Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#1952 - wifi with hidden ssid and mac-filter doesn't work on IOS12; tp-link_tl-wr842nd_v1 #6858

Open
openwrt-bot opened this issue Nov 15, 2018 · 2 comments
Labels

Comments

@openwrt-bot
Copy link

edgark:

on tp-link_tl-wr842nd_v1 18.06 and 18.06.1

If hidden ssid and mac-filter is enabled, IOS 12 doesn't able to connect on this wifi network.

But if ssid broadcast is running with mac-filter enabled or ssid broadcast hidden and mac-filter disabled, then it works.

@openwrt-bot
Copy link
Author

Jammmmm:

I can confirm this is an issue, but it is not dependant on iOS. I have tested Android (LG v40 ThinQ - Android 9) and iOS (iPhone 7 - iOS 14.6) and it happens with both devices. I have yet to test with laptops, media boxes (eg. Roku) but can do so if needed (Windows and Linux, possibly Mac OS X too).

I am using a TP-Link Archer C7 v4.0 and OpenWRT 19.07.7 r11306-c4a6851c72 / LuCI openwrt-19.07 branch git-21.044.30835-34e0d65.

My /etc/config/wireless contains a list of valid MAC addresses, such as:

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'my_network'
	option encryption 'psk2'
	option key 'abcdefg'
	option hidden '1'
	list maclist '12:34:56:78:90:AB'
	list maclist 'CD:EF:01:23:45:67'
	list maclist '89:AB:CD:EF:12:34'
	option macfilter 'allow'
	option isolate '1'

With the above setup, my devices do not connect to the network, even though they should.

If I set hidden to 0, the MAC filtering works fine.
Alternatively I can disable the MAC filter and use a hidden ESSID.

From what I can see, you can have MAC filtering OR hidden ESSID. Not both at the same time.

I know neither option should be considered a security feature, but I'd like to use them together for peace of mind.

@Monitorchik
Copy link

Monitorchik commented Jan 21, 2024

Have you solved the issue? It doesn't work for me:

config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid 'ARD_5G'
option encryption 'sae'
option hidden '1'
option key 'gfr4fs0df:fse'
option wpa_disable_eapol_key_retries '1'
option isolate '1'
list maclist 'FA:39:46:6D:76:41'
list maclist 'CA:EB:51:49:FC:32'
list maclist '40:81:F2:1F:5D:HD'
option macfilter 'allow'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants