OpenWrt Forum Archive

Topic: RC4: WDS w/PSK-TKIP, Airport Express

The content of this topic has been archived on 21 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

RC4 is neat -- everything that one had to compile oneself is now easy. Except for this following problem:

I have an Apple AirPort Express and would like to use it as "remote WDS" station, with PSK-TKIP.

- My OpenWrt router is configured as AP and clients (including Apple's) can connect to it using PSK-TKIP.
- I can also configure it to WEP-128 and both clients and WDS will work.
- The combination PSK-TKIP and WDS just does not work.

I redirected the Airport's syslog output and in PSK-TKIP mode, it says:

Jan  1 00:00:06 169.254.207.143 express sys: Initialized (firmware 6.2).
Jan  1 00:00:15 169.254.207.143 express dot11: WDS established with station 00:0c:41:12:23:34.
Jan  1 00:00:16 169.254.207.143 express dot11: Deauthorizing station 00:0c:41:12:23:34 [2]
Jan  1 00:00:38 169.254.207.143 express dot11: Deauthorizing station 00:0c:41:12:23:34 [15]
Jan  1 00:01:00 169.254.207.143 express dot11: Deauthorizing station 00:0c:41:12:23:34 [15]
... etc ...

I made sure that nas4not is called with the correct arguments (by the 00-nas hotplug script), and the nvram variables seem to be correct also:

wl0_akm=psk
wl0_wpa_psk=AKeyThatIsNotSecure
wl0_crypto=tkip
wl0_wds=00:14:51:11:99:77
wl0_wep=disabled
wl0_ssid=wireless
wl0_mode=ap
wl0_wpa_gtk_rekey=3600
wl0_lazywds=0
lan_ifname=br0
lan_ifnames=vlan2 eth2 eth3 eth4

nas4not lan wds0.49153 up auto tkip psk AKeyThatIsNotSecure wireless

nas package is version 3.90.37-14

Something seems to go wrong in the authentication process (nas/nas4not). I there a way to turn on debug?

I tried PSK2-AES and all combinations also, but only WEP or no encryption work with WDS.

Thanks,
Robert

In addition, the openwrt log shows:

user.info : eapol_sup_dispatch: wds0.49153: unknown EAPOL type 3
user.info : eapol_sup_dispatch: wds0.49153: unknown EAPOL type 3
user.info : eapol_sup_dispatch: wds0.49153: unknown EAPOL type 3
user.info : eapol_sup_dispatch: wds0.49153: unknown EAPOL type 3
...

# wl sta_info 00:14:51:11:99:77
STA 00:14:51:11:99:77:
         rateset [ 1 2 5.5 11 18 24 36 48 54 ]
         idle   5 seconds
         in network 0 seconds
         state :   
         flags 0x40   

(A working WDS link with a second openwrt box has "state : AUTHORIZED")

The discussion might have continued from here.