*** FROM pbrah***

overview This guide has primarily been written for authenticating to AT&T U-Verse using wpa_supplicant on a UDM Pro. It is assumed that you've already retrieved your certificates from a modem supplied by AT&T. If you have not, you can purchase a used modem on ebay, such as the NVG589 and then root it to get the certificates. I had success using the following guide.

https://github.com/bypassrg/att

If the above link no longer works, I have also forked it to my GitHub below.

https://github.com/pbrah/att

Download decoder v1.0.4: win, linux, mac

Decoder

• Copy mfg.dat, attroot****.der,& attsubca****.der files to the same location as mfg_dat_decode.

• Run mfg_dat_decode.

• You should get a file like this: EAP-TLS_8021x_****.tar.gz

• unzip the tarball and you should get a file like this: EAP-TLS_8021x_****.tar

• unzip the .tar file and you should get your .perm files and your wpa_supplicant.conf file

$ scp -r *.pem [email protected]:/tmp/

    password:(YOUR PASSWORD)

    CA_001E46-****.pem                                                          100% 3926     3.8KB/s   00:00

    Client_001E46-****.pem                                                      100% 1119     1.1KB/s   00:00

    PrivateKey_PKCS1_001E46-****.pem                                            100%  887     0.9KB/s   00:00

$ scp -r wpa_supplicant.conf [email protected]:/tmp/

    wpa_supplicant.conf                                                         100%  680     0.7KB/s   00:00

create a directory for the certs and wpa_supplicant.conf in the podman directory then copy the files over.

$ mkdir /mnt/data/podman/wpa_supplicant/

$ cp -arfv /tmp/*pem /tmp/wpa_supplicant.conf /mnt/data/podman/wpa_supplicant/

Do not run these more than once or you will end up with incorrect paths.

$ sed -i 's,ca_cert=",ca_cert="/etc/wpa_supplicant/conf/,g' /mnt/data/podman/wpa_supplicant/wpa_supplicant.conf

$ sed -i 's,client_cert=",client_cert="/etc/wpa_supplicant/conf/,g' /mnt/data/podman/wpa_supplicant/wpa_supplicant.conf

$ sed -i 's,private_key=",private_key="/etc/wpa_supplicant/conf/,g' /mnt/data/podman/wpa_supplicant/wpa_supplicant.conf

the podman run command below assumes you are using port 9 WAN. If not, adjust accordingly.

$ podman run --privileged=true --network=host --name=wpa_supplicant-udmpro -v /mnt/data/podman/wpa_supplicant/:/etc/wpa_supplicant/conf/ --log-driver=k8s-file --restart=on-failure -detach -ti pbrah/wpa_supplicant-udmpro:v1.0 -Dwired -ieth8 -c/etc/wpa_supplicant/conf/wpa_supplicant.conf

• Connect the ONT to Port 9 (WAN) on your UDM Pro
• Power cycle ONT
• ssh to the UDM Pro & start the container

$ podman start wpa_supplicant-udmpro

• wait

If you are having issues connecting after starting your docker container, the first thing you should do is check your docker container logs.

$ docker logs -f wpa_supplicant-udmpro

The container will have to be re-started each time you reboot your UDM pro

$ podman start wpa_supplicant-udmpro