pfSense English Support > Wireless

EAPOL Key Timeout

(1/3) > >>

namezero111111:
Dear folks, on pfsense 2.3.5_1 with a Compex Atheros card, I am unable to use a WPA-PSK setup.

AA:AA:AA:AA:AA:AA = Client
BB:BB:BB:BB:BB:BB = PFSense

The logs show the following:

--- Quote ---Jan 17 12:08:15    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: PTKSTART: Retry limit 4 reached
Jan 17 12:08:15    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: EAPOL-Key timeout
Jan 17 12:08:14    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: sending 1/4 msg of 4-Way Handshake
Jan 17 12:08:14    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: EAPOL-Key timeout
Jan 17 12:08:13    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: sending 1/4 msg of 4-Way Handshake
Jan 17 12:08:13    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: EAPOL-Key timeout
Jan 17 12:08:12    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: sending 1/4 msg of 4-Way Handshake
Jan 17 12:08:12    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: EAPOL-Key timeout
Jan 17 12:08:11    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: sending 1/4 msg of 4-Way Handshake
Jan 17 12:08:11    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA IEEE 802.1X: unauthorizing port
Jan 17 12:08:11    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: start authentication
Jan 17 12:08:11    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA WPA: event 1 notification
Jan 17 12:08:11    hostapd       ath0_wlan3: STA AA:AA:AA:AA:AA:AA IEEE 802.11: associated
--- End quote ---


However, tcpdump shows that the client is acutally reaplying on the inferface


--- Quote ---tcpdump: listening on ath0_wlan3, link-type EN10MB (Ethernet), capture size 65535 bytes
12:35:01.053827 90:a4:de:DD:EE:FF > AA:AA:AA:AA:AA:AA, ethertype EAPOL (0x888e), length 113: EAPOL key (3) v2, len 95
12:35:01.062013 AA:AA:AA:AA:AA:AA > BB:BB:BB:BB:BB:BB, ethertype EAPOL (0x888e), length 135: EAPOL key (3) v1, len 117
12:35:02.055923 90:a4:de:DD:EE:FF > AA:AA:AA:AA:AA:AA, ethertype EAPOL (0x888e), length 113: EAPOL key (3) v2, len 95
12:35:02.058724 AA:AA:AA:AA:AA:AA > BB:BB:BB:BB:BB:BB, ethertype EAPOL (0x888e), length 135: EAPOL key (3) v1, len 117
12:35:03.058374 90:a4:de:DD:EE:FF > AA:AA:AA:AA:AA:AA, ethertype EAPOL (0x888e), length 113: EAPOL key (3) v2, len 95
12:35:03.063017 AA:AA:AA:AA:AA:AA > BB:BB:BB:BB:BB:BB, ethertype EAPOL (0x888e), length 135: EAPOL key (3) v1, len 117
12:35:04.060143 90:a4:de:DD:EE:FF > AA:AA:AA:AA:AA:AA, ethertype EAPOL (0x888e), length 113: EAPOL key (3) v2, len 95
12:35:04.062959 AA:AA:AA:AA:AA:AA > BB:BB:BB:BB:BB:BB, ethertype EAPOL (0x888e), length 135: EAPOL key (3) v1, len 117
--- End quote ---


Hostapd version reports 2.0; this setup works on 2.0.1 with hostapd 0.6.8.

The generated hostapd config file looks as follows:

--- Code: ---interface=ath0_wlan3
driver=bsd
logger_syslog=-1
logger_syslog_level=0
logger_stdout=-1
logger_stdout_level=0
dump_file=/tmp/hostapd_ath0_wlan3.dump
ctrl_interface=/var/run/hostapd
ctrl_interface_group=wheel
#accept_mac_file=/tmp/hostapd_ath0_wlan3.accept
#deny_mac_file=/tmp/hostapd_ath0_wlan3.deny
#macaddr_acl=
ssid=Lalaland
debug=
wpa=2
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP
wpa_group_rekey=60
wpa_gmk_rekey=3600
wpa_strict_rekey=
wpa_passphrase=aaaa1111
--- End code ---


Could anyone please shed some light on this?

GruensFroeschli:
11:11:11:11:11:11 is a multicast address
Don't use this for anything ever unless you know what you are doing.

namezero111111:
Thank you, edited bogus MACs to not reflect multicast address.

GruensFroeschli:
Really?
Obfuscating MAC addresses?

GruensFroeschli:
Since you're on _wlan3, are you using multiple virtual BSSIDs?
Which frequency are you using?
Are you on a DFS channel?

Navigation

[0] Message Index

[#] Next page

Go to full version