hostapd config for Intel WiFi6 AX201 (5Ghz)

ax201-hostapd.conf

# Config for Intel WiFi6 AX201
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0

logger_syslog=-1
logger_syslog_level=2
logger_stdout=-1
logger_stdout_level=1

ssid=AwesomeWifi
utf8_ssid=1

wpa_passphrase=1234567890

# use wpa2
wpa=2

# wpa-psk, wpa3 keys
wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE

#wpa_pairwise=TKIP CCMP
rsn_pairwise=CCMP

# enable pre-authentication
rsn_preauth=1

# lowest supported 5Ghz channel in Finland
channel=149

country_code=FI
# advertise country code and regulatory info
ieee80211d=1

# DFS radar detection
ieee80211h=1

# spectrum management & enforce local power constraint
spectrum_mgmt_required=1
local_pwr_constraint=3

# use interface wlo1, br0 bridge to internet
interface=wlo1
bridge=br0

# default driver
driver=nl80211

# management frame protection (MFP) is enabled
ieee80211w=2

# a = 5ghz
hw_mode=a

# HT enabled
ieee80211n=1
ht_capab=[HT40+][LDPC][SHORT-GI-20][SHORT-GI-40][TX-STBC][RX-STBC1][DSSS_CCK-40][MAX-AMSDU-7935]

# enable VHT
ieee80211ac=1
# VHT channel width (1 for best compatibility)
vht_oper_chwidth=1
# freq sequence index (magic value, channel+6 or something)
vht_oper_centr_freq_seg0_idx=155
# vht capabilities (consult iw info)
vht_capab=[MAX-MPDU-11454][VHT160][RXLDPC][SHORT-GI-80][SHORT-GI-160][TX-STBC-2BY1][RX-STBC-1][SU-BEAMFORMEE][MU-BEAMFORMEE]

# enable WMM
wmm_enabled=1

# mostly default values for these
rts_threshold=-1
fragm_threshold=-1

beacon_int=100
dtim_period=2
max_num_sta=255

# isolate clients
ap_isolate=1

@wineway You've probably figured it out yourself, but there are two options:

• use this patch to bring back the lar_disable=Y option to iwlwifi

• use this patch to workaround the stupid limitation in hostapd

@wineway You've probably figured it out yourself, but there are two options:

* use this [patch](https://github.com/torvalds/linux/commit/c545b26dd567a638d62ca29490e9e2e6d04a8b6b) to bring back the `lar_disable=Y` option to iwlwifi

* use this [patch](https://tildearrow.org/?p=post&month=7&year=2022&item=lar) to workaround the stupid limitation in hostapd

I also have the AX201 wifi adapter and tried several months ago using the NetworkManager Hotspot on Ubuntu Server 22.04 and maxed out at a little bit over 100 megabit wifi speeds.

I saw this last week and I tried both of these individually and together with hostapd on Ubuntu Server 23.04 and the fastest I can get is with around 75 megabit speed using any combination with the module modification or hostapd installations.

I recompiled/installed the module modification along with a new kernel with "options iwlwifi lar_disable=1" in /etc/modprobe.d with hostapd.

i also used the apt-get source version of hostapd to run the patch and build the debian package to install it (eg dpkg-buildpackage). apt-get source downloaded the source for hostapd and wpa-2 together as a single tree and the only issue was a required commit message before compilation.

also: the config: "vht_capab=[MAX-MPDU-11454][VHT160][RXLDPC][SHORT-GI-80][SHORT-GI-160][TX-STBC-2BY1][RX-STBC-1][SU-BEAMFORMEE][MU-BEAMFORMEE]" doesn't work together per systemctl & journalctl, but each parameter works fine individually; however MAX-MPDU-11454 doesn't work at all. i got different error messages all pertaining to incompatible parameters depending on the multiple permutations of re-ordering or reshuffling i tried and confirming that they were correct with iw list didn't seem to matter.

i leave this here for anyone else who wants to try and can know what DOESN'T work. i will post an update if troubleshooting yield any results.

@wineway You've probably figured it out yourself, but there are two options:

• use this patch to bring back the lar_disable=Y option to iwlwifi
• use this patch to workaround the stupid limitation in hostapd

I spent a week working on a solution that I was happy with and I decided to post github

Hello, this patch works for 6ghz ?

Hello The patch doesn't enable 6ghz or any other bands itself. Only forces Intel drives to recognise the country so that it allows the right bands. So maybe it works for your use, I haven't test it Sent from Proton Mail Android

…

-------- Original Message --------

On 17/08/2024 22:42, vidalinux wrote: @vidalinux commented on this gist. --------------------------------------------------------------- Hello, this patch works for 6ghz ? — Reply to this email directly, [view it on GitHub](https://gist.github.com/iffa/290b1b83b17f51355c63a97df7c1cc60#gistcomment-5157825) or [unsubscribe](https://github.com/notifications/unsubscribe-auth/ATM5M3SCYYXK7NDKE2BSYB3ZR67U7BFKMF2HI4TJMJ2XIZLTSKBKK5TBNR2WLJDUOJ2WLJDOMFWWLO3UNBZGKYLEL5YGC4TUNFRWS4DBNZ2F6YLDORUXM2LUPGBKK5TBNR2WLJDHNFZXJJDOMFWWLK3UNBZGKYLEL52HS4DFVRZXKYTKMVRXIX3UPFYGLK2HNFZXIQ3PNVWWK3TUUZ2G64DJMNZZDAVEOR4XAZNEM5UXG5FFOZQWY5LFVEYTAOJYGI3TMMZQU52HE2LHM5SXFJTDOJSWC5DF). You are receiving this email because you commented on the thread. Triage notifications on the go with GitHub Mobile for [iOS](https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675) or [Android](https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub).

For anyone reading this in 2026, I've managed to get AX101 to run WIFI 6 AP. From an iPhone I get a little over 400Mb/s DL speed.

Patching hostapd was necessary to unlock channels via prescanning but after experimentation I was able to get Wifi 4, 5 and 6 AP to work. No kernel patch. Here's a complete hostapd config file with roughly minimal amount of settings necessary that works (with patched hostapd):

interface=wlo1
bridge=br-lan
driver=nl80211
ssid=TestNetwork
country_code=SE
ieee80211d=1
hw_mode=a
channel=149
auth_algs=1
wmm_enabled=1
ieee80211n=1
ht_capab=[HT40+][SHORT-GI-20][SHORT-GI-40]
require_ht=1
ieee80211ac=1
require_vht=1
vht_oper_chwidth=1
vht_oper_centr_freq_seg0_idx=155
ieee80211ax=1
require_he=1
he_oper_chwidth=1
he_oper_centr_freq_seg0_idx=155
wpa=2
sae_password=11111111
ieee80211w=2
wpa_key_mgmt=SAE

As NixOS configuration:

services.hostapd = {
  enable = true;
  radios.${wlan} = {
    # hw_mode=a + channel=149  ->  band "5g"
    band = "5g";
    channel = 149;

    countryCode = "SE";

    # ieee80211n=1 + require_ht=1 + ht_capab=[...]
    wifi4 = {
      enable = true;
      require = true;
      capabilities = [
        "HT40+"
        "SHORT-GI-20"
        "SHORT-GI-40"
      ];
    };

    # ieee80211ac=1 + require_vht=1 + vht_oper_chwidth=1
    wifi5 = {
      enable = true;
      require = true;
      operatingChannelWidth = "80";
    };

    # ieee80211ax=1 + require_he=1 + he_oper_chwidth=1
    wifi6 = {
      enable = true;
      require = true;
      operatingChannelWidth = "80";
    };

    settings = {
      vht_oper_centr_freq_seg0_idx = 155;
      he_oper_centr_freq_seg0_idx = 155;
    };

    networks.${wlan} = {
      ssid = "<SSID>";
      authentication = {
        mode = "wpa3-sae";
        saePasswords = [
          { passwordFile = "<password-file-available-in-runtime>"; }
        ];
      };
      settings.bridge = ${bridge};
    };
  };
};

plus an overlay if someone needs it:

  hostapd = prev.hostapd.overrideAttrs (
    oldAttrs:
    let
      patchName = "hostapd-intel-5ghz-no-ir";
    in
    {
      pname = patchName;

      patches = (oldAttrs.patches or [ ]) ++ [
        (final.fetchurl {
          name = "${patchName}.patch";
          url = "https://raw.githubusercontent.com/PedroFirmware/hostapd/831aff4d00a62d2dfac9bd5bb82161f09c244d34/For_intel_Wi-Fi_cards_v2_11.patch";
          hash = "sha256-AxSrkghLw4H9NAX3z/j+BTE/Nnofw2KpGNpztSoXeFM=";
        })
      ];
    }
  );

I guess U-NII-3 region is okay to use by a random Joe in most parts of the world, unfortunately other lower channels didn't unlock in my case.

IMPORTANT EDIT:

do not require vht/he (wifi5/6); it makes devices like iPhones not even consider reconnecting to the AP after they connected to some other network. Afterwards they will use VHT/HE and utilize the whole bandwidth just fine - weird quirk but maybe related to the awkward channel 149 and hitting sus code path in iOS.