Cqure AP README
----------------------------------------------------------------------
Here are some very brief instruction on how to compile/setup cqure AP
If you don't succeed please drop me a line and I will try to make
this documentation more usefull.

Configuration
-------------
You will find most settings in the cqureap.conf file in the floppy
root.

Passwords
---------
The AP comes with two default accounts cqureap and root. Both have
cqureap as initial password. This should ofcourse be changed! To
keep the changes across reboots copy the shadow file to the etc 
directory in the root of the floppy.

The contents of the etc directory on the floppy get copied to the
etc of the rootfs at boot time.

Firewalling
-----------
There is a minimal firewall script that *only* enables MASQUERADING.
It does not secure anything at all, and needs to be modified!

802.1X
------
The AP now supports 802.1X. To be able to authenticate stations a
radius server is needed. The radius server should be accessible by
the AP on the wired segment and needs to be set up according to the
"8021X - Radius" chapter.

802.1X - Radius
---------------
Set up the radius server according to the following documentation:
http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm

I am running the latest stable version of FreeRADIUS instead of the
snapshot mentioned in the document. This works great allthough you
still nead to make the adjustments to the Makefile mentioned. The
version of FreeRADIUS at the time of writing is 0.8.1.

I have not successfully been able to generate the certificates needed
with any version later than openssl-0.9.7-beta3 including the latest
stable version (0.9.7). So stick to the beta version until this is
resolved.

Furthermore I had to set the fragment size to 20 instead of 1024
which the document states. I have not looked in to this any deeper
it simply did not work with the value set to 1024 and worked with
10 or 20.

Compile - Instructions (Source Release Only)
--------------------------------------------
1. Download uClibc from http://www.uclibc.org
2. Configure/Compile/Install uClibc
3. Download a suitable kernel (e.g 2.4.20) from www.kernel.org
4. Unpack the kernel into the src directory and create a linux symlink
5. Update the KERNELVERSION variable to the correct version in the
   Makefile
6. make kernelfixup
7. make kernel
8. Make sure that when running the compiler and 
   linker uClibc binaries are used (export PATH=/uclibcpath:$PATH)
9. make all

Only the packages are recompiled when issuing a 'make all'
To recompile busybox, tinytty etc. look inside the Makefile

Good Luck !
//patrik

----Patrik Karlsson---------------------------------------------------
http://www.cqure.net
patrik@cqure.net
----------------------------------------------------------------------