Working with the Debian operating system often requires interaction with the command line, especially on servers or in environments with a minimalist graphical interface. In such situations, knowing how to manage network connections without a mouse or graphical menus becomes a critical skill for a system administrator or advanced user. The terminal not only provides access to basic functions but also allows for fine-tuning of connection parameters, something unavailable in standard GUI utilities.
Modern Linux distributions, including Debian, offer several powerful tools for managing wireless networks. The choice of a specific method depends on the system version, the availability of a graphical interface, and the user's personal preference. In this article, we'll take a detailed look at how to use them. NetworkManager, utilities iwctl from the iwd project, as well as the classic one wpa_supplicant, which remains relevant for minimalist builds.
Before entering commands, you need to ensure that the wireless adapter is physically functional and recognized by the system. Lack of the correct driver can ruin all setup efforts, so initial hardware diagnostics are essential. We'll cover how to identify the device, check its status, and activate the interface for further use.
Diagnostics of the wireless adapter and interfaces
The first step in the setup process is to check for the presence of a wireless device in the system. This is done using a utility ip, which replaced the outdated one ifconfigEntering the command ip link show will display a list of all network interfaces currently available. Wireless interfaces typically have the "wl" prefix, for example, wlp2s0 or wlan0, as opposed to wired "en" or "eth".
If interfaces starting with "wl" are missing from the list, this may indicate missing drivers or disabled hardware. Debian often requires installing packages with proprietary firmware, especially for cards from Realtek or Broadcom. You can check loaded kernel modules with the command lsmod | grep -i wifi, which will help you understand whether the kernel sees the device at a low level.
⚠️ Note: If the interface is listed but marked as
DOWN, it must be raised by the commandip link set dev [interface_name] upWithout this step, scanning networks will not be possible.
For more detailed information about supported operating modes and frequencies, you can use the utility iw. Team iw dev will show available devices and their current status. This is an important tool for understanding your adapter's capabilities, especially if you plan to use monitor mode or access point.
What to do if the adapter is not detected in lspci?
If the lspci command doesn't show the wireless card, it may be disabled at the BIOS/UEFI level or physically faulty. It's also worth checking whether the WiFi module is blocked using rfkill.
Managing networks via NetworkManager (nmcli)
The most universal and common way to connect in Debian is to use NetworkManagerThis service works both in the graphical environment and in the console via a utility. nmcliIt automatically handles complex scenarios such as roaming and profile storage, making it ideal for workstations and laptops.
To get started, you need to scan available networks. Command nmcli device wifi list will display a table with the SSID, signal strength, and security status. If the list is empty, you may need to update the scan data by adding a flag. --rescan yesIn the output, you will see an asterisk (*) next to the network you are currently connected to.
nmcli device wifi connect "Network_Name" password "Your_Password"This command initiates the connection process with the selected access point. NetworkManager will create a new connection profile and attempt to obtain an IP address via DHCP. If successful, the interface status will change to connected, and you can check the availability of the Internet.
It is important to note that nmcli Allows you to manage not only the connection but also security settings. You can manually set the encryption type if automatic detection fails. For corporate WPA2-Enterprise networks, this is an indispensable tool, allowing you to write certificates and logins directly into the profile configuration file.
Using the iwctl utility on modern systems
Project iwd (iNet wireless daemon) from the developers Intel is gaining popularity in Debian as a lightweight and fast alternative to wpa_supplicant. The utility iwctl Provides an interactive command-line interface that's convenient for quick setup. It's especially suitable for systems where connection speed and minimal resource consumption are critical.
To start the interactive mode, simply enter the command iwctl in the terminal. Inside the shell, the prompt will change to [iwd]#. Commands for managing devices are available here, such as device list to view adapters and station [device] scan to search for networks. After scanning, the command station [device] get-networks will show available access points.
- 📡 station wlan0 connect MyWiFi — initiates a connection to the network named MyWiFi, requesting a password.
- 🔒 passphrase — the system will ask you to enter your password twice for confirmation.
- 🌐 address — a command to obtain an IP address via DHCP within the interactive shell.
- 🛑 quit — exit iwctl interactive mode.
Advantage iwd The advantage of iwd is its lack of dependence on heavy libraries and the ability to operate completely headless. Configuration is stored in text files, simplifying automated deployment across multiple servers. However, it's worth remembering that iwd may conflict with a running NetworkManager, so it's recommended to use only one management tool.
⚠️ Caution: When switching between NetworkManager and iwctl, you must stop each other's services. Running both simultaneously may result in connection instability and wireless adapter lockup.
Configuration via wpa_supplicant and manual configurations
For older systems or specific server tasks, a combination of wpa_supplicant And dhcpcd (or systemd-networkd). This is the "classic" method, which provides complete control over the authentication process. It requires creating a configuration file that specifies the network parameters.
The configuration file is usually located at the path /etc/wpa_supplicant/wpa_supp.conf. You must specify the network name (SSID) and the hashed password. To generate the password hash, use the command wpa_passphrase"SSID""password"The resulting data block is copied to the config file, which avoids storing passwords in cleartext.
network={ssid="MyHomeNetwork"
psk="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
}
After preparing the config, the daemon is started. wpa_supplicant specifying the interface and file path. A DHCP client is launched in parallel to obtain an IP address. This method requires more steps, but is the most reliable in environments where other network managers may behave unpredictably.
☑️ Check before connection
Comparison of WiFi connection methods
The choice of tool depends on the specific task and environment. Below is a table to help you choose the optimal method for your situation in Debian.
| Method | Complexity | Resources | Best use |
|---|---|---|---|
| nmcli | Low | Average | Desktops, laptops, complex networks |
| iwctl | Average | Low | Modern systems, minimalism |
| wpa_supplicant | High | Minimum | Servers, embedded systems |
| GUI (GNOME/KDE) | Minimum | Tall | User PCs |
Each method has its own strengths. nmcli convenient for, iwctl fast and modern, and wpa_supplicant Ensures maximum compatibility. Understanding all three approaches makes the administrator a versatile specialist.
It's important to keep in mind that interfaces and commands may vary slightly between Debian versions. Always consult the official man pages (man nmcli, man iwctl) if the standard commands do not work as expected.
Solving common problems
Even if you enter commands correctly, errors may occur. A common problem is the "failed" or "no network" status. This can be caused by an incorrect password, a hidden SSID, or a driver-level block. Check the logs via journalctl -u NetworkManager or dmesg | grep firmware helps to identify the cause.
If a driver requires proprietary firmware, the system may fail to load the kernel module. Debian has a package for this purpose. firmware-misc-nonfreeInstalling this package often solves problems with adapters. Realtek And Atheros, which do not work out of the box in a pure version of Debian without non-free repositories.
⚠️ Warning: Updating the Linux kernel may make old configuration files incompatible. Always test WiFi after a major system update (dist-upgrade).
It's also worth checking if airplane mode is enabled. The command rfkill list will show the lock status. If the status is "soft blocked," you can unlock the device with the command rfkill unblock wifiThis is a common problem after an improper shutdown or sleep.
Frequently Asked Questions (FAQ)
How to save a WiFi password in plaintext if wpa_passphrase doesn't work?
In the wpa_supplicant configuration file, you can specify the parameter psk="your_password" in quotation marks instead of a hash. However, this is less secure, as the password will be visible to anyone with access to the configuration file.
Why does the nmcli command say "Error: Connection activation failed"?
This could be due to an IP address conflict, incorrect DNS settings, or issues with the router's DHCP server. Try assigning a static IP address or restarting the network service.
Is it possible to connect Debian to a hidden network (Hidden SSID)?
Yes, in nmcli this is done with the command nmcli connection add type wifi ifname wlan0 con-name"Hidden" ssid"SSID_Name" wifi.hidden yesYou will need to manually specify the network name and security type.
How to switch between multiple known WiFi networks?
Use the command nmcli connection up id"Profile_Name" to switch to a specific saved profile. NetworkManager will automatically select the network with the best signal unless otherwise specified.
Where can I find connection error logs in Debian?
Main system log - /var/log/syslog or conclusion journalctl -f In real time. Search for lines containing the words "wpa," "firmware," or "dhcp" to diagnose.