#
# cqure.net Access Point configuration file
# Created by: Patrik Karlsson 2002-10-02
#
##################################

##################################
#
# Global params
#
##################################

#
# AP_MODE=<mode>
#
# Where mode is: bridge or gateway
#
AP_MODE="gateway"
#AP_MODE="bridge"

#
# Should we run a administrative TELNET server ?
# OFF for security reasons, enable only if needed
#
TELNET_SERVER="no"

#
# DHCP_SERVER=<yes|no>
#
# Act as a DHCP server on the wireless interface
#
DHCP_SERVER="yes"

DHCPD_START_IP="192.168.1.100"
DHCPD_END_IP="192.168.1.200"
DHCPD_IF="wlan0"
DHCPD_DNS1="10.0.0.1"
DHCPD_DNS2="10.0.0.2"
DHCPD_SUBNET="255.255.255.0"
DHCPD_ROUTER="192.168.111.254"
DHCPD_WINS="192.168.1.10"
DHCPD_DOMAIN="local"
DHCPD_LEASE="864000"

#
# DHCP_FORWARD=<yes|no>
#
# Forward DHCP traffic to wireless segment from ethernet segment
#
DHCP_FORWARD="no"

##################################
#
# Wireless parameters
#
##################################

#
# WI_DEV=<interface>
#
# Where interface is: wlan0, eth0
#
WI_DEV="wlan0"

#
# WI_ESSID=<netname>
#
# The name of the wireless network
#
WI_ESSID="cqureap"

#
# WI_CHANNEL=<channel>
#
#
WI_CHANNEL="3"

#
# WI_WEP=<wepkey>
#
# Where wepkey is: key, none
#
# Use the keyword none to disable WEP
# Prefix with s: to enter WEP key as text
#
WI_WEP="s:12345"

#
# WI_RATE=<rate>
#
# Where rate is: 2, 5, 11 or auto
#
WI_RATE="auto"

#
# WI_IP=<ip|dhcp>
#
# Assign an IP address to the wireless interface
#
WI_IP="192.168.1.1"
#WI_IP="dhcp"
WI_MASK="255.255.255.0"


##################################
#
# Ethernet parameters
#
##################################

#
# ETH_DEV=<device>
#
ETH_DEV="eth0"

#
# IF eth0 is builtin (not PCMCIA) what driver does it need ?
# Make sure this driver is included in an additional package
# if it is not one of the following:
#
# Realtek, Ethernet Express Pro 10/100
#
#ETH_DRIVER="8139too"

#
# ETH_IP=<ip|dhcp>
#
# Assign an IP address to the ethernet interface
#
ETH_IP="192.168.111.254"
ETH_MASK="255.255.255.0"
#ETH_IP="dhcp"

##################################
#
# 802.1X parameters
#
##################################

# Should we enable 802.1X (yes/no)
802_1XENABLED="no"

# Wep key length 5=40 bit 13=104 bit
802_1XWEPLEN="5"

# Use 802.1X broadcast or unicast wep keys ?
# 802_1XKEYMODE="broadcast"

# IP address to freeradius server configured according to
# http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm
# See README file for information about changes needed to this
# document ...
802_1XRADIUSIP="192.168.111.10"
802_1XRADIUSPORT="1812"

# Source IP querying the Radius server
# Set this to dhcp if you wan't to automatically discover this
# Don't forget to set 802_1XRADIUSNASIF if you use dhcp
802_1XRADIUSNASIP="192.168.111.254"
802_1XRADIUSNASIF="eth0"

# Shared secret with authentication server
# This has to match the password set up on your radius server !
802_1XRADIUSSECRET="cqureap"

##################################
#
# DNS & Default Gateway
#
##################################

#
# DNS1=<ip|dhcp>
# DNS2=<ip|dhcp>
# DEFGW=<ip|dhcp>
#
# If an IPaddress is used it overrides the dhcp entries
#

DNS1="10.0.0.1"
DNS2="10.0.0.2"

DEFGW="192.168.1.254"

##################################
#
# Firewall parameters
#
##################################

#
# FIREWALL_SCRIPT=<path to fw bash script>
#

FIREWALL_SCRIPT="/etc/rc.d/rc.firewall"

