wifi-scripts: ucode: default sae_pwe to H2E-only on 6 GHz

The WPA3 and Wi-Fi Enhanced Open Deployment and Implementation Guide
v1.1 (Tables 7 and 8) mandates "H2E Only" for SAE on 6 GHz, in both
WPA3-Personal Only and WPA3-Personal Compatibility Mode: the 6 GHz
band disallows the legacy Hunting-and-Pecking password element, so
the AP must advertise BSS Membership Selector 123 to force STAs onto
H2E.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Link: https://github.com/openwrt/openwrt/pull/23009
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
This commit is contained in:
Hauke Mehrtens
2026-04-20 00:36:47 +02:00
parent 86b9eec8f0
commit 3b22050040
@@ -102,8 +102,12 @@ function iface_auth_type(config, band) {
if (config.auth_type in [ 'sae', 'psk-sae', 'psk-sae-compat' ]) {
config.sae_require_mfp = 1;
if (!config.ppsk)
set_default(config, 'sae_pwe', 2);
if (!config.ppsk) {
if (band == '6g')
set_default(config, 'sae_pwe', 1);
else
set_default(config, 'sae_pwe', 2);
}
}
if (config.own_ip_addr)