#!/bin/bash

NETWORK=$(wpa_cli -i wlan0 add_network) || exit

SSID="ssid.goes.here"
USERNAME="username.goes.here"

wpa_cli -i wlan0 set_network $NETWORK ssid \"$SSID\" || exit
wpa_cli -i wlan0 set_network $NETWORK key_mgmt WPA-EAP || exit
wpa_cli -i wlan0 set_network $NETWORK eap TTLS || exit
wpa_cli -i wlan0 set_network $NETWORK anonymous_identity \"anonymous\" || exit

read -p "Password for $USERNAME: " -s PASSWORD || exit

wpa_cli -i wlan0 set_network $NETWORK identity \"$USERNAME\" || exit
wpa_cli -i wlan0 set_network $NETWORK password \"$PASSWORD\" || exit
wpa_cli -i wlan0 set_network $NETWORK phase2 \"auth=MSCHAPV2\" || exit