tests: WPA2-Enterprise connection using MAC ACL

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/tests/hwsim/auth_serv/eap_user.conf b/tests/hwsim/auth_serv/eap_user.conf
index 4debe48..3738e6c 100644 (file)
--- a/tests/hwsim/auth_serv/eap_user.conf
+++ b/tests/hwsim/auth_serv/eap_user.conf
@@ -49,6 +49,7 @@ radius_accept_attr=27:d:3
 "020000000000" MACACL  "020000000000"
 
 "020000000100" MACACL  "020000000100"
+radius_accept_attr=1:s:test-user
 radius_accept_attr=89:s:macacl-cui-test
 
 "0232010000000000@ttls"        TTLS,AKA

diff --git a/tests/hwsim/test_ap_eap.py b/tests/hwsim/test_ap_eap.py
index 6fa78c0..628a546 100644 (file)
--- a/tests/hwsim/test_ap_eap.py
+++ b/tests/hwsim/test_ap_eap.py
@@ -3308,3 +3308,12 @@ def test_ap_wpa2_eap_tls_oom(dev, apdev):
                 raise Exception("No passphrase request")
             dev[0].request("REMOVE_NETWORK all")
             dev[0].wait_disconnected()
+
+def test_ap_wpa2_eap_tls_macacl(dev, apdev):
+    """WPA2-Enterprise connection using MAC ACL"""
+    params = hostapd.wpa2_eap_params(ssid="test-wpa2-eap")
+    params["macaddr_acl"] = "2"
+    hostapd.add_ap(apdev[0]['ifname'], params)
+    eap_connect(dev[1], apdev[0], "TLS", "tls user", ca_cert="auth_serv/ca.pem",
+                client_cert="auth_serv/user.pem",
+                private_key="auth_serv/user.key")