OpenWrt Forum Archive

Topic: Wireless encryption does not work

The content of this topic has been archived on 6 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
hejira
19 Aug 2007, 09:53

Hi forum,

I have a problem with wireless encryption on my Asus WL-700gE. I tried everything but neither WEP nor WPA encryption seems to work. However, setting encryption to none enables me at least to get connected to the router but the bridge between wl0 and lan does not work. I can only ping the router, no other wired host in the network.

Anyway, my goal is to set up a WPA2-PSK AES encryption. But whenever my windows client tries to connect to the box it first establishes a connection but after a few seconds the connection is broken up again. During the short time in between I can't ping the WL-700gE. Any help on this would be very appreciated.

My /etc/config/wireless goes as follows:

config wifi-device              wl0
        option type             broadcom
        option channel          11

config wifi-iface
        option device           wl0
        option network          lan
        option mode             ap
        option ssid             wl700ge
        option hidden           0
        option encryption       psk2
        option key              testtest

The /etc/config/network file is:

config switch eth0
        option vlan0    "0 1 2 3 4 5*"

cnfig interface loopback
        option ifname   lo
        option proto    static
        option ipaddr   127.0.0.1
        option netmask  255.0.0.0

config interface lan
        option type     bridge
        option ifname   eth0.0
        option macaddr  00:18:F3:AB:05:B3
        option proto    static
        option ipaddr   192.168.1.2
        option netmask  255.255.255.0
        option gateway  192.168.1.1
        option dns      192.168.1.1

On a linux host I get the following output of the iwlist scanning command:

eth1      Scan completed :
          Cell 01 - Address: 00:18:F3:AB:05:B3
                    ESSID:"wl700ge"
                    Protocol:IEEE 802.11bg
                    Mode:Master
                    Channel:11
                    Encryption key:on
                    Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 6 Mb/s; 9 Mb/s
                              11 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s; 36 Mb/s
                              48 Mb/s; 54 Mb/s
                    Quality=98/100  Signal level=-25 dBm  
                    IE: IEEE 802.11i/WPA2 Version 1
                        Group Cipher : CCMP 
                        Pairwise Ciphers (1) : CCMP 
                        Authentication Suites (1) : PSK  
                    Extra: Last beacon: 44ms ago

Starting wpa_supplicant in debug mode gives me the following output:

Initializing interface 'eth1' conf '/etc/wpa_supplicant/wpa_supplicant.conf' driver 'ipw' ctrl_interface 'N/A' bridge 'N/A'
Configuration file '/etc/wpa_supplicant/wpa_supplicant.conf' -> '/etc/wpa_supplicant/wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant/wpa_supplicant.conf'
ctrl_interface='/var/run/wpa_supplicant'
eapol_version=1
ap_scan=1
Priority group 0
   id=0 ssid='wl700ge'
Initializing interface (2) 'eth1'
EAPOL: SUPP_PAE entering state DISCONNECTED
EAPOL: KEY_RX entering state NO_KEY_RECEIVE
EAPOL: SUPP_BE entering state INITIALIZE
EAP: EAP entering state DISABLED
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
wpa_driver_ipw_init is called
SIOCGIWRANGE: WE(compiled)=21 WE(source)=18 enc_capa=0xf
  capabilities: key_mgmt 0xf enc 0xf
WEXT: Operstate: linkmode=1, operstate=5
Own MAC address: 00:15:00:26:e5:32
wpa_driver_ipw_set_wpa: enabled=1
wpa_driver_ipw_set_key: alg=none key_idx=0 set_tx=0 seq_len=0 key_len=0
Failed to set encryption.
wpa_driver_ipw_set_key: alg=none key_idx=1 set_tx=0 seq_len=0 key_len=0
Failed to set encryption.
wpa_driver_ipw_set_key: alg=none key_idx=2 set_tx=0 seq_len=0 key_len=0
Failed to set encryption.
wpa_driver_ipw_set_key: alg=none key_idx=3 set_tx=0 seq_len=0 key_len=0
Failed to set encryption.
wpa_driver_ipw_set_countermeasures: enabled=0
wpa_driver_ipw_set_drop_unencrypted: enabled=1
Setting scan request: 0 sec 100000 usec
Added interface eth1
RTM_NEWLINK: operstate=0 ifi_flags=0x1002 ()
Wireless event: cmd=0x8b06 len=8
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
RTM_NEWLINK, IFLA_IFNAME: Interface 'eth1' added
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
RTM_NEWLINK, IFLA_IFNAME: Interface 'eth1' added
State: DISCONNECTED -> SCANNING
Starting AP scan (specific SSID)
Scan SSID - hexdump_ascii(len=7):
     77 6c 37 30 30 67 65                              wl700ge         
Trying to get current scan results first without requesting a new scan to speed up initial association
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Trying to associate with 00:18:f3:ab:05:b3 (SSID='wl700ge' freq=0 MHz)
Cancelling scan request
WPA: clearing own WPA/RSN IE
Automatic auth_alg selection: 0x1
wpa_driver_ipw_set_auth_alg: auth_alg=0x1
RSN: using IEEE 802.11i/D9.0
WPA: Selected cipher suites: group 16 pairwise 16 key_mgmt 2 proto 2
WPA: clearing AP WPA IE
WPA: set AP RSN IE - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 02 0c 00
WPA: using GTK CCMP
WPA: using PTK CCMP
WPA: using KEY_MGMT WPA-PSK
WPA: Set own WPA IE default - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 02 00 00
No keys have been configured - skip key clearing
wpa_driver_ipw_set_drop_unencrypted: enabled=1
State: SCANNING -> ASSOCIATING
wpa_driver_wext_set_operstate: operstate 0->0 (DORMANT)
WEXT: Operstate: linkmode=-1, operstate=5
Setting authentication timeout: 10 sec 0 usec
EAPOL: External notification - EAP success=0
EAPOL: External notification - EAP fail=0
EAPOL: External notification - portControl=Auto
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b1a len=15
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 250 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.
RSN: Ignored PMKID candidate without preauth flag
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 251 bytes of scan results (1 BSSes)
Scan results: 1
Selecting BSS from priority group 0
0: 00:18:f3:ab:05:b3 ssid='wl700ge' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
   selected based on RSN IE
Already associated with the selected AP.

(Last edited by hejira on 19 Aug 2007, 09:58)

Post #2
hejira
21 Aug 2007, 19:51

Did no one ever come across this problem? I've flashed Kamikaze several times now but still there's no way for me to connect to the box. Is there any other setting which could cause this? I'm quite desperate now so any hint would be welcomed.

(Last edited by hejira on 22 Aug 2007, 08:37)

Post #3
SyncRo
22 Aug 2007, 07:57

did you try to install hostapd-mini?

I think wpa_suppliant is not longer used for WPA2.

After I installed hostapd-mini it worked for me.

Post #4
hejira
22 Aug 2007, 20:00

Hi SyncRo,

thanks for the reply. I've just installed hostapd-mini but to be honest I have no idea what's it for. Unfortunately asking google didn't help much because there are only a few sites referencing it. Could you please explain to me what this package does and how I can configure it?

Btw, I saw that someone else was asking about the same thing in this forum a few weeks ago:
http://forum.openwrt.org/viewtopic.php?pid=53730

Looks to me as if this is an unresolved issue with kamikaze 7.07?

For completeness, here's a list of my router's installed kernel modules:

Module                  Size  Used by    Tainted: P
printer                 9852  0 (unused)
wlcompat               14944  0 (unused)
uhci                   29044  0 (unused)
usb-ohci               19252  0 (unused)
msdos                   6420  0 (unused)
vfat                   11692  0 (unused)
fat                    36856  0 [msdos vfat]
wl                    630776  0 (unused)
ext2                   41432  0 (unused)
usb-storage            68240  1
sd_mod                 12500  2
scsi_mod               70408  2 [usb-storage sd_mod]
ehci-hcd               20556  0 (unused)
usbcore                75288  0 [printer uhci usb-ohci usb-storage ehci-hcd]
ext3                   72804  2
jbd                    54840  2 [ext3]
ide-disk               16708  1
ide-detect               188  0 (unused)
aec62xx                 6940  1
ide-core              123936  1 [ide-disk ide-detect aec62xx]
switch-robo             4540  0 (unused)
switch-core             4864  0 [switch-robo]
diag                   22960  0 (unused)

(Last edited by hejira on 25 Aug 2007, 07:28)

Post #5
forum2006
22 Aug 2007, 20:24

Hostapd and wpa-supplicant is NOT for Broadcom wireless chipsets. He uses Broadcom wireless (option type broadcom).

Btw. bridged client-mode sucks...

(Last edited by forum2006 on 22 Aug 2007, 20:25)

Post #6
napierzaza
22 Aug 2007, 21:12

Hostapd is also not for broadcom.

It's strange considering these packages are available in the repositories for the Broadcom chipsets

Post #7
forum2006
23 Aug 2007, 09:29
napierzaza wrote:

It's strange considering these packages are available in the repositories for the Broadcom chipsets

It's because some Broadcom routers have a MiniPCI slot and you can replace the Broadcom WiFi card with some Atheros...

Post #8
hejira
25 Aug 2007, 07:26

Well, thanks anyway. I've already removed the hostapd-mini package.

So far WEP seems to work. I think something went wrong with the encryption key when I tried first. But I still don't have WPA/WPA2. What bothers me most is that the iwlist and wpa_supplicant outputs seem to be okay but there is no chance to connect. I've tried with several computers now running serveral OSes (XP, Vista, Ubuntu).

Is anyone aware of an alternative OS for the WL-700gE with the flexibility of openwrt?

(Last edited by hejira on 25 Aug 2007, 07:29)

Post #9
ye_old
27 Sep 2008, 16:23

I'm had the same issue and also wonder why we seem to be alone here.

Well I dug a little deeper than you did:

What I found out: no encryption works for me under a windows xp client trying to connect to a wl500gx kamikaze7.09.
What does work: but ONLY after a REBOOT. Changes in Settings alone don't suffice(eg. change from wpa to no encryption) are wireless non encrypted, and ethernet.

Sad, very sad. Linux clients have no problems at all. it's only the win boxes.

After doing a very in depth tcp dump session, I found, that there is litterally no communication whatsoever at the associaton/ip-getting procedure over the communicating interface (eg. wl0). only one thing:

15:58:50.865422 00:13:d3:5d:81:48 (oui Unknown) > Broadcast Null Unnumbered, xid, Flags [Command], length 6: 01 00

the mac adress is the win box
so there is no dhc discover/offer/request or anything the like.

So i found it: >>Zonealarm<< just blocked it all.

The problem why it worked after a reboot only: the network interface was started before the userspace program Zonealarm.

Pretty nasty, isn't it.

Anyway, I HOPE this helps someone

(Last edited by ye_old on 27 Sep 2008, 16:25)

The discussion might have continued from here.