
||||
# -A Transmit rate from upstream port.
|
||||
# -B Transmit rate from station.
|
||||
# -p Number of default UDP sized packets to send.
|
||||
# -h Help information.
|
||||
|
||||
# Example usage:
|
||||
# ./lf_wifi_fire.bash -m lf0350-1234 -r 1 -w wiphy0 -n 40 -s test-SSID -e wpa2 -k hello123 -a eth1 -A 56000 -B 2000000 -p 10000
|
||||
|
||||
set -e
|
||||
#set -u
|
||||
set -o pipefail
|
||||
|
||||
clilog="--log_cli /tmp/clilog.txt"
|
||||
|
||||
#default values
|
||||
mgr=localhost
|
||||
resource=1
|
||||
num_stas=40
|
||||
num_packets=Infinite
|
||||
encryption=open
|
||||
passphrase='[BLANK]'
|
||||
rate_A=1000000
|
||||
rate_B=1000000
|
||||
|
||||
#other variables
|
||||
first_sta=100
|
||||
flag_radio=false
|
||||
flag_ssid=false
|
||||
flag_port=false
|
||||
|
||||
show_help="This script is an attempt to simplify the creation of stations and connections for said stations.
|
||||
One UDP connection will be created for each station.
|
||||
The number of stations, station SSID, encryption type and passphrase, number of packets to send, and transmit rates
|
||||
can all be configured with the below options.
|
||||
Required values are SSID, radio, and upstream port.
|
||||
Note: The upstream port will be designated to Endpoint A and station to Endpoint B.
|
||||
-m Manager IP or hostname.
|
||||
-r Resource number.
|
||||
-w Which radio to use i.e. wiphy0 wiphy1 etc.
|
||||
-n Number of stations to create.
|
||||
-s SSID for stations.
|
||||
-e Encryption type: open|wep|wpa|wpa2.
|
||||
-k Passphrase for when AP is encrypted.
|
||||
-a The upstream port to which station(s) will connect.
|
||||
-A Transmit rate from upstream port.
|
||||
-B Transmit rate from station.
|
||||
-p Number of default UDP sized packets to send.
|
||||
-h Help information.
|
||||
|
||||
Example usage:
|
||||
./lf_wifi_fire.bash -m lf0350-1234 -r 1 -w wiphy0 -n 40 -s test-SSID -e wpa2 -k hello123 -a eth1 -A 56000 -B 2000000 -p 10000"
|
||||
|
||||
while getopts 'm:r:n:p:a:e:k:w:s:A:B:h' OPTION; do
|
||||
case "$OPTION" in
|
||||
m)
|
||||
#manager
|
||||
mgr="$OPTARG"
|
||||
;;
|
||||
r)
|
||||
#resource
|
||||
resource="$OPTARG"
|
||||
;;
|
||||
n)
|
||||
#num stations
|
||||
num_stas="$OPTARG"
|
||||
;;
|
||||
p)
|
||||
#packets
|
||||
num_packets="$OPTARG"
|
||||
;;
|
||||
a)
|
||||
#upstream port
|
||||
flag_port=true
|
||||
port_A="$OPTARG"
|
||||
;;
|
||||
e)
|
||||
#encryption
|
||||
encryption="$OPTARG"
|
||||
;;
|
||||
k)
|
||||
#encryption passphrase
|
||||
passphrase="$OPTARG"
|
||||
;;
|
||||
w)
|
||||
#radio
|
||||
flag_radio=true
|
||||
radio="$OPTARG"
|
||||
;;
|
||||
s)
|
||||
#ssid
|
||||
flag_ssid=true
|
||||
ssid="$OPTARG"
|
||||
;;
|
||||
A)
|
||||
#transmit rate for endpoint A
|
||||
rate_A="$OPTARG"
|
||||
;;
|
||||
B)
|
||||
#transmit rate for endpoint B
|
||||
rate_B="$OPTARG"
|
||||
;;
|
||||
h)
|
||||
#send help message
|
||||
echo "$show_help"
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
done
|
||||
shift "$(($OPTIND -1))"
|
||||
|
||||
#check for required getopts
|
||||
if [ "$flag_ssid" = false ] || [ "$flag_radio" = false ] || [ "$flag_port" = false ] ;
|
||||
then
|
||||
echo "Please provide at minimum the upstream port (-a), ssid (-s), and radio (-w). Run the script with -h for more information."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "Deleting old stations."
|
||||
./lf_associate_ap.pl --mgr $mgr --resource $resource $clilog --action del_all_phy --port_del $radio
|
||||
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource --quiet yes --action do_cmd $clilog \
|
||||
--cmd "nc_show_ports 1 $resource all 1" &>/dev/null
|
||||
|
||||
sleep 2
|
||||
|
||||
echo "Creating new stations."
|
||||
./lf_associate_ap.pl --mgr $mgr --resource $resource $clilog \
|
||||
--ssid $ssid --security $encryption --passphrase $passphrase \
|
||||
--num_stations $num_stas --first_sta "sta$first_sta" \
|
||||
--first_ip DHCP --radio $radio --action add --xsec use-dot1x
|
||||
|
||||
|
||||
|
||||
sleep 2
|
||||
|
||||
key_mgt="WPA-EAP"
|
||||
pairwise="CCMP"
|
||||
group="CCMP"
|
||||
psk=NA
|
||||
key=NA
|
||||
ca_cert="/home/lanforge/apu2-a-ca.pem"
|
||||
eap="TLS"
|
||||
identity="lanforge@lanforge.com"
|
||||
anon_id=NA
|
||||
phase1=NA
|
||||
phase2=NA
|
||||
eap_passwd=eap_passwd
|
||||
pin=NA
|
||||
pac_file=NA
|
||||
private_key="/home/lanforge/apu2-a-client.p12"
|
||||
pk_passwd="lanforge"
|
||||
hessid=NA
|
||||
realm=NA
|
||||
client_cert=NA
|
||||
imsi=NA
|
||||
milenage=NA
|
||||
domain=NA
|
||||
roaming_consortium=NA
|
||||
venue_group=NA
|
||||
venue_type=NA
|
||||
network_type=NA
|
||||
ipaddr_type_avail=NA
|
||||
network_auth_type=NA
|
||||
anqp_3gpp_cell_net=NA
|
||||
|
||||
for n in `seq $first_sta $(($first_sta -1 + $num_stas))` ; do
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog --action do_cmd --cmd \
|
||||
"set_wifi_extra 1 $resource sta$n $key_mgt $pairwise $group $psk $key $ca_cert $eap $identity $anon_id $phase1 $phase2 $eap_passwd $pin $pac_file $private_key $pk_passwd $hessid $realm $client_cert"
|
||||
done
|
||||
|
||||
function new_cx(){
|
||||
local cx=$1
|
||||
local portA=$2
|
||||
local portB=$3
|
||||
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog \
|
||||
--action create_endp --endp_name "$cx-A" --port_name $portA \
|
||||
--speed $rate_A --endp_type lf_udp --report_timer 1000
|
||||
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog \
|
||||
--action create_endp --endp_name "$cx-B" --port_name $portB \
|
||||
--speed $rate_B --endp_type lf_udp --report_timer 1000
|
||||
|
||||
./lf_firemod.pl --mgr $mgr $clilog --action create_cx --cx_name $cx --cx_endps "$cx-A,$cx-B" --report_timer 1000
|
||||
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog --quiet yes --action do_cmd \
|
||||
--cmd "set_endp_details $cx-A NA NA NA $num_packets" &>/dev/null
|
||||
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog --quiet yes --action do_cmd \
|
||||
--cmd "set_endp_details $cx-B NA NA NA $num_packets" &>/dev/null
|
||||
}
|
||||
|
||||
# Delete all connections and endpoints that have 'bg' in the name
|
||||
echo "Deleting old connections."
|
||||
cx_array=( `./lf_firemod.pl --mgr $mgr --resource $resource $clilog --action list_cx | awk '/bg/ { print $ 2 }' | sed 's/,$//'` )
|
||||
for i in "${cx_array[@]}"
|
||||
do
|
||||
:
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog --action delete_cx --cx_name $i
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog --action delete_endp --endp_name "$i-A"
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog --action delete_endp --endp_name "$i-B"
|
||||
done
|
||||
|
||||
./lf_firemod.pl --mgr $mgr --resource $resource $clilog --quiet yes --action do_cmd --cmd 'nc_show_endpoints all' &>/dev/null
|
||||
|
||||
sleep 5
|
||||
|
||||
echo "Creating new connections."
|
||||
last_sta=$((first_sta + num_stas - 1))
|
||||
for i in `seq $first_sta $last_sta`; do
|
||||
new_cx bg$i $port_A sta$i
|
||||
done
|
||||
|
||||
echo "All stations and connections have been created."
|
||||
|
||||
/lf_firemod.pl --mgr $mgr --resource $resource $clilog --quiet yes --action do_cmd --cmd 'nc_show_endpoints all' &>/dev/null
|
||||
|
||||
#
|
||||
Reference in New Issue
Block a user