Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wi-Fi: laptop yes, phone no

    Scheduled Pinned Locked Moved Wireless
    46 Posts 6 Posters 6.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • fireodoF
      fireodo @mrkaban
      last edited by fireodo

      @mrkaban said in Wi-Fi: laptop yes, phone no:

      There is nothing in the firewall log from the WLAN interface (wireless network).

      (You should see a association before the authentication part begins)

      When my Android Smartphone connects I see this in wireless log:

      Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
      Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 2 notification
      Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: disassociated
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: pairwise key handshake completed (RSN)
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 RADIUS: starting accounting session 665BCC0E11586A5E
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: authorizing port
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (4/4 Pairwise)
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 3/4 msg of 4-Way Handshake
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (2/4 Pairwise)
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 1/4 msg of 4-Way Handshake
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: start authentication
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 1 notification
      Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: associated
      

      (MAC Adress is edited)

      Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
      SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
      pfsense 2.8.0 CE
      Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

      GertjanG M 2 Replies Last reply Reply Quote 0
      • GertjanG
        Gertjan @fireodo
        last edited by

        @fireodo

        So, there is no problem what so ever.
        The "WPA" (password etc) is ok.
        But then :

        a9e7720a-a844-4d9f-b10c-0ad553fec9ea-image.png

        RADIUS: starting accounting session 665BCC0E11586A5E

        Where did that came from ?

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        fireodoF 1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Because it's configured for WPA Ent I imagine.

          fireodoF 1 Reply Last reply Reply Quote 0
          • fireodoF
            fireodo @Gertjan
            last edited by

            @Gertjan said in Wi-Fi: laptop yes, phone no:

            Where did that came from ?

            I dont know - I have no Radius Server set up.

            Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
            SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
            pfsense 2.8.0 CE
            Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

            1 Reply Last reply Reply Quote 0
            • fireodoF
              fireodo @stephenw10
              last edited by

              @stephenw10 said in Wi-Fi: laptop yes, phone no:

              Because it's configured for WPA Ent I imagine.

              If Ent means "Enterprise" then its not - its WPA2 with Pre-shared Key and AES

              Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
              SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
              pfsense 2.8.0 CE
              Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Huh, interesting. Checking....

                1 Reply Last reply Reply Quote 0
                • M
                  mrkaban @fireodo
                  last edited by

                  @fireodo said in Wi-Fi: laptop yes, phone no:

                  @mrkaban said in Wi-Fi: laptop yes, phone no:

                  There is nothing in the firewall log from the WLAN interface (wireless network).

                  When my Android Smartphone connects I see this in wireless log:

                  Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
                  Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 2 notification
                  Apr 2 15:24:00	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: disassociated
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: pairwise key handshake completed (RSN)
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 RADIUS: starting accounting session 665BCC0E11586A5E
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: authorizing port
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (4/4 Pairwise)
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 3/4 msg of 4-Way Handshake
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: received EAPOL-Key frame (2/4 Pairwise)
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: sending 1/4 msg of 4-Way Handshake
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.1X: unauthorizing port
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: start authentication
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 WPA: event 1 notification
                  Apr 2 15:23:46	hostapd	35016	ath0_wlan0: STA 00:27:15:3d:db:a7 IEEE 802.11: associated
                  

                  (MAC Adress is edited)

                  and where exactly do you see these statistics? Status \ System Logs \ System \ Wireless connection

                  fireodoF 1 Reply Last reply Reply Quote 0
                  • fireodoF
                    fireodo @mrkaban
                    last edited by fireodo

                    @mrkaban said in Wi-Fi: laptop yes, phone no:

                    and where exactly do you see these statistics? Status \ System Logs \ System \ Wireless connection

                    Exact there! (Highlighted)

                    Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                    SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                    pfsense 2.8.0 CE
                    Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Yes I see the same.
                      You should also see it in Status > Wireless

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        mrkaban @stephenw10
                        last edited by mrkaban

                        @stephenw10 said in Wi-Fi: laptop yes, phone no:

                        Yes I see the same.
                        You should also see it in Status > Wireless

                        It took me a moment to realize that the most recent ones were from below. Here's what appears after trying to connect from your phone:

                        alt text

                        not in the form of a picture, antispam does not allow you to write

                        fireodoF 1 Reply Last reply Reply Quote 0
                        • fireodoF
                          fireodo @mrkaban
                          last edited by

                          @mrkaban said in Wi-Fi: laptop yes, phone no:

                          Here's what appears after trying to connect from your phone:

                          I see there:

                          EAPOL-Key timeout
                          

                          and I interprete that like the Authentication is not coming from your device - is that smartphone logging in correctly in a other access point?

                          Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                          SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                          pfsense 2.8.0 CE
                          Packages: Apcupsd Cron Iftop Iperf LCDproc Nmap pfBlockerNG RRD_Summary Shellcmd Snort Speedtest System_Patches.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Also I assume if you login from the laptop the logs look the same as we see?

                            M 1 Reply Last reply Reply Quote 0
                            • M
                              mrkaban @stephenw10
                              last edited by

                              @stephenw10 said in Wi-Fi: laptop yes, phone no:

                              Also I assume if you login from the laptop the logs look the same as we see?

                              It connects to all other Wi-fi points from the phone without problems.

                              This is what I see when I connect from my laptop:

                              alt text

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Possible the phone is restricted to WPA3 only? Other APs you tested against are WPA2?

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  mrkaban @stephenw10
                                  last edited by

                                  @stephenw10 said in Wi-Fi: laptop yes, phone no:

                                  Possible the phone is restricted to WPA3 only? Other APs you tested against are WPA2?

                                  Currently connected to a wireless network with WPA2-PSK

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    @fireodo said in Wi-Fi: laptop yes, phone no:

                                    rtl8192ce

                                    What driver is that using? rtwn(4)? Is that USB or PCI connected?

                                    What does sysctl dev.rtwn.0.hwcrypto show?

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      mrkaban @stephenw10
                                      last edited by

                                      @stephenw10 said in Wi-Fi: laptop yes, phone no:

                                      sysctl dev.rtwn.0.hwcrypto

                                      If you run "Diagnostics \ Command Prompt" here, then the output:

                                      dev.rtwn.0.hwcrypto: 1

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Hmm, well I don't think that hardware crypto applies to WPA2 but try disabling that with:
                                        sysctl dev.rtwn.0.hwcrypto=0

                                        Unclear if that applies immediately.

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          mrkaban @stephenw10
                                          last edited by

                                          @stephenw10 said in Wi-Fi: laptop yes, phone no:

                                          Hmm, well I don't think that hardware crypto applies to WPA2 but try disabling that with:
                                          sysctl dev.rtwn.0.hwcrypto=0

                                          Unclear if that applies immediately.

                                          Completed, the output was:

                                          sysctl: oid 'dev.rtwn.0.hwcrypto' is a read only tunable
                                          sysctl: Tunable values are set in /boot/loader.conf

                                          Of course I rebooted and tried. And only after the failure did I read what exactly he was writing.

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Yup run: echo dev.rtwn.0.hwcrypto=0 >> /boot/loader.conf.local

                                            Then reboot.

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.