iwconfig manipulate the basic wireless parameters iwlist initiate scanning and list frequencies, bit-rates, encryption keys... iwspy get per node link quality iwpriv manipulate the Wireless Extensions specific to a driver (private) ifrename allow to name interfaces based on various static criteria ================================= WAP - Wireless Access Point WPA - Wi-Fi Protected Access PSK - Pre-Shared Key TKIP - Temporal Key Integrity Protocol EAP - Extensible Authentication Protocol EAP-MD5 - MD5-hash-based credentials (poor chice for 802.1x auth in WPA context) EAP-TLS - TLS (descendant of SSL) encrypt. protocol; strong: uses digital certs. PEAP - Protected EAP (Microsoft, weak auth for MD5 and MS-CHAP) MS centric! EAP-TTLS - non-MS drivenalternative to PEAP. LEAP - Cisco Lightweight EAP EAP-SIM - MS's EAP-MSCHAPv2 PKI - Public Key Infrastructure WPA (Protocols) | |---> Authentication: 802.1x | | | |---> EAP-TLS | |---> EAP-MD5 | |---> PEAP | |---> EAP-TTLS | |---> (etc.) | ----> Encryption: TKIP ===== scan net for rouge WAPs nmap -A -p1-85,113,443,8080-8100 -T4 --min-hostgroup 50 --max-rtt-timeout 2000 --initial-rtt-timeout 300 --max-retries 3 --host-timeout 20m --max-scan-delay 1000 -oA wapscan 10.0.0.0/8 iwconfig wlan0 essid Network_Name iwconfig wlan0 key off iwconfig wlan0 key yourwpakey dhclient wlan0 ===== dedicated hardware wireless bridge iface eth0 inet static address 192.168.1.99 netmask 255.255.255.0 pointopoint 192.168.1.226 poin-to-point address is the default address of the bridge When done configuring the bridge, /etc/networking/interfaces can be restored to iface eth0 inet dhcp