Feature #374

Add mac address filtering to hostapd config

Added by Hammel almost 6 years ago. Updated over 5 years ago.

Status:ClosedStart date:10 Aug 2014
Priority:ImmediateDue date:
Assignee:Hammel% Done:

100%

Category:04 - Root File System
Target version:0.10.0
Severity:03 - Medium

Description

See this config example and search for macaddr_acl to see how to use it.

Related issues

Related to piboxwww - Bug #409: Missing hostapd values on save Closed 09 Dec 2014

Associated revisions

Revision 2fe6105d
Added by Hammel over 5 years ago

RM #374: Added MA_MFENABLE, MA_MFLIST and MA_RESTART actions for MT_NET.

Revision 507c3bf9
Added by Hammel over 5 years ago

RM #374: Added support for MA_MFENABLE, MA_MFLIST and MA_RESTART actions for MT_NET.

Revision 8f7d489b
Added by Hammel over 5 years ago

RM #374: Add support for mac filtering in hostapd.

Revision 522247f9
Added by Hammel over 5 years ago

RM #374: Added support for setting MAC ACLs.

Revision 439a6cba
Added by Hammel over 5 years ago

RM #374: Changed MA_MFLIST to support a new subAction field for get/set options.

Revision e8b01b84
Added by Hammel over 5 years ago

RM #374: Added support for retrieving the MAC ACL list for the caller.

History

#1 Updated by Hammel almost 6 years ago

  • Priority changed from Urgent to Immediate

#2 Updated by Hammel over 5 years ago

  • Status changed from New to In Progress
  • % Done changed from 0 to 10
Here's what needs to be done.
  1. In bui/web Access Point tab
    1. Add: Enable MAC Filtering checkbutton
      1. If enabled, read accept_mac_file
      2. If disbled, clear input fields
    2. Add: list of 5-8 device input fields (limited to avoid scrolling in the app)
  2. In hostapd.conf, ia MAC Filtering is enabled
    1. Add: macaddr_acl=1 (Deny unless in list)
    2. Add: accept_mac_file=/etc/hostapd.accept
    3. Update: save() tests if filtering enabled
      1. If enabled, rewrite accept_mac_file
      2. If enabled, restart hostapd

#3 Updated by Hammel over 5 years ago

  • % Done changed from 10 to 50

The code is implemented in both javascript/php and in piboxd. The creation of the accept file is working but the macaddr_acl=? change is not because of RM #409. I need to fix that one before I can finish this one.

#4 Updated by Hammel over 5 years ago

  • % Done changed from 50 to 80

RM #409 is fixed and this fixes the problem with the missing macaddr_acl=? line.

Only thing that's missing now is showing the mac address list on entry to the hostap tab if mac acl is already enabled. This would be handled with a modification to the setTab() function in settings.js.

#5 Updated by Hammel over 5 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 80 to 100

Added support for showing the mac acl list on first entry to the access point tab depending on whether or not its currently enabled.
All updates tested on target, committed, and pushed.
That completes this feature. Closing issue.

Also available in: Atom PDF