Re: 15-STABLE: if_iwlwifi dysfunctional ...

We don't have PMF support yet sorry!

please turn that off and try again!


-adrian

On Sun, 30 Nov 2025 at 21:35, FreeBSD User <freebsd@walstatt-de.de> wrote:
>
> On Sun, 30 Nov 2025 23:27:40 +0000 (UTC)
> "Bjoern A. Zeeb" <bz@FreeBSD.org> wrote:
>
> > On Sat, 29 Nov 2025, FreeBSD User wrote:
> >
> > > <4>WPA: Failed to configure IGTK to the driver
> > > <3>RSN: Failed to configure IGTK
> >
> > What's your wpa_supplicant.conf file looking like.
> >
> > Do you by any chance change any of these two variables?
> > pmf=0
> > ieee80211w=0
> >
> >
>
> [... /etc/rc.conf ...]
> wlans_iwlwifi0="wlan0"
> ifconfig_wlan0="DHCP WPA"
> ifconfig_wlan0_ipv6="inet6 accept_rtadv -ifdisabled nud -no_radr auto_linklocal"
> create_args_wlan0="country DE regdomain ETSI"
> [...]
>
> [... /etc/wpa_supplicant.conf ...]
>
> ctrl_interface=/var/run/wpa_supplicant
> ctrl_interface_group=wheel
> #eapol_version=2
> ap_scan=1
> # Protected Management Frames default
> # per network selectable via ieee80211w
> # 0: disabled
> # 1: enabled
> # 2: required
> pmf=2
>
> # AP-Wifi
> network={
>   id_str="AP-WiFi"
>   ssid="AP-WiFi"
>   auth_alg=OPEN
>   key_mgmt=WPA-PSK
>   pairwise=CCMP
>   group=CCMP
>   proto=RSN
>   psk=SOME_SECRET
> }
>
> # Alt-AP
> network={
>   id_str="Alt-AP"
>   ssid="Alt-AP"
>   auth_alg=OPEN
>   key_mgmt=WPA-PSK
>   pairwise=CCMP
>   group=CCMP
>   proto=RSN
>   ieee80211w=2
>   psk=SOME_SECRET_2
> }
>
> network={
>   id_str="eduroam"
>   ssid="eduroam"
>   scan_ssid=1
>   key_mgmt=WPA-EAP WPA-EAP-SHA256
>   eap=PEAP TTLS TLS
>   proto=RSN
>   identity="IDENTITY"
>   anonymous_identity="eduroam@net.net"
>   ca_cert="/usr/local/etc/cacerts/certificate.pem"
>   phase1="peaplabel=1"
>   phase2="auth=MSCHAPV2"
>   password="SECRET"
>   ieee80211w=2
> }