Re: use_pae_group_addr=1

The PAE group address is a special multicast MAC address that wired
supplicants will listen for when they want to start authentication
with an 802.1X authenticator (hostapd).  When hostapd detects a new
wired connection, it will send an EAP-REQUEST-IDENTITY frame to this
special MAC address when use_pae_group_addr=1.

For a wireless supplicant, hostapd would not use this special MAC
address, because it uses the STA MAC address from the 802.11
association request.

If you want to allow multiple wired supplicants on the same Ethernet
port, then I think you need to define a list of wired supplicant MAC
addresses in an Access Control List (I have not tried this).




On Tue, Apr 21, 2020 at 10:55 AM <[email protected]> wrote:
>
> Hi,
>
> What does this mean:
>
>     ...Means that port is blocked as long one station uses this?
>     use_pae_group_addr=1
>
>
> Means it, that port is blocked as long as a station uses this? Is this
> only during authentication the case. Or is it blocked for the hole time
> of authenticated status?
>
> What should I use if I want to authenticate stations via hostapd against
> a freeradius server on wired way?
>
> Thanks,
>
> Erwin
>
>
>
>
> _______________________________________________
> Hostap mailing list
> [email protected]
> http://lists.infradead.org/mailman/listinfo/hostap