Make hostapd_for_each_interface() take context pointer as argument

[libeap.git] / hostapd / README-WPS

diff --git a/hostapd/README-WPS b/hostapd/README-WPS
index 59848bd..e0e370b 100644 (file)
--- a/hostapd/README-WPS
+++ b/hostapd/README-WPS
@@ -48,9 +48,9 @@ hostapd includes an optional WPS component that can be used as an
 internal WPS Registrar to manage addition of new WPS enabled clients
 to the network. In addition, WPS Enrollee functionality in hostapd can
 be used to allow external WPS Registrars to configure the access
-point, e.g., for initial network setup. The current version of hostapd
-does not support use of external WPS Registrars for adding new client
-devices.
+point, e.g., for initial network setup. In addition, hostapd can proxy a
+WPS registration between a wireless Enrollee and an external Registrar
+(e.g., Microsoft Vista or Atheros JumpStart) with UPnP.
 
 
 hostapd configuration
@@ -64,6 +64,7 @@ CONFIG_DRIVER_MADWIFI=y
 CFLAGS += -I/usr/src/madwifi-0.9.3
 CONFIG_EAP=y
 CONFIG_WPS=y
+CONFIG_WPS_UPNP=y
 
 
 Following section shows an example runtime configuration
@@ -106,6 +107,10 @@ device_type=6-0050F204-1
 os_version=01020300
 config_methods=label display push_button keypad
 
+# if external Registrars are allowed, UPnP support could be added:
+#upnp_iface=br0
+#friendly_name=WPS Access Point
+
 
 External operations
 -------------------
@@ -160,10 +165,17 @@ Example command to add a PIN (12345670) for an Enrollee:
 hostapd_cli wps_pin 53b63a98-d29e-4457-a2ed-094d7e6a669c 12345670
 
 If the UUID-E is not available (e.g., Enrollee waits for the Registrar
-to be selected before connecting), wildcard UUID may be used to allow the PIN to be used once with any UUID:
+to be selected before connecting), wildcard UUID may be used to allow
+the PIN to be used once with any UUID:
 
 hostapd_cli wps_pin any 12345670
 
+To reduce likelihood of PIN being used with other devices or of
+forgetting an active PIN available for potential attackers, expiration
+time can be set for the new PIN:
+
+hostapd_cli wps_pin any 12345670 300
+
 
 After this, the Enrollee can connect to the AP again and complete WPS
 negotiation. At that point, a new, random WPA PSK is generated for the