Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#3108 - Some devices unable to connect in sae-mixed mode (WPA3/WPA2 Personal) #7858

Open
openwrt-bot opened this issue May 18, 2020 · 11 comments
Open
Labels

Comments

@openwrt-bot
Copy link

@openwrt-bot openwrt-bot commented May 18, 2020

Freddicus:

Device: Netgear Nighthawk X4S (R7800)
Software version: OpenWrt 19.07.2 r10947-65030d81f3 / LuCI openwrt-19.07 branch git-20.134.55291-ba0fb08
Steps to reproduce:

Devices previously able to connect to WPA2 mode:

  • 2012 Macbook Pro on macOS Catalina 10.15.4
  • Up-to-date raspberry pi 4 on raspbian buster

If I switch the radio to WPA2 Personal only (wpa-psk if not using luci, I believe), they can connect. I switch it back to WPA3/WPA2 Personal (sae-mixed) they cannot connect. Let me know what logs to gather and how to gather them. If it's a client issue, please confirm, but my understanding is that mixed mode should support all WPA2 Personal compatible devices.

@openwrt-bot
Copy link
Author

@openwrt-bot openwrt-bot commented May 19, 2020

Freddicus:

Problem persists in version: OpenWrt 19.07.3 r11063-85e04e9f46 / LuCI openwrt-19.07 branch git-20.138.63234-ccd9d67

@openwrt-bot
Copy link
Author

@openwrt-bot openwrt-bot commented Jun 5, 2020

Freddicus:

Problem persists in macOS Catalina 10.15.5.

@openwrt-bot
Copy link
Author

@openwrt-bot openwrt-bot commented Jun 22, 2020

sseide:

Same problem with Android 9 client (LineageOS 16.0, March 2020)

On OpenWRT 19.07.3 no connection possible with following setup:

option mode 'ap'
option encryption 'sae-mixed'
option ieee80211w '1'
option ieee80211r '1'
option ft_psk_generate_local '1'
option ft_over_ds '1'

Just changing encryption to 'psk2+ccmp' everything works fine.

LuCI openwrt-19.07 branch (git-20.167.61968-87da00a) / OpenWrt 19.07.3 r11063-85e04e9f46
Openwrt (TP-Link Archer C7) everything up-to-date as of 22.06.2020

@openwrt-bot
Copy link
Author

@openwrt-bot openwrt-bot commented Sep 28, 2021

wberrier:

I'm seeing this on 21.02.0-rc3 running on d-link dir-882 with some clients.

Interesting, I don't see it on these clients (Fedora 34):

03:00.0 Network controller: Intel Corporation Wireless 7265 (rev 59)

But I see it on these clients (Fedora 34):

03:00.0 Network controller: Intel Corporation Wireless 7260 (rev 83)

and

03:00.0 Network controller: Intel Corporation Wireless 7260 (rev 6b)

If I configure the AP to just WPA2 mode, or just WPA3 mode, the connect fine.

But wpa2/wpa3 mixed, the APs don't even show up on the 7260 devices... ??

Also, the fact I'm seeing this on mediatek and qualcomm APs smells like a wpad bug... ?

Also, in mixed mode, I had some android devices that also didn't connect (SM-T380).

@openwrt-bot
Copy link
Author

@openwrt-bot openwrt-bot commented Jan 17, 2022

niclau:

I am facing the same problem here.
Newifi D2 with Openwrt 19.07.8
macbook pro 2013 early running macos catalina 10.15.7, which is only able to work with psk+ccmp.

@openwrt-bot
Copy link
Author

@openwrt-bot openwrt-bot commented Jan 19, 2022

por:

Here no problem on macOS 10.15.7 (MBP mid 2012) with WPA2 (psk2) on OpenWRT 21.0.2.

@PerezChilli
Copy link

@PerezChilli PerezChilli commented Mar 12, 2022

Same here on 22.058.70382 with Xiaomi SmartMi Humidifier 2.

WPA-2 (PSK): working
WPA-3 (SAE): working
WPA-3/WPA-2 (SAE, PSK): unable to connect

Both with wpad-wolfssl and wpad-openssl (and also with basic versions).

@tomaszg7
Copy link

@tomaszg7 tomaszg7 commented Apr 3, 2022

I have similar problem. PSK and SAE work fine, but one device has problem with SAE-mixed: in my case it is Android 8 phone HTC Desire 12+.

I also have some Xiaomi smart devices but they connect fine: Air Purifier 3H, Robot Vacuum Mop Pro.

The router in my case is TP-Link TL-WR1043ND v1 with 21.02.2 OpenWRT. Using pure SAE was not an option for me as some of my devices are too old to support it. I ended up leaving my another router (hooked with fast bss transition) in PSK mode as a fallback.

@PerezChilli
Copy link

@PerezChilli PerezChilli commented Apr 3, 2022

I have similar problem. PSK and SAE work fine, but one device has problem with SAE-mixed: in my case it is Android 8 phone HTC Desire 12+.

I also have some Xiaomi smart devices but they connect fine: Air Purifier 3H, Robot Vacuum Mop Pro.

The router in my case is TP-Link TL-WR1043ND v1 with 21.02.2 OpenWRT. Using pure SAE was not an option for me as some of my devices are too old to support it. I ended up leaving my another router (hooked with fast bss transition) in PSK mode as a fallback.

I've disabled 802.11w feature and that helped me. Try this.

@tomaszg7
Copy link

@tomaszg7 tomaszg7 commented Apr 3, 2022

Hmm, it is disabled by default and I don't see anything that would enable it in my \etc\config\wireless. I have only 802.11r enabled.

Edit: I disabled 802.11r and the problem went away. That's nice but a bit unsatisfactory as I liked having a second AP to boost my range.

@rossiniscarface
Copy link

@rossiniscarface rossiniscarface commented May 22, 2022

For me its working with WPA2 PSK and WPA3 but not for sae-mixed only in combination with FT.
The curios thing is: iPhone 12 mini with iOS 15.5 is connecting fine (with FT-SAE)
iPad 8. Generation
iPad Pro 11 2. Generation both with iPadOS 15.5 can't connect.
MacBook Air M1 macOS 12.3.1 can't connect.

There are no logs on the router on the failed connects.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants