Wi-Fi: laptop yes, phone no

mrkaban · Mar 29, 2024, 2:47 PM

Hello, I am using pfSense CE 2.7.2-RELEASE (amd64) and I am wildly delighted. I bought and installed a wi-fi board, set it up - I connect from a laptop via wi-fi and work without problems, there is no authentication from two different phones, and then he says that most likely the password is not correct. The password is correct.
The joke is, if you disable wpa2, they say the network without a password, then it connects from the phone (android 14) without problems.

Maybe someone has encountered it, or can at least advise what to do. I reread the documentation, tried different instructions.

fireodo · Mar 29, 2024, 2:25 PM

@mrkaban said in Wi-Fi: laptop yes, phone no:

Maybe someone has encountered it, or can at least advise what to do. I reread the documentation, tried different instructions

Sometimes the password (containing some special character) or the SSID with special character or containing spaces could be the culprit ...

JKnott · Mar 29, 2024, 2:33 PM

@mrkaban

WEP???

Tell me you're not using WEP. It's not secure. You should be at least using WPA2. If you have something that can only use 802.11b, toss it. It's obsolete!

However, as mentioned you might have characters in your password that something chokes on. I ran into that once and stopped using special characters in passwords.

mrkaban · Mar 29, 2024, 2:35 PM

@fireodo said in Wi-Fi: laptop yes, phone no:

@mrkaban said in Wi-Fi: laptop yes, phone no:

Maybe someone has encountered it, or can at least advise what to do. I reread the documentation, tried different instructions

Sometimes the password (containing some special character) or the SSID with special character or containing spaces could be the culprit ...

There are only letters and symbols in the password, I even tried the password "hello123". I'm not sure what makes sense, but I'll show you the wireless network settings anyway.

mrkaban · Mar 29, 2024, 2:38 PM

@JKnott said in Wi-Fi: laptop yes, phone no:

@mrkaban

WEP???

Tell me you're not using WEP. It's not secure. You should be at least using WPA2. If you have something that can only use 802.11b, toss it. It's obsolete!

However, as mentioned you might have characters in your password that something chokes on. I ran into that once and stopped using special characters in passwords.

Sorry, I misspoke, wpa2. Tired after work.

Gertjan · Mar 29, 2024, 2:45 PM

@mrkaban said in Wi-Fi: laptop yes, phone no:

I connect from a laptop via wi-fi and work without problems

Now you can use that laptop to connect to the GUI of your AP, and see what devices (their MAC addresses) are connected to it - or try to connect to it ?.

@mrkaban said in Wi-Fi: laptop yes, phone no:

disable wep,

wep ? Are you sure ? Does that still exist ?? Where did you find this AP ? ;)

phone (android 14)

Can it be that a recent phone (is it ? don't know anything about android) doesn't want to use 'wifi wep' as it is to insecure ? You might as well stop encryption.

mrkaban · Mar 29, 2024, 2:49 PM

This post is deleted!

fireodo · Mar 29, 2024, 2:58 PM

@mrkaban said in Wi-Fi: laptop yes, phone no:

I'm not sure what makes sense, but I'll show you the wireless network settings anyway.

The SSID is OK should not be a impediment. And all the other settings are normal too.

mrkaban · Mar 30, 2024, 7:08 AM

@Gertjan said in Wi-Fi: laptop yes, phone no:

@mrkaban said in Wi-Fi: laptop yes, phone no:

I connect from a laptop via wi-fi and work without problems

Now you can use that laptop to connect to the GUI of your AP, and see what devices (their MAC addresses) are connected to it - or try to connect to it ?.

@mrkaban said in Wi-Fi: laptop yes, phone no:

disable wep,

wep ? Are you sure ? Does that still exist ?? Where did you find this AP ? ;)

phone (android 14)

Can it be that a recent phone (is it ? don't know anything about android) doesn't want to use 'wifi wep' as it is to insecure ? You might as well stop encryption.

Corrected it. I made a mistake. WPA2 is used. There are screenshots of the settings in the comments. It connects from laptops without problems, but does not want to connect from android phones - it writes authentication, and then failed, the password is not correct.

It seems to me that the problem may be in the wi-fi card. If you use the exclusion method to look for a problem. I have a Realtek rtl8192ce card.

fireodo · Apr 2, 2024, 10:45 AM

@mrkaban said in Wi-Fi: laptop yes, phone no:

It seems to me that the problem may be in the wi-fi card. If you use the exclusion method to look for a problem. I have a Realtek rtl8192ce card.

That ~~could be a possible reason~~ - i use here only WLE200NX PCIe Cards and a usb-dongle (Linksys WUSB6300) based on RTL8812AU Chipset. All my devices (Laptop, Computer, Smartphone etc.) connect without issues.

Edit: My bad - as @stephenw10 said, the authentication occurs in software not in Hardware so the type of WiFi device should not be a cause.

stephenw10 · Apr 2, 2024, 2:30 AM

The authentication is done in software, I really wouldn't expect the card to make any difference there. Assuming it connects at all.

I would try using only hex characters in the pass phrase. Been a while since I've hit that though.

JKnott · Apr 2, 2024, 2:30 AM

@stephenw10 said in Wi-Fi: laptop yes, phone no:

I would try using only hex characters in the pass phrase. Been a while since I've hit that though.

Alphanumeric are also probably OK. I also once had an issue with some characters. What I do is go to www.grc.com and use their Perfect Passwords to get a 63 character random alphanumeric string. I figure that should be difficult enough to guess.

Johnwick 0 · Apr 2, 2024, 11:26 AM

Wi-Fi connection is functional on the laptop but unavailable on the phone. This discrepancy suggests a device-specific issue rather than a network-wide problem. DirecTV provider Troubleshoot by restarting the phone, toggling Wi-Fi on and off, and ensuring the correct network credentials are entered. If the problem persists, reset network settings on the phone or contact the device manufacturer for further assistance.

mrkaban · Apr 2, 2024, 1:04 PM

@stephenw10 said in Wi-Fi: laptop yes, phone no:

The authentication is done in software, I really wouldn't expect the card to make any difference there. Assuming it connects at all.

I would try using only hex characters in the pass phrase. Been a while since I've hit that though.

I don't understand why if you make the network open, then everything works. I set the password to "hello123", but it didn't help with different settings. I even tried the password "123456789" with wpa2.

stephenw10 · Apr 2, 2024, 1:08 PM

Mmm, the fact it connects fine unencrypted implies the problem is entirely in the authentication. That should all be in software so I wouldn't expect the wifi device used to make any difference.

Do you see anything logged when the Android clients try to connect?

mrkaban · Apr 2, 2024, 1:18 PM

@stephenw10 said in Wi-Fi: laptop yes, phone no:

Mmm, the fact it connects fine unencrypted implies the problem is entirely in the authentication. That should all be in software so I wouldn't expect the wifi device used to make any difference.

Do you see anything logged when the Android clients try to connect?

There is nothing in the firewall log from the WLAN interface (wireless network). Where else can I watch?

fireodo · Apr 2, 2024, 1:50 PM

@mrkaban said in Wi-Fi: laptop yes, phone no:

There is nothing in the firewall log from the WLAN interface (wireless network).

(You should see a association before the authentication part begins)

When my Android Smartphone connects I see this in wireless log:

Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 2 notification
Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: disassociated
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: pairwise key handshake completed (RSN)
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 RADIUS: starting accounting session 665BCC0E11586A5E
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: authorizing port
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (4/4 Pairwise)
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 3/4 msg of 4-Way Handshake
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (2/4 Pairwise)
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 1/4 msg of 4-Way Handshake
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: start authentication
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 1 notification
Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: associated

(MAC Adress is edited)

Gertjan · Apr 2, 2024, 1:35 PM

@fireodo

So, there is no problem what so ever.
The "WPA" (password etc) is ok.
But then :

login-to-view

RADIUS: starting accounting session 665BCC0E11586A5E

Where did that came from ?

stephenw10 · Apr 2, 2024, 1:37 PM

Because it's configured for WPA Ent I imagine.

fireodo · Apr 2, 2024, 1:41 PM

@Gertjan said in Wi-Fi: laptop yes, phone no:

Where did that came from ?

I dont know - I have no Radius Server set up.