wifi-scripts: enforce management frame protection on 6 GHz
authorFelix Fietkau <nbd@nbd.name>
Wed, 11 Jun 2025 09:34:16 +0000 (11:34 +0200)
committerFelix Fietkau <nbd@nbd.name>
Sat, 21 Jun 2025 18:34:12 +0000 (20:34 +0200)
Configurations that don't enforce it are rejected by hostapd

Signed-off-by: Felix Fietkau <nbd@nbd.name>
package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh

index f4a7c71bea1aa44345e94fab5620394655133eeb..f15e7f1b43ed508731fd68cc8e20983f0af91631 100644 (file)
@@ -691,7 +691,11 @@ hostapd_set_bss_options() {
                        [ "$ppsk" -eq 0 ] && set_default sae_pwe 2
                ;;
                psk-sae|eap-eap2)
-                       set_default ieee80211w 1
+                       if [ "$band" = 6g ]; then
+                               set_default ieee80211w 2
+                       else
+                               set_default ieee80211w 1
+                       fi
                        set_default sae_require_mfp 1
                        [ "$ppsk" -eq 0 ] && set_default sae_pwe 2
                ;;