Pfsense and g1 phone (android)

gecka

I can confirm this problem.

At initial connect I can ping the device for just a brief second before all packets to it begin to get lost. I have a dev model with full root access so if somebody is willing to help (I have no idea what I am doing with the thing yet) I can install tools like tcpdump and such to capture packets on both sides.

Cino

@alphis:

absolutely inferior time warner cable in NYC my connection is going strong.

Can I ask why TWC is inferior? I know cablevision highspeed is faster but other then that, they're services are the same. TWC basic RR is 10m/512k, but they offer turbo which is 20m/1m with speedboost up to 25mb down

cmb

If you aren't using 1.2.1, upgrade. The wireless in FreeBSD 7.0 seems to be more compatible with some devices. For one, Apple iPhones and iPods used to require specifying TKIP to connect via WPA, when every other device I have (including Macs) works fine on auto or AES. With 7.0 that isn't the case.

stabbim

@cmb:

If you aren't using 1.2.1, upgrade. The wireless in FreeBSD 7.0 seems to be more compatible with some devices. For one, Apple iPhones and iPods used to require specifying TKIP to connect via WPA, when every other device I have (including Macs) works fine on auto or AES. With 7.0 that isn't the case.

I tried it on a friend's box who's running 1.2.1 and had the same problem (I had this happen on his wifi when he was running 1.2 as well). I will try upgrading my own device to 1.2.1 as soon as I can, to make sure. But so far it doesn't look good. :(

stabbim

Forgot to mention something else - since the OP and I are both running Atheros chipsets I thought it might have something to do with that at first. But my friend's box has a RALink chipset.

rolflin

Same problem here too, i've tested with open, wep, wpa-psk with an atheros chipset card and…always the same.
g1 connects but then suddenly disconnected by the pfsense box.

nuclear_eclipse

Just wanted to chime in and say that I just got a G1, and I already had pfSense 1.2.1 installed on a machine with an Atheros chip acting as B/G access point, and I'm having the same problem as the other posters in this thread. My G1 gets an IP address from DHCP, but cannot actually connect to anything on either the local network, or the internet. A local Belkin access point supplies internet to the G1 without issue, but the pfSense router fails.

Any more suggestions, or any other diagnostics that you would like me to gather? Thank you.

cmb

Sounds like this is similar to the problem I ran into recently with a Blackberry Bold. It connected and got an IP just fine, but its ARP requests were never answered.

Someone with one of these, run this from a SSH session:

tcpdump -ni ath0

replacing ath0 with the name of your wireless interface if it's different, with nothing but the G1 connected to your AP. Reboot it, and see what happens. Post the output here.

cmb

Looks like we may have a solution to this.
http://thread.gmane.org/gmane.os.freebsd.current/110707

I think this is the same as the issue mentioned there. This patch will be going into 1.2.3 snapshots. I'll post here when that change is in the snapshots.

cmb

New snapshot with the aforementioned kernel patch is available:
http://snapshots.pfsense.org/FreeBSD7/RELENG_1_2/pfSense-Full-Update-1.2.3-20090125-1637.tgz

or newer will have that patch. Those of you with a G1, please test and report back.

stabbim

Didn't seem to fix my problem. Having just seen this now, I am running a much newer snapshot:

http://snapshots.pfsense.org/FreeBSD7/RELENG_1_2/pfSense-Full-Update-1.2.3-20090225-0327.tgz

I assume the same fix is still there though. My G1 associates, then says it is trying to obtain an IP address, it never gets beyond that step. System logs show this:

Mar 1 23:07:33 	hostapd: ath0: STA 00:18:41:d7:a1:6b IEEE 802.11: associated
Mar 1 23:07:34 	hostapd: ath0: STA 00:18:41:d7:a1:6b WPA: pairwise key handshake completed (RSN)
Mar 1 23:08:03 	hostapd: ath0: STA 00:18:41:d7:a1:6b WPA: group key handshake completed (RSN)
Mar 1 23:08:05 	hostapd: ath0: STA 00:18:41:d7:a1:6b IEEE 802.11: deassociated
Mar 1 23:08:09 	hostapd: ath0: STA 00:18:41:d7:a1:6b IEEE 802.11: associated
Mar 1 23:08:09 	hostapd: ath0: STA 00:18:41:d7:a1:6b WPA: pairwise key handshake completed (RSN)
Mar 1 23:08:29 	dnsmasq[652]: reading /var/dhcpd/var/db/dhcpd.leases
Mar 1 23:08:40 	hostapd: ath0: STA 00:18:41:d7:a1:6b IEEE 802.11: deassociated
Mar 1 23:08:44 	hostapd: ath0: STA 00:18:41:d7:a1:6b IEEE 802.11: associated
Mar 1 23:08:44 	hostapd: ath0: STA 00:18:41:d7:a1:6b WPA: pairwise key handshake completed (RSN)

Ran packet capture while the G1 was supposedly trying to get an IP, this is all I found from its MAC:

23:10:00.767467 00:18:41:d7:a1:6b > ff:ff:ff:ff:ff:ff Null Supervisory, Receiver not Ready, rcv seq 64, Flags [Poll], length 6

Hope that helps. And my apologies for not testing sooner, I kinda forgot about this for a while.

julian

Any update on this ?

Has the kernel patch worked for someone ?

Julian

cmb

It works fine for the one system I had access to at the time.

stabbim

So…. I'd been periodically trying new builds, and other troubleshooting, changing settings around on the wifi.

Then this past weekend I swapped out the card with the Atheros chipset for one with a RaLink chipset. However right after making the swap, I noticed the rule on the wifi interface was set to allow All TCP instead of ALL traffic, so I changed that as it probably would have been preventing DHCP (among other important things). Exactly when that rule got changed, I'm not sure. I probably screwed it up when re-adding it after initial troubleshooting.

Bottom line for me is it does work now (especially awesome since there's no T-Mobile 3G where I live). But I don't know whether it's because of the chipset change, or because I changed the rule (possibly one of the newer builds already fixed the problem and I couldn't tell because of the incorrect rule).

julian

Ok, so I tried 1.2.2 and it didn't work for me.
Now, I'm running 1.2.3-RC1 and it finally works.

FYI. Thanks,

Julian