Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wi-Fi: laptop yes, phone no

    Wireless
    6
    46
    5.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Mmm, the fact it connects fine unencrypted implies the problem is entirely in the authentication. That should all be in software so I wouldn't expect the wifi device used to make any difference.

      Do you see anything logged when the Android clients try to connect?

      M 1 Reply Last reply Reply Quote 0
      • M
        mrkaban @stephenw10
        last edited by

        @stephenw10 said in Wi-Fi: laptop yes, phone no:

        Mmm, the fact it connects fine unencrypted implies the problem is entirely in the authentication. That should all be in software so I wouldn't expect the wifi device used to make any difference.

        Do you see anything logged when the Android clients try to connect?

        There is nothing in the firewall log from the WLAN interface (wireless network). Where else can I watch?

        fireodoF 1 Reply Last reply Reply Quote 0
        • fireodoF
          fireodo @mrkaban
          last edited by fireodo

          @mrkaban said in Wi-Fi: laptop yes, phone no:

          There is nothing in the firewall log from the WLAN interface (wireless network).

          (You should see a association before the authentication part begins)

          When my Android Smartphone connects I see this in wireless log:

          Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
          Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 2 notification
          Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: disassociated
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: pairwise key handshake completed (RSN)
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 RADIUS: starting accounting session 665BCC0E11586A5E
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: authorizing port
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (4/4 Pairwise)
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 3/4 msg of 4-Way Handshake
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (2/4 Pairwise)
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 1/4 msg of 4-Way Handshake
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: start authentication
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 1 notification
          Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: associated
          

          (MAC Adress is edited)

          Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
          SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
          pfsense 2.7.2 CE
          Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

          GertjanG M 2 Replies Last reply Reply Quote 0
          • GertjanG
            Gertjan @fireodo
            last edited by

            @fireodo

            So, there is no problem what so ever.
            The "WPA" (password etc) is ok.
            But then :

            a9e7720a-a844-4d9f-b10c-0ad553fec9ea-image.png

            RADIUS: starting accounting session 665BCC0E11586A5E

            Where did that came from ?

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            fireodoF 1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Because it's configured for WPA Ent I imagine.

              fireodoF 1 Reply Last reply Reply Quote 0
              • fireodoF
                fireodo @Gertjan
                last edited by

                @Gertjan said in Wi-Fi: laptop yes, phone no:

                Where did that came from ?

                I dont know - I have no Radius Server set up.

                Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                pfsense 2.7.2 CE
                Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                1 Reply Last reply Reply Quote 0
                • fireodoF
                  fireodo @stephenw10
                  last edited by

                  @stephenw10 said in Wi-Fi: laptop yes, phone no:

                  Because it's configured for WPA Ent I imagine.

                  If Ent means "Enterprise" then its not - its WPA2 with Pre-shared Key and AES

                  Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                  SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                  pfsense 2.7.2 CE
                  Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Huh, interesting. Checking....

                    1 Reply Last reply Reply Quote 0
                    • M
                      mrkaban @fireodo
                      last edited by

                      @fireodo said in Wi-Fi: laptop yes, phone no:

                      @mrkaban said in Wi-Fi: laptop yes, phone no:

                      There is nothing in the firewall log from the WLAN interface (wireless network).

                      When my Android Smartphone connects I see this in wireless log:

                      Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
                      Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 2 notification
                      Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: disassociated
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: pairwise key handshake completed (RSN)
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 RADIUS: starting accounting session 665BCC0E11586A5E
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: authorizing port
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (4/4 Pairwise)
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 3/4 msg of 4-Way Handshake
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (2/4 Pairwise)
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 1/4 msg of 4-Way Handshake
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: start authentication
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 1 notification
                      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: associated
                      

                      (MAC Adress is edited)

                      and where exactly do you see these statistics? Status \ System Logs \ System \ Wireless connection

                      fireodoF 1 Reply Last reply Reply Quote 0
                      • fireodoF
                        fireodo @mrkaban
                        last edited by fireodo

                        @mrkaban said in Wi-Fi: laptop yes, phone no:

                        and where exactly do you see these statistics? Status \ System Logs \ System \ Wireless connection

                        Exact there! (Highlighted)

                        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                        pfsense 2.7.2 CE
                        Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Yes I see the same.
                          You should also see it in Status > Wireless

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            mrkaban @stephenw10
                            last edited by mrkaban

                            @stephenw10 said in Wi-Fi: laptop yes, phone no:

                            Yes I see the same.
                            You should also see it in Status > Wireless

                            It took me a moment to realize that the most recent ones were from below. Here's what appears after trying to connect from your phone:

                            alt text

                            not in the form of a picture, antispam does not allow you to write

                            fireodoF 1 Reply Last reply Reply Quote 0
                            • fireodoF
                              fireodo @mrkaban
                              last edited by

                              @mrkaban said in Wi-Fi: laptop yes, phone no:

                              Here's what appears after trying to connect from your phone:

                              I see there:

                              EAPOL-Key timeout
                              

                              and I interprete that like the Authentication is not coming from your device - is that smartphone logging in correctly in a other access point?

                              Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                              SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                              pfsense 2.7.2 CE
                              Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Also I assume if you login from the laptop the logs look the same as we see?

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  mrkaban @stephenw10
                                  last edited by

                                  @stephenw10 said in Wi-Fi: laptop yes, phone no:

                                  Also I assume if you login from the laptop the logs look the same as we see?

                                  It connects to all other Wi-fi points from the phone without problems.

                                  This is what I see when I connect from my laptop:

                                  alt text

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Possible the phone is restricted to WPA3 only? Other APs you tested against are WPA2?

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      mrkaban @stephenw10
                                      last edited by

                                      @stephenw10 said in Wi-Fi: laptop yes, phone no:

                                      Possible the phone is restricted to WPA3 only? Other APs you tested against are WPA2?

                                      Currently connected to a wireless network with WPA2-PSK

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        @fireodo said in Wi-Fi: laptop yes, phone no:

                                        rtl8192ce

                                        What driver is that using? rtwn(4)? Is that USB or PCI connected?

                                        What does sysctl dev.rtwn.0.hwcrypto show?

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          mrkaban @stephenw10
                                          last edited by

                                          @stephenw10 said in Wi-Fi: laptop yes, phone no:

                                          sysctl dev.rtwn.0.hwcrypto

                                          If you run "Diagnostics \ Command Prompt" here, then the output:

                                          dev.rtwn.0.hwcrypto: 1

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Hmm, well I don't think that hardware crypto applies to WPA2 but try disabling that with:
                                            sysctl dev.rtwn.0.hwcrypto=0

                                            Unclear if that applies immediately.

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.