Forward: Re: iwn0/wlan0 scan WPA2-PSK/AES as WEP on freebsd9

Sat Aug 4 04:57:34 UTC 2012

2012/8/2 Bernhard Schmidt <bschmidt at freebsd.org>:
> On Thu, Aug 2, 2012 at 8:52 AM, 乔楚/HonestQiao <honestqiao at gmail.com> wrote:
>> tty1#tcpdump -ni wlan0 -y IEEE802_11_RADIO -s0 -l -v -w pcap.out
>
> Thanks, just to clarify, this pcap is made while the AP was configured
> to do WPA and WPS, right?
>
> Did you already try to disable WPS, I'm not sure I've tried with that enabled.
>
>> tty2#cat /etc/wpa_supplicant.conf
>> # /etc/wpa_supplicant.conf written by wifimgr(8)
>>
>>         ctrl_interface=/var/run/wpa_supplicant
>>         ctrl_interface_group=wheel
>>
>> network={
>>         ssid="0x0b071500000000000000"
>>         bssid=8c:21:0a:43:ef:d4
>>         key_mgmt=WPA-PSK
>>         proto=RSN
>>         psk="12345678901"
>> }
>
> No luck with
>
> network={
>     ssid="OpenBSD"
>     psk="12345678901"
> }
>
> either I guess? According to the pcap there are no trailing 0x00 in the SSID.
>
> --
> Bernhard

I think the WPS might not be the main reason.
If AP was enabled QSS, ifconfig wlan0 list scan would include WPS.

Today I went through a number of tests and found the following:
AP: 802.11bgn mixed / QSS enabled / channel:11 / 20MHz / 130mbps
X201i/FreebSD9/amd64/iwn0 can connect to AP.

802.11bgn mixed / QSS enabled / channel:11 / 40MHz / 300mbps
Or 802.11bgn mixed / QSS enabled / channel:11 / Auto / 300mbps
X201i/FreebSD9/amd64/iwn0 can't connect to AP.

wpa configure:
network={
        ssid="OpenBSD"
        #+ any_bssid
        key_mgmt=WPA-PSK
        proto=RSN
        psk="12345678901"
}

Following are detailed scan information

802.11bgn mixed / QSS enabled / channel:11 / 20MHz / 130mbps
% ifconfig wlan0
wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 8c:a9:82:5a:41:58
        inet 192.168.1.7 netmask 0xffffff00 broadcast 192.168.1.255
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: IEEE 802.11 Wireless Ethernet OFDM/54Mbps mode 11ng
        status: associated
        ssid OpenBSD channel 11 (2462 MHz 11g ht/20) bssid 8c:21:0a:43:ef:d4
        country US authmode WPA2/802.11i privacy ON deftxkey UNDEF
        AES-CCM 2:128-bit txpower 14 bmiss 10 scanvalid 450 bgscan
        bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 64 protmode CTS
        ampdulimit 64k -amsdutx amsdurx shortgi wme roaming MANUAL
% ifconfig wlan0 list scan | grep -i -E "openbsd|ef:d4"
0x0b0013000...  8c:21:0a:43:ef:d4   11   54M -70:-95  100 EPS  RSN
HTCAP MESHCONF ATH WPS
% ifconfig -v wlan0 list scan | grep -i -E "openbsd|ef:d4"
0x0b001300000000000000           8c:21:0a:43:ef:d4   11   54M -70:-95
100 EPS  SSID<OpenBSD> RATES<B2,B4,B11,B22,12,18,24,36> DSPARMS<11>
ERP<0x0> RSN<v1 mc:AES-CCMP uc:AES-CCMP km:8021X-PSK>
XRATES<48,72,96,108> HTCAP<cap 0x18d param 0x3 mcsset[0-15] extcap
0x400 txbf 0xde7e606 antenna 0x0> MESHCONF<PATH:UNKNOWN LINK:UNKNOWN
CONGESTION:UNKNOWN SYNC:UNKNOWN AUTH:UNKNOWN FORM:0x0 CAPS:0x0>
HTINFO<ctl 11, 0,13,0,0 basicmcs[]> MESHID<0x0b00130000000000000.>
ATH<0x7fff> WPS<v:1.0 st:C
uuid-e:00-01-02-03-04-05-06-07-08-09-0a-0b-0c-0d-0e-0f>

802.11bgn mixed / QSS enabled / channel:11 / 40MHz / 300mbps
% ifconfig wlan0
wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 8c:a9:82:5a:41:58
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: IEEE 802.11 Wireless Ethernet autoselect (autoselect)
        status: no carrier
        ssid "" channel 11 (2462 MHz 11g)
        country US authmode WPA1+WPA2/802.11i privacy OFF txpower 14 bmiss 10
        scanvalid 450 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7
        roam:rate 5 protmode CTS wme roaming MANUAL
% ifconfig wlan0 list scan | grep -i -E "openbsd|ef:d4"
0x0b0713000...  8c:21:0a:43:ef:d4   11   54M -69:-95  100 EPS  RSN
HTCAP MESHCONF ATH WPS
% ifconfig -v wlan0 list scan | grep -i -E "openbsd|ef:d4"
0x0b071300000000000000           8c:21:0a:43:ef:d4   11   54M -69:-95
100 EPS  SSID<OpenBSD> RATES<B2,B4,B11,B22,12,18,24,36> DSPARMS<11>
TIM<050400010000> ERP<0x0> RSN<v1 mc:AES-CCMP uc:AES-CCMP
km:8021X-PSK> XRATES<48,72,96,108> HTCAP<cap 0x118f param 0x3
mcsset[0-15] extcap 0x400 txbf 0xde7e606 antenna 0x0> HTINFO<ctl 11,
7,13,0,0 basicmcs[]> ATH<0x7fff> WPS<v:1.0 st:C>

802.11bgn mixed / QSS enabled / channel:11 / Auto / 300mbps
% ifconfig wlan0
wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 8c:a9:82:5a:41:58
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
        media: IEEE 802.11 Wireless Ethernet autoselect (autoselect)
        status: no carrier
        ssid "" channel 13 (2472 MHz 11g)
        country US authmode WPA1+WPA2/802.11i privacy OFF txpower 14 bmiss 10
        scanvalid 450 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7
        roam:rate 5 protmode CTS wme roaming MANUAL
[12:46:00]HonestQiao at x201i.pts/1 ~ % ifconfig wlan0 list scan | grep
-i -E "openbsd|ef:d4"
0x0b0713000...  8c:21:0a:43:ef:d4   11   54M -67:-95  100 EPS  RSN
HTCAP MESHCONF ATH WPS
[12:46:02]HonestQiao at x201i.pts/1 ~ % ifconfig -v wlan0 list scan |
grep -i -E "openbsd|ef:d4"
0x0b071300000000000000           8c:21:0a:43:ef:d4   11   54M -67:-95
100 EPS  SSID<OpenBSD> RATES<B2,B4,B11,B22,12,18,24,36> DSPARMS<11>
ERP<0x0> RSN<v1 mc:AES-CCMP uc:AES-CCMP km:8021X-PSK>
XRATES<48,72,96,108> HTCAP<cap 0x118f param 0x3 mcsset[0-15] extcap
0x400 txbf 0xde7e606 antenna 0x0> MESHCONF<PATH:UNKNOWN LINK:UNKNOWN
CONGESTION:UNKNOWN SYNC:UNKNOWN AUTH:UNKNOWN FORM:0x0 CAPS:0x0>
HTINFO<ctl 11, 7,13,0,0 basicmcs[]> MESHID<0x0b07130000000000000.>
ATH<0x7fff> WPS<v:1.0 st:C
uuid-e:00-01-02-03-04-05-06-07-08-09-0a-0b-0c-0d-0e-0f>

HonestQiao