Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#2017 - [wpad] cannot use encryption on 802.11s mesh #8428

Closed
openwrt-bot opened this issue Dec 20, 2018 · 1 comment
Closed

FS#2017 - [wpad] cannot use encryption on 802.11s mesh #8428

openwrt-bot opened this issue Dec 20, 2018 · 1 comment
Labels

Comments

@openwrt-bot
Copy link

mpratt14:

TLDR:
option encryption 'none'
works perfectly

option encryption '# literally anything else'
wpad assumes encryption = none and everything works
OR
breaks config, mesh interface never comes up
(more than just the UI, also tested with iw)

Router A: ENS202EXT (Atheros/mac80211)
Router B: ENS202EXT (Atheros/mac80211)

Openwrt 18.06.1

wpad 2018-05-21-62566bc2-5 (current as of post)
also tried other versions of wpad (mesh, mesh-openssl)

I have tried both Mesh only and Mesh + AP.
I have not tried wpa_supplicant.

Currently have a mesh point that is working, but unencrypted. Along with an AP

LuCI does not allow the option to add encryption
If I force encryption in the configuration, mesh does not start up.
the package authSAE doesn't exist anymore...so I assume that I am not missing requirements...

With Unencrypted mesh, LuCI shows association between the routers
Routers show up on each other's Associated Stations list
everything seems to be working, with manual range testing since I can't ping between routers, I guess because of firewall.

the most closely related issue I could find is [[https://github.com/openwrt/mt76/issues/72|this]]

another relevant links:
https://forum.openwrt.org/t/setting-up-authenticated-mesh-with-wpad-mesh/12399/49

they claim it's good but it isn't
Not sure if this is by design or never resolved.
Please advise how to better show the problem, what to post, etc...
I will be testing this on other routers as well

Working mesh config in wireless:

config wifi-iface
option device 'radio0'
option encryption 'none'
option mode 'mesh'
option mesh_id '$ID'
option mesh_fwding '1'
option network 'WLAN'

Mesh Config that fails:

config wifi-iface 'SDMesh'
option network 'WLAN'
option device 'radio0'
option mode 'mesh'
option mesh_fwding '1'
option mesh_id '$ID'
option encryption 'psk2+ccmp'
option key '$KEY'

@openwrt-bot
Copy link
Author

jeffsf:

802.11s encrypted mesh requires wpad-mesh at this time. It does not appear that wpad-full incorporates the required functionality at this time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant