*** FROM pbrah***
overview This guide has primarily been written for authenticating to AT&T U-Verse using wpa_supplicant on a UDM Pro. It is assumed that you've already retrieved your certificates from a modem supplied by AT&T. If you have not, you can purchase a used modem on ebay, such as the NVG589 and then root it to get the certificates. I had success using the following guide.
https://github.com/bypassrg/att
If the above link no longer works, I have also forked it to my GitHub below.
Download decoder v1.0.4: win, linux, mac
-
Copy mfg.dat, attroot****.der,& attsubca****.der files to the same location as mfg_dat_decode.
-
Run mfg_dat_decode.
-
You should get a file like this: EAP-TLS_8021x_****.tar.gz
-
unzip the tarball and you should get a file like this: EAP-TLS_8021x_****.tar
-
unzip the .tar file and you should get your .perm files and your wpa_supplicant.conf file
$ scp -r *.pem [email protected]:/tmp/
password:(YOUR PASSWORD)
CA_001E46-****.pem 100% 3926 3.8KB/s 00:00
Client_001E46-****.pem 100% 1119 1.1KB/s 00:00
PrivateKey_PKCS1_001E46-****.pem 100% 887 0.9KB/s 00:00
$ scp -r wpa_supplicant.conf [email protected]:/tmp/
wpa_supplicant.conf 100% 680 0.7KB/s 00:00
create a directory for the certs and wpa_supplicant.conf in the podman directory then copy the files over.
$ mkdir /mnt/data/podman/wpa_supplicant/
$ cp -arfv /tmp/*pem /tmp/wpa_supplicant.conf /mnt/data/podman/wpa_supplicant/
Do not run these more than once or you will end up with incorrect paths.
$ sed -i 's,ca_cert=",ca_cert="/etc/wpa_supplicant/conf/,g' /mnt/data/podman/wpa_supplicant/wpa_supplicant.conf
$ sed -i 's,client_cert=",client_cert="/etc/wpa_supplicant/conf/,g' /mnt/data/podman/wpa_supplicant/wpa_supplicant.conf
$ sed -i 's,private_key=",private_key="/etc/wpa_supplicant/conf/,g' /mnt/data/podman/wpa_supplicant/wpa_supplicant.conf
the podman run command below assumes you are using port 9 WAN. If not, adjust accordingly.
$ podman run --privileged=true --network=host --name=wpa_supplicant-udmpro -v /mnt/data/podman/wpa_supplicant/:/etc/wpa_supplicant/conf/ --log-driver=k8s-file --restart=on-failure -detach -ti pbrah/wpa_supplicant-udmpro:v1.0 -Dwired -ieth8 -c/etc/wpa_supplicant/conf/wpa_supplicant.conf
- Connect the ONT to Port 9 (WAN) on your UDM Pro
- Power cycle ONT
- ssh to the UDM Pro & start the container
$ podman start wpa_supplicant-udmpro
- wait
If you are having issues connecting after starting your docker container, the first thing you should do is check your docker container logs.
$ docker logs -f wpa_supplicant-udmpro
The container will have to be re-started each time you reboot your UDM pro
$ podman start wpa_supplicant-udmpro