LinuxQuestions.org - How to configure hostapd 0.5.8, so it would work with dynamic WEP??

What do you have for this section in your hostapd.conf:
Code:
##### IEEE 802.1X-2004 related configuration ##################################



# Require IEEE 802.1X authorization

#ieee8021x=1



# IEEE 802.1X/EAPOL version

# hostapd is implemented based on IEEE Std 802.1X-2004 which defines EAPOL

# version 2. However, there are many client implementations that do not handle

# the new version number correctly (they seem to drop the frames completely).

# In order to make hostapd interoperate with these clients, the version number

# can be set to the older version (1) with this configuration value.

#eapol_version=2



# Optional displayable message sent with EAP Request-Identity. The first \0

# in this string will be converted to ASCII-0 (nul). This can be used to

# separate network info (comma separated list of attribute=value pairs); see,

# e.g., RFC 4284.

#eap_message=hello

#eap_message=hello\0networkid=netw,nasid=foo,portid=0,NAIRealms=example.com



# WEP rekeying (disabled if key lengths are not set or are set to 0)

# Key lengths for default/broadcast and individual/unicast keys:

# 5 = 40-bit WEP (also known as 64-bit WEP with 40 secret bits)

# 13 = 104-bit WEP (also known as 128-bit WEP with 104 secret bits)

#wep_key_len_broadcast=5

#wep_key_len_unicast=5

# Rekeying period in seconds. 0 = do not rekey (i.e., set keys only once)

#wep_rekey_period=300



# EAPOL-Key index workaround (set bit7) for WinXP Supplicant (needed only if

# only broadcast keys are used)

eapol_key_index_workaround=0



# EAP reauthentication period in seconds (default: 3600 seconds; 0 = disable

# reauthentication).

#eap_reauth_period=3600



# Use PAE group address (01:80:c2:00:00:03) instead of individual target

# address when sending EAPOL frames with driver=wired. This is the most common

# mechanism used in wired authentication, but it also requires that the port

# is only used by one station.

#use_pae_group_addr=1



##### Integrated EAP server ###################################################



# Optionally, hostapd can be configured to use an integrated EAP server

# to process EAP authentication locally without need for an external RADIUS

# server. This functionality can be used both as a local authentication server

# for IEEE 802.1X/EAPOL and as a RADIUS server for other devices.



# Use integrated EAP server instead of external RADIUS authentication

# server. This is also needed if hostapd is configured to act as a RADIUS

# authentication server.

eap_server=0



# Path for EAP server user database

#eap_user_file=/etc/hostapd.eap_user



# CA certificate (PEM or DER file) for EAP-TLS/PEAP/TTLS

#ca_cert=/etc/hostapd.ca.pem



# Server certificate (PEM or DER file) for EAP-TLS/PEAP/TTLS

#server_cert=/etc/hostapd.server.pem



# Private key matching with the server certificate for EAP-TLS/PEAP/TTLS

# This may point to the same file as server_cert if both certificate and key

# are included in a single file. PKCS#12 (PFX) file (.p12/.pfx) can also be

# used by commenting out server_cert and specifying the PFX file as the

# private_key.

#private_key=/etc/hostapd.server.prv



# Passphrase for private key

#private_key_passwd=secret passphrase



# Enable CRL verification.

# Note: hostapd does not yet support CRL downloading based on CDP. Thus, a

# valid CRL signed by the CA is required to be included in the ca_cert file.

# This can be done by using PEM format for CA certificate and CRL and

# concatenating these into one file. Whenever CRL changes, hostapd needs to be

# restarted to take the new CRL into use.

# 0 = do not verify CRLs (default)

# 1 = check the CRL of the user certificate

# 2 = check all CRLs in the certificate path

#check_crl=1



# dh_file: File path to DH/DSA parameters file (in PEM format)

# This is an optional configuration file for setting parameters for an

# ephemeral DH key exchange. In most cases, the default RSA authentication does

# not use this configuration. However, it is possible setup RSA to use

# ephemeral DH key exchange. In addition, ciphers with DSA keys always use

# ephemeral DH keys. This can be used to achieve forward secrecy. If the file

# is in DSA parameters format, it will be automatically converted into DH

# params. This parameter is required if anonymous EAP-FAST is used.

# You can generate DH parameters file with OpenSSL, e.g.,

# "openssl dhparam -out /etc/hostapd.dh.pem 1024"

#dh_file=/etc/hostapd.dh.pem



# Fragment size for EAP methods

#fragment_size=1400



# Finite cyclic group for EAP-pwd. Number maps to group of domain parameters

# using the IANA repository for IKE (RFC 2409).

#pwd_group=19



# Configuration data for EAP-SIM database/authentication gateway interface.

# This is a text string in implementation specific format. The example

# implementation in eap_sim_db.c uses this as the UNIX domain socket name for

# the HLR/AuC gateway (e.g., hlr_auc_gw). In this case, the path uses "unix:"

# prefix.

#eap_sim_db=unix:/tmp/hlr_auc_gw.sock



# Encryption key for EAP-FAST PAC-Opaque values. This key must be a secret,

# random value. It is configured as a 16-octet value in hex format. It can be

# generated, e.g., with the following command:

# od -tx1 -v -N16 /dev/random | colrm 1 8 | tr -d ' '

#pac_opaque_encr_key=000102030405060708090a0b0c0d0e0f



# EAP-FAST authority identity (A-ID)

# A-ID indicates the identity of the authority that issues PACs. The A-ID

# should be unique across all issuing servers. In theory, this is a variable

# length field, but due to some existing implementations requiring A-ID to be

# 16 octets in length, it is strongly recommended to use that length for the

# field to provid interoperability with deployed peer implementations. This

# field is configured in hex format.

#eap_fast_a_id=101112131415161718191a1b1c1d1e1f



# EAP-FAST authority identifier information (A-ID-Info)

# This is a user-friendly name for the A-ID. For example, the enterprise name

# and server name in a human-readable format. This field is encoded as UTF-8.

#eap_fast_a_id_info=test server



# Enable/disable different EAP-FAST provisioning modes:

#0 = provisioning disabled

#1 = only anonymous provisioning allowed

#2 = only authenticated provisioning allowed

#3 = both provisioning modes allowed (default)

#eap_fast_prov=3



# EAP-FAST PAC-Key lifetime in seconds (hard limit)

#pac_key_lifetime=604800



# EAP-FAST PAC-Key refresh time in seconds (soft limit on remaining hard

# limit). The server will generate a new PAC-Key when this number of seconds

# (or fewer) of the lifetime remains.

#pac_key_refresh_time=86400



# EAP-SIM and EAP-AKA protected success/failure indication using AT_RESULT_IND

# (default: 0 = disabled).

#eap_sim_aka_result_ind=1



# Trusted Network Connect (TNC)

# If enabled, TNC validation will be required before the peer is allowed to

# connect. Note: This is only used with EAP-TTLS and EAP-FAST. If any other

# EAP method is enabled, the peer will be allowed to connect without TNC.

#tnc=1