--- a/sys/netproto/802_11/wlan_xauth/ieee80211_xauth.c
+++ b/sys/netproto/802_11/wlan_xauth/ieee80211_xauth.c
@@
 static const struct ieee80211_authenticator xauth = {
 	.ia_name	= "external",
-	.ia_attach	= NULL,
-	.ia_detach	= NULL,
+	.ia_attach	= xauth_attach,
+	.ia_detach	= xauth_detach,
 	.ia_node_join	= NULL,
 	.ia_node_leave	= NULL,
 };
 (with the obvious nrefs++/nrefs-- implementations, matching wlan_wep/wlan_tkip,
  so kldunload is refused while 802.1x/WPA-external VAPs hold iv_auth)