OpenWrt Forum Archive

Topic: Meraki Mini DHCP client problem using WPA or WPA2

The content of this topic has been archived on 27 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi,

I recently bought some Meraki Minis in hopes of turning them into wireless clients using OpenWRT.  However, when I use WPA or WPA2 with either CCMP or TKIP compression, it takes 9 minutes to acquire an IP address.   When I use WEP or no encryption, the Mini acquires the IP address almost immediately upon associating.  The odd thing is that the Mini authenticates (EAP-TTLS) without a problem, but DHCP and ARP packets do not show up until 9 minutes or so have past.

I tested the Minis on two different APs and the results were the same.  One was a WRAP with hostapd configured for WPA2 with EAP-TTLS and the other was a Buffalo G54 with Whiterussian.

root@OpenWrt:~# 80211stats -i eth1
114 rx from wrong bssid
10 rx discard due to it's a dup
164 rx discard due to mcast echo
187797 rx element unknown
1103 rx frame chan mismatch
1653 rx seq# violation (CCMP)      <--- Lots of errors before getting IP address. Does this mean anything?
1 tx failed due to no defkey
70 active scans started
1 nodes timed out inactivity

Has anyone found the cause to this problem or a workaround other that WEP/no encryption?  I noticed that I am not the only one:
http://forum.openwrt.org/viewtopic.php?id=10707

I just recompiled madwifi without the no_debug patch and ran 80211debug +crypto.  I found there are many replay errors. 

wlan: 0.8.4.2 (svn r2568)
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.30.13 (AR5212, AR5312, RF2316, TX_DESC_SWAP)
ath_rate_minstrel: Minstrel automatic rate control algorithm 1.2 (svn r2568)
ath_rate_minstrel: look around rate set to 10%
ath_rate_minstrel: EWMA rolloff level set to 75%
ath_rate_minstrel: max segment size in the mrr set to 6000 us
wlan: mac acl policy registered
ath_ahb: 0.9.4.5 (svn r2568)
ath_pci: switching rfkill capability off
ath_pci: switching per-packet transmit power control off
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 11.0 phy 4.8 radio 7.0
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
wifi0: Atheros 2315 WiSoC: mem=0xb0000000, irq=3
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 167 >
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 168 >
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 169 >
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 170 >
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 172 >
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 173 >
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 175 >
~~~~~~~

## approximately nine minutes after starting wpa_supplicant 

eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 747 >
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 748 >
eth1: [00:02:6f:24:39:02] AES-CCM replay detected <keyix 1, rsc 749 >
eth1: ccmp_attach: unable to load kernel AES crypto support
eth1: ieee80211_crypto_setkey: AES-CCM keyix 2 flags 0x6 mac 00:00:00:00:00:00  tsc 0 len 16

## acquires IP address at this point

Today I compiled an older version of Kamikaze (r6529) for the Meraki Mini.   I know this version works flawlessly with WPA/WPA2 on a WL-500GP with an Atheros 5212 mini-pci card.  Unfortunately, the DHCP client and ARP problems still occured on the Mini.  Can any one else confirm this?  I would like to post a bug in madwifi.org.



WL-500GP:

wlan: 0.8.4.2 (0.9.2.1)
ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413, REGOPS_FUNC)
ath_rate_sample: 1.2 (0.9.2.1)
wlan: mac acl policy registered
ath_pci: 0.9.4.5 (0.9.2.1)
PCI: Enabling device 01:02.0 (0000 -> 0002)
ath_pci: switching rfkill capability off
wifi0: 11a rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps
24Mbps 36Mbps 48Mbps 54Mbps
wifi0: turboA rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 5.6 phy 4.1 5ghz radio 1.7 2ghz radio 2.3
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
wifi0: Atheros 5212: mem=0x40010000, irq=2

Meraki Mini:

wlan: 0.8.4.2 (0.9.2.1)
wlan: mac acl policy registered
ath_hal: module license 'Proprietary' taints kernel.
ath_hal: 0.9.17.2 (AR5212, AR5312, RF2316, TX_DESC_SWAP)
ath_rate_sample: 1.2 (0.9.2.1)
ath_ahb: 0.9.4.5 (0.9.2.1)
ath_pci: switching rfkill capability off
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 
12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: H/W encryption support: WEP AES AES_CCM TKIP
wifi0: mac 11.0 phy 4.8 radio 7.0
wifi0: Use hw queue 1 for WME_AC_BE traffic
wifi0: Use hw queue 0 for WME_AC_BK traffic
wifi0: Use hw queue 2 for WME_AC_VI traffic
wifi0: Use hw queue 3 for WME_AC_VO traffic
wifi0: Use hw queue 8 for CAB traffic
wifi0: Use hw queue 9 for beacons
wifi0: Atheros 2315 WiSoC: mem=0xb0000000, irq=3

The discussion might have continued from here.