所有与无线有关的设置存放在本地文件 /etc/config/wireless中，我们可以用 vi 来编辑并修改它，这个配置文件是针对 无线设备 以及 无线网络 的。在这里需要区分理解的是，无线设备在wiki英文原文是 wireless devices ，无线网络在wiki英文原文是 wireless networks。

wireless devices 中指的是无线通讯设备相关的设置，而不单止是无线网卡的设置，wireless networks 指的是无线局域网相关的设置。

一个典型的无线设置文件至少应该包含两个方面的内容，即至少一个无线设备 和 至少一个与之相关的无线接口 配置。

无线设备 的设置指的是一般无线电通讯相关的参数，例如设备硬件（网卡芯片驱动程序类型），信道，频率，发射功率等；

无线接口 的设置指的是 无线设备 的工作模式，essid，无线加密方式等。

无线设备 和 无线接口 具有关联性，首先是设置好一个 无线设备 的参数，然后再设置与这个 无线设备 相关的 无线接口 参数，从而构造出一个可以有效工作的无线局域网环境。

wifi-device 所配置的是指设备中无线通讯硬件，很多情况中，一个设备只有一个无线通讯接口，所以只有一个 wifi-device 配置项，如果有多个无线通讯设备则会有多个 wifi-device 配置项，每个配置项用来指定不同的接口。

一个最小的 wifi-device 配置就像下面的例子，需要注意的是其中所指定的不同的芯片类型和驱动。

config 'wifi-device' 'wl0'
        option 'type'    'broadcom'
        option 'channel' '6'

• wl0 是无线网卡的内置标识符
• broadcom 表示芯片或驱动程序的类型
• 6 指定无线网卡工作的无线频道

下表列出了设备节中所有的选项。注意：并非所有的芯片或驱动程序都适用于这些选项，请参考备注以便了解详情。

The options below are only used by the proprietary Broadcom driver (type broadcom).

The following options are only used by the Madwifi driver (type atheros).

A complete wireless configuration contains at least one wifi-iface section per adapter to define a wireless network on top of the hardware. Some drivers support multiple wireless networks per device:

• broadcom if the core revision is greater or equal 9 (see dmesg | grep corerev)
• madwifi always supports multiple networks
• all other drivers do *not* support multiple networks yet

A minimal example for a wifi-iface declaration is given below.

config 'wifi-iface'
        option 'device'     'wl0'
        option 'network'    'lan'
        option 'mode'       'ap'
        option 'ssid'       'MyWifiAP'
        option 'encryption' 'psk2'
        option 'key'        'secret passphrase'

• wl0 is the identifier for the underlying radio hardware
• lan specifies the network interface the wifi is attached to
• ap is the opetion mode, Access Point in this example
• MyWifiAP is the broadcasted SSID
• psk2 specifies the wireless encryption method, WPA2 PSK here
• secret passphrase is the secret WPA passphrase

The most common configuration option for wifi-iface sections are listed below.

名称	类型	Required	Default	描述
device	string	yes	(first device id)	Specifies the used wireless adapter, must refer to one of the defined wifi-device sections
mode	string	yes	ap	Selects the operation mode of the wireless network, ap for Access Point, sta for managed (client) mode, adhoc for Ad-Hoc, wds for static WDS and monitor for monitor mode
ssid	string	yes	OpenWrt	The broadcasted SSID of the wireless network
bssid	BSSID address	no	(driver default)	Override the BSSID of the network, only applicable in adhoc or sta mode. In wds mode specifies the BSSID of another AP to create WDS with.
hidden	boolean	no	0	Turns off SSID broadcasting if set to 1
isolate	boolean	no	0	Isolate wireless clients from each other, only applicable in ap mode. Not supported for the mac80211 type yet
doth	boolean	no	0	Enables 802.11h support. Not supported for the mac80211 type yet
wmm	boolean	no	0	Enables WMM (802.11e) support. Not supported for the mac80211 type yet
network	string	yes	lan	Specifies the network interface to attach the wireless to
encryption	string	no	none	Used wireless encryption, none for an open network, wep for WEP, psk for WPA-PSK and psk2 for WPA2-PSK. See the WPA modes table for additional possible values.
key	number or string	no	(none)	Specifies the secret passphrase used for WPA PSK mode or the key index for WEP mode
key1	string	no	(none)	WEP Key #1 (selected by the index in key)
key2	string	no	(none)	WEP Key #2 (selected by the index in key)
key3	string	no	(none)	WEP Key #3 (selected by the index in key)
key4	string	no	(none)	WEP Key #4 (selected by the index in key)
ieee80211w	integer	no	0	Enables MFP (802.11w) support (0 = disabled, 1 = optional, 2 = required). Only supported by the ath9k driver (in trunk)
ieee80211w_max_timeout	integer	no	(hostapd default)	Specifies the 802.11w Association SA Query maximum timeout. Only supported by the ath9k driver (in trunk)
ieee80211w_retry_timeout	integer	no	(hostapd default)	Specifies the 802.11w Association SA Query retry timeout . Only supported by the ath9k driver (in trunk)
See the WPA tables below for a full listing of WPA related options used for WPA2 Enterprise (802.1x)

The options in the table below only work with type atheros.

Besides the WPA mode, the encryption option also specifies the group and peer ciphers to use. To override the cipher, the value of encryption must be given in the form mode+cipher. See the listing below for possible combinations.

Listing of Access Point related options for WPA Enterprise.

名称	Default	描述
server	(none)	RADIUS server to handle client authentication
port	1812	RADIUS server port
key	(none)	Shared RADIUS secret
The options below are not supported by the Broadcom nas authenticator
nasid	(none)	NAS ID to use for RADIUS athentication requests
wpa_group_rekey	600	WPA Group Cipher rekeying interval in seconds
ieee80211d	0	Enables IEEE 802.11d (“World Mode”) if set to 1

Listing of Client related options for WPA Enterprise.

At the time of writing only the madwifi driver supports WPA Enterprise in client mode.

Howto setup wireless encryption with OpenWrt Kamikaze. You can do the same from within the LuCI WebUI (Network > Wifi) if you prefer a GUI.

To generate a random password for your key you can use the pwgen program. pwgen is available for most Linux distributions and is also packaged for OpenWrt Kamikaze. Run it with e.g. pwgen --secret 13 1 - this generates one password with a length of 13 letters/numbers.

Broadcom的无线芯片必须安装NAS的包。

root@OpenWrt:~# opkg install nas

For Atheros wireless chips install the hostapd package if your run in AP mode.

root@OpenWrt:~# opkg install hostapd

TIP: If you only need WPA (PSK) encryption you can install the hostapd-mini package which does not depend on the zlib and libopenssl packages.

If you have a Atheros wireless and run it in client-mode you have to install the wpa-supplicant package instead of hostapd.

root@OpenWrt:~# opkg install wpa-supplicant

使用UCI配置的WPA（PSK）的加密。

root@OpenWrt:~# uci set wireless.@wifi-iface[0].encryption=psk
root@OpenWrt:~# uci set wireless.@wifi-iface[0].key="your_password"
root@OpenWrt:~# uci commit wireless
root@OpenWrt:~# wifi

For the key only letters (upper and lower case) and numbers are allowed. The length must be between 8 and 63 characters.

使用UCI配置的WPA2（PSK）的加密。

root@OpenWrt:~# uci set wireless.@wifi-iface[0].encryption=psk2
root@OpenWrt:~# uci set wireless.@wifi-iface[0].key="your_password"
root@OpenWrt:~# uci commit wireless
root@OpenWrt:~# wifi

For the key only letters (upper and lower case) and numbers are allowed. The length must be between 8 and 63 characters.

Configuration is also possible via direct editing of /etc/config/wireless:

	option encryption   psk
	option key	    "your_password"

See the uci文档 for information on configuration files in general and the sections above for a full outline of the wifi config file in particular.

为WEP密钥格式的一些注意事项：

• The format for the WEP key for the key1 option is HEX

If you wish to use raw hex keys then you can skip to the UCI commands paragraph below. Raw hex keys have 10 hex digits (0..9, a..f) for 64-bit WEP keys and 26 hex digits for 128-bit WEP keys.

如果你不想使用原始的十六进制键然后按照下面的说明。

• The length of a 64bit WEP key must be exact 5 characters
• The length of a 128bit WEP key must be exact 13 characters
• Allowed characters are letters (upper and lower case) and numbers

生成一个64位的WEP密钥：

root@OpenWrt:~# echo -n 'awerf' | hexdump -e '5/1 "%02x" "\n"'
6177657266

生成一个128位的WEP密钥：

root@OpenWrt:~# echo -n 'xdhdkkewioddd' | hexdump -e '13/1 "%02x" "\n"'
786468646b6b6577696f646464

现在，在UCI中使用你刚才生成的16进制的WEP密钥来设置加密。

root@OpenWrt:~# uci set wireless.@wifi-iface[0].encryption=wep
root@OpenWrt:~# uci set wireless.@wifi-iface[0].key1="786468646b6b6577696f646464"
root@OpenWrt:~# uci set wireless.@wifi-iface[0].key=1
root@OpenWrt:~# uci commit wireless
root@OpenWrt:~# wifi

您可以配置最多四个WEP密钥。

在 Openwrt下要 启用/重启/关闭 无线接口是使用命令 “wifi”来完成的。

启动无线接口：不带参数直接在命令行运行 wifi 命令；

如果修改了无线的配置，我们需要重新启动无线接口使配置生效，同样是不带参数直接在命令行下运行 wifi 命令；

如果需要关闭无线装置，加上“ down “参数使用 “wifi down”

大多数情况下新安装的 Openwrt 是默认关闭无线接口的。

To rebuild the configuration file, e.g. after installing a new wireless driver, remove the existing wireless configuration (if any) and use the wifi detect command with stdout redirected to the /etc/config/wireless file:

root@OpenWrt:~# rm -f /etc/config/wireless; wifi detect > /etc/config/wireless