Edition de l'article

Access point settings

Les champs marqués * sont obligatoires !

Paramètres

* Contenu

Pour insérer un lien vers un article veuillez utiliser la balise link : [link=$a]$b[/link] où $a représente le titre de l'article (sans caractères spéciaux, tel qu'il apparaît dans l'adresse) et $b représente le nom du lien

- Couleur du texte
- Couleur du fond
- Taille du texte
  
  Choisir la taille du texte (px)
  
  Aperçu du texte
  
  Insérer
- Police d'écriture
  Andale Mono
  
  Arial
  
  Arial Black
  
  Book Antiqua
  
  Comic Sans MS
  
  Courier New
  
  Georgia
  
  Helvetica
  
  Impact
  
  Symbol
  
  Tahoma
  
  Terminal
  
  Times New Roman
  
  Trebuchet MS
  
  Verdana
  
  Webdings
  
  Wingdings
- Alignement
  Aligner à gauche Insérer
  
  Centrer Insérer
  
  Aligner à droite Insérer
  
  Justifier Insérer
- Positionnement
  Flottant à gauche Insérer
  
  Flottant à droite Insérer
  
  Indentation Insérer
  
  Exposant Insérer
  
  Indice Insérer
- Titrage
  
  Titre 1
  Insérer
  
  Titre 2
  Insérer
  
  Titre 3
  Insérer
  
  Titre 4
  Insérer
  
  Titre 5
  Insérer
- Liste
  
  Nombre de lignes
  
  Liste ordonnée
  Sélectionner
  
  Insérer
- Tableau
  
  Nombre de lignes
  
  Nombre de colonnes
  
  Entête
  Sélectionner
  
  Insérer le tableau
- Conteneur
  Paragraphe Insérer
  
  Bloc Insérer
  
  Conteneur personnalisable Choisir
  
  Bloc champs Choisir
  
  Abréviation Choisir
  Conteneur personnalisable
  
  Ces critères nécessitent la connaissance des langages HTML/CSS et les propriétés du thème utilisé.
  
  Identifiant
  
  Classes
  
  Style
  
  Insérer
  
  Bloc champs
  
  Titre du bloc champs
  
  Style
  
  Insérer
  
  Abréviation
  
  Abréviation
  
  Nom complet
  
  Insérer
- Citation
  
  Auteur de la citation
  
  Citation
  
  Insérer
- Contenu Caché
  Cacher le contenu et l'afficher au clic Insérer
  
  Cacher le contenu aux visiteurs Insérer
  
  Cacher la fin du contenu aux visiteurs Insérer
  
  Cacher le contenu aux membres Insérer
- Style
  
  Remarque Insérer
  
  Question Insérer
  
  Succès Insérer
  
  Avertissement Insérer
  
  Erreur Insérer
- Lien
  
  Adresse du lien
  
  Texte du lien
  
  Insérer
- Adresse email
  
  Adresse email
  
  Texte de la balise
  
  Insérer
- Lien wikipedia
  
  Mot
  
  Définir une langue dans le lien Sinon fr est ajouté automatiquement
  Sélectionner
  
  Langue
  
  Insérer
- Flux RSS
  
  Nom du module
  
  Catégorie
  
  Nombre d'éléments à afficher
  
  Insérer
- Ancre vers un endroit de la page
  
  Nom de l'ancre
  
  Ajouter le lien vers l'ancre
  Sélectionner
  
  Insérer
- Son
  
  Adresse du fichier audio
  
  Insérer
- Vidéo
  
  Adresse de la vidéo
  
  Hébergeur
  
  Largeur de la vidéo
  
  Hauteur de la vidéo
  
  Ajouter une vignette
  
  Insérer
- Ajouter une image avec un effet lightbox
  
  Adresse de l'image
  
  Largeur max de la vignette (px)
  
  Insérer
- Ajouter une image avec description
  
  Adresse de l'image
  
  Texte alternatif
  
  Description de l'image
  
  Largeur max de l'image (px)
  
  Insérer
- Smileys
- Emojis HTML
  
  D'autres emojis sur unicode-table.com ou w3c.com
  Smileys
  
  😀
  
  😉
  
  😁
  
  😆
  
  😅
  
  😂
  
  🤣
  
  😊
  
  🙂
  
  😄
  
  🙃
  
  😇
  
  😃
  
  😚
  
  🥰
  
  😙
  
  😍
  
  😗
  
  🥲
  
  😘
  
  🤩
  
  😋
  
  😛
  
  😜
  
  🤪
  
  😝
  
  🤑
  
  🤔
  
  🤭
  
  🤗
  
  🤫
  
  😐
  
  😶
  
  🤨
  
  😬
  
  😏
  
  😑
  
  😒
  
  🙄
  
  🤐
  
  🤥
  
  😌
  
  😔
  
  😪
  
  😴
  
  🤤
  
  🥶
  
  🤧
  
  😷
  
  🤯
  
  🥴
  
  😵
  
  🤒
  
  🥵
  
  🤮
  
  🤕
  
  🤢
  
  🥸
  
  🤠
  
  🥳
  
  🤓
  
  😎
  
  🧐
  
  😕
  
  😖
  
  😧
  
  🥺
  
  😫
  
  😱
  
  😞
  
  😯
  
  😮
  
  😭
  
  😟
  
  😓
  
  😩
  
  😢
  
  😲
  
  😨
  
  🥱
  
  😳
  
  🙁
  
  😥
  
  😣
  
  😦
  
  😰
  
  ☠
  
  😤
  
  😈
  
  😡
  
  💀
  
  👿
  
  🤬
  
  😠
  
  💩
  
  🤡
  
  🤖
  
  👽
  
  👾
  
  👻
  
  👺
  
  👹
  
  🙉
  
  🙊
  
  🙋
  
  🗨
  
  💭
  
  💬
  
  💢
  
  💥
  
  💣
  
  💯
  
  💨
  
  💦
  
  💫
  
  💤
  
  👀
  
  💪
  
  🧡
  
  🤎
  
  🤍
  
  🖤
  
  💚
  
  💙
  
  💜
  
  💛
  
  💋
  
  💔
  
  💘
  
  💖
  
  💝
  
  ✋
  
  👋
  
  🖖
  
  🖐
  
  🤙
  
  🤞
  
  🤟
  
  🤘
  
  👌
  
  🤌
  
  🤏
  
  👆
  
  👇
  
  👈
  
  👉
  
  🤛
  
  🤜
  
  👍
  
  ✊
  
  👊
  
  👎
  
  👐
  
  🤝
  
  👏
  
  🤲
  
  🙏
  
  🙌
- Icônes Font Awesome
  
  [fa=fa-style,fa-option]nom de l'icône (sans le "fa-")[/fa]
- Code
  
  Chemin vers un fichier
  
  Langage
  
  Afficher sur une seule ligne
  Sélectionner
  
  Insérer

-- Basics --

After running the [url=https://docs.raspap.com/quick/]Quick installer[/url] or following the [url=https://docs.raspap.com/manual/]manual installation[/url] steps, RaspAP will start up a routed wireless access point (AP) with a [url=https://docs.raspap.com/defaults/]default configuration[/url]. As part of this initial setup, the [code=text,0,1]hostapd[/code] service broadcasts an AP with the following settings:

[b]Interface:[/b] [code=text,0,1]wlan0[/code]
[b]SSID:[/b] [code=text,0,1]raspi-webgui[/code]
[b]Wireless Mode:[/b] [code=text,0,1]802.11n - 2.4GHz[/code]
[b]Channel:[/b] [code=text,0,1]1[/code]
[b]Security Type:[/b] [code=text,0,1]WPA2[/code]
[b]Encryption Type:[/b] [code=text,0,1]CCMP[/code]
[b]Passphrase:[/b] [code=text,0,1]ChangeMe[/code]

Each of these settings may be changed on the [b]Hotspot > Basic[/b] and [b]Security[/b] tabs to any values you wish. Your changes will be applied and made visible on the broadcasted AP by choosing [b]Save settings[/b] followed by [b]Restart hotspot[/b].

[img]https://user-images.githubusercontent.com/229399/115685883-efc44900-a358-11eb-8b9b-95c1029a2cad.png[/img]

At this point, a dialog will appear to indicate the progress of the RaspAP service. This is a Linux [code=text,0,1]systemd[/code] process that is responsible for starting up several network services in a specific order and timing.

-- Connecting clients --

When the AP is operational, you may connect clients to it by using one of two methods:

[list=ordered][*]Select the SSID from the list of available networks on your device and enter the passphrase.[*]Scan the QR code displayed on the [b]Hotspot > Security[/b] tab and join the AP.[/list]

By default, clients are assigned IP addresses from the DHCP range [code=text,0,1]10.3.141.50 — 10.3.141.254[/code]. These values may be changed in the [b]DHCP options[/b] section of the [b]DHCP server[/b] settings UI. If for some reason a client is unable to obtain an IP address from your AP, consult [url=https://docs.raspap.com/faq/#noip]this FAQ[/url].

-- 802.11ac 5 GHz --

For devices with compatible wireless hardware, RaspAP [url=https://github.com/RaspAP/raspap-webgui/releases/tag/3.0]version 3.0[/url] largely removes the guesswork in creating a 5 GHz access point. It achieves this by being tightly integrated with the [url=https://wireless.wiki.kernel.org/en/developers/Regulatory/wireless-regdb]wireless regulatory database[/url] used by the Linux kernel. Behind the scenes, RaspAP queries [code=text,0,1]iw[/code] and intelligently matches its output with the 5 GHz channels allowed by [code=text,0,1]hostapd[/code], the user space daemon access point software.

From the [b]Hotspot > Advanced[/b] tab, select your country from the dropdown then choose [b]Save settings[/b]. This sets the wireless regulatory domain for your device. Now, on the [b]Hotspot > Basic[/b] tab choose an interface and select the [code=text,0,1]802.11ac - 5 GHz[/code] wireless mode option. RaspAP will automatically populate the available 5 GHz channels for your country. Select a channel followed by [b]Save settings[/b], then [b]Start[/b] or [b]Restart hotspot[/b].

Tip

Not all AC channels may be compatible with your hardware. If your hotspot fails to start, enable [code=text,0,1]hostapd[/code] service logging by sliding the [b]Logfile output[/b] toggle on the [b]Hotspot > Logging[/b] tab, followed by [b]Save settings[/b], then [b]Restart hotspot[/b]. See [url=https://docs.raspap.com/faq/#actroubleshoot]this FAQ[/url] for more assistance.

If the [b]Channel[/b] dropdown and [b]Save settings[/b] button are disabled, refer to [url=https://docs.raspap.com/faq/#channels]this FAQ[/url].

-- Security settings --

WPA2 is currently the most secure standard utilizing AES (Advanced Encryption Standard) and a pre-shared key for authentication. WPA2 is also backwards compatible with TKIP to allow interoperability with legacy devices. AES uses the CCMP encryption protocol which is a stronger algorithm for message integrity and confidentiality.

By default, RaspAP's access point is configured with WPA2 and CCMP encryption. You may of course change this to allow legacy clients (older mobile devices, for example) by selecting [code=text,0,1]TKIP+CCMP[/code] as the encryption type. Choose [b]Save settings[/b] and [b]Restart hotspot[/b] for your changes to take effect.

--- WPA3-Personal ---

--- Experimental · Insiders only ---

WPA3 is an improved encryption standard, thanks to Simultaneous Authentication of Equals (SAE) which replaces the Pre-Shared Key (PSK) authentication method used in prior WPA versions. WPA3-Personal allows for better password-based authentication even when using simple passphrases. In general, WPA3-Personal networks with simple passphrases are more difficult to crack by using brute-force, dictionary-based methods, as with WPA/WPA2.

[img]https://user-images.githubusercontent.com/229399/148420827-51b176de-182e-48eb-962d-2943a47c8549.png[/img]

WPA3 also requires the use of Protected Management Frames (PMFs) to increase network security. If you wish to connect AP clients that may not have support for WPA3-Personal or PMFs, a transitional security mode is also available.

Note

The Raspberry Pi's onboard wireless chipsets do not currently support the WPA3 standard. For this reason, in order to use this setting you will need to configure your AP with an external wireless adapter that supports WPA3.

--- 802.11w ---

--- Experimental · Insiders only ---

The 802.11w amendment was introduced as a way to secure Wi-Fi management frames against attacks by ensuring that these frames are legitimately exchanged between an AP and its clients, rather than a malicious third-party. These 802.11w Protected Management Frames (PMFs) can mitigate common types of "deauthentication" and "disassociation" attacks.

Similar to WPA3-Personal, 802.11w may be configured in one of two modes: enabled and required. [i]Enabled[/i] allows for mixed operation by allowing legacy devices that do not support 802.11w to associate while also allowing devices that support 802.11w to use the PMF features. [i]Required[/i] will prevent clients that do not support 802.11w from associating with the SSID.

-- Drag & drop widgets --

-- Experimental · Insiders only --

The default dashboard layout may be customized to suit your needs. Enable this option from the [b]System > Theme[/b] menu by selecting the [b]Dynamic widgets[/b] toggle. Next, from the [b]Dashboard[/b] click or tap the icon to modify the widgets. Each widget may be resized, dragged and repositioned. Release the widget to drop it into a new location.

Tip

This option works best for large displays. The default dashboard widgets are optimized for mobile devices and smaller displays.

Click or tap the icon a second time when you're done making changes. The new responsive dashboard layout will be saved to your browser's local storage.

-- Printable signs --

-- Experimental · Insiders only --

Beneath the QR code on the [b]Hotspot > Security[/b] tab, you will find a link to open a "Wi-Fi connect" sign suitable for printing. Click or tap the link after the printer icon to open a new window with your hotspot's QR code, SSID and password neatly formatted.

[img]https://user-images.githubusercontent.com/229399/148738058-dfe7ea04-d59b-460a-a8b8-f0fca15ef715.png[/img]

To print, select [b]File > Print[/b] from your browser's toolbar and adjust print preferences as needed. This feature can be especially useful if you operate a public wireless access point. You may also opt to integrate a [url=https://docs.raspap.com/captive/]captive portal[/url] for your visitors.

-- Advanced options --

The above sections cover everything you will need for a basic routed AP. The [b]Hotspot > Advanced[/b] tab has several options that allow you to control advanced settings for the Linux [code=text,0,1]hostapd[/code] service. These are discussed in the following sections.

--- Bridged AP mode ---

If you wish to configure RaspAP as a [url=https://docs.raspap.com/bridged/]bridged AP[/url], this may be done by sliding the [b]Bridged AP mode[/b] toggle, saving settings and restarting the hotspot. Be aware that when the hotspot restarts you will no longer be able to access the web interface from the default [code=text,0,1]10.1.141.1[/code] address. Refer to this [url=https://docs.raspap.com/bridged/#accessing-the-web-interface]explanation and tips[/url] for administering your bridged AP.

--- WiFi client AP mode ---

RaspAP has support for this special mode, also known as a [b]micro-AP[/b] or simply [b]AP-STA[/b]. Typically this can be difficult to configure manually, but RaspAP performs most of the config work behind the scenes for you.

Note

This option is disabled or "greyed out" until a wireless client is configured. This can be done via the [b]WiFi client[/b] UI, or by manually [url=https://docs.raspap.com/faq/#how-do-i-prepare-the-sd-card-to-connect-to-wifi-in-headless-mode]configuring a valid [code=text,0,1]wpa_supplicant.conf[/code][/url].

Before using this mode, it is recommended that users familiarize themselves with [url=https://docs.raspap.com/ap-sta/]how AP-STA works[/url]. Users of AP-STA mode should also be aware of its limitations, and understand that performance and stability of this AP mode will not be equal to using a second wireless adapter bound to a separate interface. For the latter, refer to [url=https://docs.raspap.com/faq/#can-i-use-wlan0-and-wlan1-rather-than-eth0-for-my-ap]this FAQ[/url].

--- Beacon interval ---

Wireless APs continuously send beacon frames to indicate their presence, traffic load, and capabilities. The default [code=text,0,1]hostapd[/code] beacon interval is 100ms. If desired, you may change this to any value between 15 and 65535.

--- Disable disassoc_low_ack ---

An AP may disassociate a client due to inactivity, transmission failures or other indications of connection loss. This phenomenon can usually be observed in the [code=text,0,1]hostapd[/code] logs like so:

[code=text]wlan0: AP-STA-DISCONNECTED 24:62:ab:fd:24:34
wlan0: STA 24:62:ab:fd:24:34 IEEE 802.11: disassociated
wlan0: STA 24:62:ab:fd:24:34 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)[/code]

This option sets the [code=text,0,1]disassoc_low_ack[/code] boolean value for [code=text,0,1]hostapd[/code]. Be aware that this value is dependent on driver capabilities. Moreover, [code=text,0,1]hostapd[/code] may disassociate a client (or station) for a variety of reasons, so this is not a silver bullet.

--- Transmit power ---

RaspAP allows you to control the transmit power of the configured AP interface. The default "auto" setting will suffice for the vast majority of APs. A lower [code=text,0,1]txpower[/code] value can be useful to mitigate WiFi radio interference, for example if you are hosting multiple APs in a given area. It can also be advantageous to set [code=text,0,1]txpower[/code] to a lower value in IoT or similar applications where reduced power consumption is needed.

[img]https://user-images.githubusercontent.com/229399/115698577-0f616e80-a365-11eb-80e5-404527ca7bdb.png[/img]

Set the transmit power by selecting a value from the dropdown and choosing [b]Save settings[/b]. The transmit power setting is expressed as dBm, or decibels (dB) with reference to one milliwatt (mW). It is not necessary to restart the AP for this to take effect.

--- Maximum number of clients ---

This option sets the [code=text,0,1]max_num_sta[/code] value for [code=text,0,1]hostapd[/code], and is effective for placing a limit on the number of clients (stations) that can connect to your AP. When the limit is reached, new client connections will be rejected.

Note

The default setting is 2007, but this is merely the value set by [code=text,0,1]hostapd[/code] from the IEEE 802.11 specification. It should [i]not[/i] be interpreted as a guarantee that RaspAP can support this many simultaneous clients. In practice, this number depends on several factors and is a much lower value, as discussed in [url=https://docs.raspap.com/faq/#maxclients]this FAQ[/url].

-- Troubleshooting --

RaspAP gives you advanced control over several Linux networking-related services. As a result, your AP may fail to start for a variety of reasons. You may also encounter errors connecting clients to the AP, have no internet on AP clients, or observe clients being disconnected from the AP for no apparent reason.

If any of the above happens, one of the best diagnostic tools at your disposal is RaspAP's built-in service logging facility. You may enable the [code=text,0,1]hostapd[/code] service log by sliding the [b]Logfile output[/b] toggle on the [b]Hotspot > Logging[/b] tab and choosing [b]Save settings[/b]. Finally, choose [b]Restart hotspot[/b] and check the log output.

[img]https://user-images.githubusercontent.com/229399/116439036-5c56b080-a84f-11eb-87ee-318932347daf.png[/img]

Similarly, you may also enable DHCP server activity by sliding either of the two logging options on the [b]DHCP server > Logging[/b] tab.

--- Debug log ---

In some situations, you may need more comprehensive information to self-diagnose a problem. RaspAP lets you generate a debug log with a detailed summary of your system including the installed OS, Linux kernel version, attached USB devices, RaspAP settings, network configuration and current state of several AP-related services.

[url=https://github.com/RaspAP/raspap-webgui/assets/229399/66bf5cb5-3d77-44aa-92b8-5ebca6f003ad][Image][/url]

To create this log, simply click or tap on the [b]Generate debug log[/b] button from the [b]System > Tools[/b] tab. You will be prompted to choose a location to store the generated [code=text,0,1]raspap_debug.log[/code] file on your local computer or mobile device. An example portion of RaspAP's debug log is shown below:

[code=text]System Info
===========
Hardware: Raspberry Pi 3 Model B Rev 1.2
Detected OS: Debian GNU/Linux 12 (bookworm) 64-bit
Kernel: Linux raspberrypi 6.1.0-rpi4-rpi-v8 (2023-10-05) aarch64 GNU/Linux
System Uptime: 4 days, 20 hours, 45 minutes
Memory Usage: 29.0749%
Installed Packages
==================
PHP Version: 8.2.7 (cli) (built: Jun  9 2023 19:37:27) (NTS)
Dnsmasq Version: 2.89
dhcpcd Version: 9.4.1
lighttpd Version: 1.4.69
vnStat Version: 2.10
RaspAP Install
==============
RaspAP Version: 2.9.9
RaspAP Installation Directory: /var/www/html
RaspAP hostapd.ini contents:
WifiInterface = wlan0[/code]

Tip

If you are unable to perform a self-diagnosis and would like to share your debug log (or a portion of it) with another party, upload it to [url=https://pastebin.com/]Pastebin[/url] or [url=https://paste.ubuntu.com/]Ubuntu Pastebin[/url]. Please don't paste the log in its entirety to RaspAP's discussions, issues or other support channels.

RaspAP's debug log contains information about your system and local network configuration. However, no passwords or other senstive data are included.

--- Diagnosing problems ---

Look for any reported errors logged by the [code=text,0,1]hostapd[/code], [code=text,0,1]dhcpcd[/code] or [code=text,0,1]dnsmasq[/code] services. In most cases, errors thrown by one or more of these services have been discussed in various online forums. Start by searching the official [url=https://www.raspberrypi.org/forums/]Raspberry Pi forums[/url] or [url=https://raspberrypi.stackexchange.com/]Raspberry Pi on Stack Exchange[/url]. Chances are the problems with your AP have been discussed and answered before.

For additional help and advice, the [url=https://docs.raspap.com/faq/]FAQ[/url] is a rich source of troubleshooting info that is continuously updated with answers to the most commonly asked questions. For issues not covered in the FAQ, you may find many topics in [url=https://github.com/RaspAP/raspap-webgui/discussions]RaspAP discussions[/url] and the [url=https://reddit.com/r/RaspAP]RaspAP subreddit[/url].

Tip

Capture output from the Linux kernel's message buffer with [code=text,0,1]dmesg[/code] to help diagnose failure events. Read the last 100 lines with [code=text,0,1]dmesg | tail -100[/code] and look for any anomalies.

The performance of WiFi radios may be impacted by many factors, including, but not limited to:

[list=ordered][*]Undervoltage due to inadequate power or too many peripherals connected to the USB bus[*]Interference from a poorly shielded HDMI cable or using a [url=https://www.enricozini.org/blog/2019/himblick/raspberry-pi-4-loses-wifi-at-2560x1440-screen-resolution/]specific HDMI screen resolution[/url][*]RF interference from overlapping WiFi networks on a crowded 2.4 GHz band.[/list]

Bear these things in mind if your AP exhibits unexpected behavior and do your best to mitigate them.

--- Reverting to base settings ---

It is generally advisable to begin with RaspAP's [url=https://docs.raspap.com/defaults/]default configuration[/url], which has been rigorously tested and validated with the project's [url=https://docs.raspap.com/#compatible-operating-systems]supported operating systems[/url]. If, after modifying RaspAP's default settings, your AP no longer functions as expected, you may perform a [url=https://docs.raspap.com/defaults/#restoring-settings]system reset[/url] to restore these defaults.

--- Accessing backups ---

Each time you revert to RaspAP's base settings, your existing service configuration files are automatically backed up to [code=text,0,1]/etc/raspap/backups[/code]. In this way, you can compare differences between your files and the default configuration, if needed. There are many ways to do this in Linux, such as using the built-in GNU [code=text,0,1]diff[/code] tool. Another option is to install [code=text,0,1]colordiff[/code], a wrapper for diff that produces the same output but with colored syntax highligting. Install [code=text,0,1]colordiff[/code] with [code=text,0,1]sudo apt-get install colordiff[/code].

Similarly, the web files located in the default [code=text,0,1]/var/www/html[/code] root are backed up to [code=text,0,1]/var/www[/code] in a directory named with a timestamp. Therefore, any changes you've made to RaspAP's internals are preserved.

Prévisualisation

Nature de la modification (facultatif, 100 caractères max)

* Code de vérification

Combien font 4 + cinq ?

Valider

Titre 1

Titre 2

Titre 3

Titre 4

Titre 5

Smileys