Hostapd

Hostapd

cat /etc/apt/sources.list

deb http://ftp.debian.org/debian/ buster main contrib non-free
deb-src http://ftp.debian.org/debian/ buster main contrib non-free

deb http://security.debian.org/debian-security buster/updates main contrib non-free
deb-src http://security.debian.org/debian-security buster/updates main contrib non-free

deb http://ftp.debian.org/debian/ buster-updates main contrib non-free
deb-src http://ftp.debian.org/debian/ buster-updates main contrib non-free

deb http://deb.debian.org/debian buster-backports main contrib non-free

apt update 
apt install iw lshw hostapd bridge-utils firmware-misc-nonfree 

apt -y install haveged
systemctl start haveged
systemctl enable haveged
cat /proc/sys/kernel/random/entropy_avail

lsusb
...
Bus 002 Device 002: ID 148f:3070 Ralink Technology, Corp. RT2870/RT3070 Wireless Adapter
...

iw list
...
        Supported interface modes:
                 * IBSS
                 * managed
                 * AP
                 * AP/VLAN
                 * monitor
                 * mesh point

...

vi /etc/default/grub
GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0"

update-grub

vi /etc/network/interfaces

allow-hotplug eth0
iface eth0 inet manual

auto br0
iface br0 inet static
        address 192.168.0.143
        netmask 255.255.255.0
        gateway 192.168.0.1
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0
        bridge_maxwait 0

• WPA-PSK

vi /etc/hostapd/hostapd.conf

interface=wlan0
bridge=br0
driver=nl80211
ssid=ssidname
utf8_ssid=1
preamble=1
hw_mode=g
ieee80211n=1
wmm_enabled=1
country_code=US
channel=6
macaddr_acl=0
ignore_broadcast_ssid=0
auth_algs=1
wpa=3
wpa_passphrase=passwd
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP

• EAP-PEAP

apt -y install ssl-cert
make-ssl-cert generate-default-snakeoil --force-overwrite

#wpa_key_mgmt=WPA-PSK
#wpa_key_mgmt=WPA-EAP
wpa_key_mgmt=WPA-PSK WPA-EAP

ieee8021x=1
eapol_version=2
eap_server=1
eap_user_file=/etc/hostapd/hostapd.eap_user
server_cert=/etc/ssl/certs/ssl-cert-snakeoil.pem
private_key=/etc/ssl/private/ssl-cert-snakeoil.key

vi /etc/hostapd/hostapd.eap_user

*  PEAP
"user1"  MSCHAPV2  "password"  [2]
"user2"  MSCHAPV2  "password"  [2]