802.1X Unicast Keys?
raghu at sraamerica.com
raghu
Fri Dec 20 19:39:31 PST 2002
Hi,
My Setup is XSupplicant, HostAP(client), HostAP(AP),
Hostapd (Authenticator), FreeRADIUS.
I modified Xsupplicant code to work with EAPOL key frames.
Hostapd -b13 option is working as expected. ie EAPOL key
frame
is properly sent from hostapd to xsupplicant after EAP/TLS
authentication is successful.
$ ./hostapd -x -b13 -o192.168.1.1 -a192.168.1.1 -stest
-SSSID wlan0
......
IEEE 802.1X: 00:04:5a:0d:f4:68 BE_AUTH entering state
SUCCESS
IEEE 802.1X: 00:04:5a:0d:f4:68 REAUTH_TIMER entering state
INITIALIZE
IEEE 802.1X: 00:04:5a:0d:f4:68 AUTH_PAE entering state
AUTHENTICATED
IEEE 802.1X: Authorizing station 00:04:5a:0d:f4:68
IEEE 802.1X: 00:04:5a:0d:f4:68 BE_AUTH entering state IDLE
DEBUG: STATE_MACHINE KEY TRANSMIT
IEEE 802.1X: 00:04:5a:0d:f4:68 AUTH_KEY_TX entering state
KEY_TRANSMIT
IEEE 802.1X: Sending EAPOL-Key(s) to 00:04:5a:0d:f4:68
(identifier 6)
Station 00:04:5a:0d:f4:68 authenticated (open system)
Station 00:04:5a:0d:f4:68 associated (aid 1)
But with -i13 option, I didnot find EAPOL AUTH_KEY_TX
state machine
getting triggered after EAP/TLS authentication is
successful.
$ ./hostapd -x -i13 -o192.168.1.1 -a192.168.1.1 -stest
-SSSID wlan0
......
IEEE 802.1X: 00:04:5a:0d:f4:68 BE_AUTH entering state
SUCCESS
IEEE 802.1X: 00:04:5a:0d:f4:68 REAUTH_TIMER entering state
INITIALIZE
IEEE 802.1X: 00:04:5a:0d:f4:68 AUTH_PAE entering state
AUTHENTICATED
IEEE 802.1X: Authorizing station 00:04:5a:0d:f4:68
IEEE 802.1X: 00:04:5a:0d:f4:68 BE_AUTH entering state IDLE
Can someone please let me know, how hosapd unicast keys
are supposed to work ?
regards,
-Raghu
More information about the Hostap
mailing list