XP "deauthenticate" after 802.1x authentication finished

[yuannong at emobilenetworks.com]

Hi,

I encontered a very strange problem with following setting:

 Hostap driver 0.2.4, Linux2.4, and WindowsXP as a client. The problem comes when I
 turn on i802.1x authentication by using freeradius. The authentication method
is PEAP
 and this problem seems have nothing to do with authentication method directly.

 In fact everything works pretty well. The i802.1x authentication works fine,
but several seconds after the i802.1x authentication finishs, XP always sends
out a "deauthentication" frame with reason code 3:(Station has left the basic
service area..)
It seems no long detect signal! This last part of the log is:
-------------------------------------------------------------------------------------
...........
RADIUS packet matching with station 00:09:5b:69:64:e7
MS-MPPE-Send-Key (len=32): 83 96 c8 4e b9 8e 99 d5 54 7b e4 21 83 57 3e 34 ed 43
f4 15
e7 c4 a1 2e 80 69 4c c5 0b 47 2f d3
MS-MPPE-Recv-Key (len=32): c4 45 f3 fc ae 6a 41 c0 50 e5 98 0b 7e f2 ef eb 28 00
65 07
c6 48 31 83 b1 5a c0 ac 46 7a 14 6e
IEEE 802.1X: 00:09:5b:69:64:e7 BE_AUTH entering state SUCCESS
IEEE 802.1X: Sending EAP Packet to 00:09:5b:69:64:e7 (identifier 9)
IEEE 802.1X: 00:09:5b:69:64:e7 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:09:5b:69:64:e7 AUTH_PAE entering state AUTHENTICATED
wlan0: STA 00:09:5b:69:64:e7 IEEE 802.1X: authenticated
IEEE 802.1X: 00:09:5b:69:64:e7 BE_AUTH entering state IDLE
Received 40 bytes management frame
RX frame - hexdump(len=40): 0a 02 d5 00 00 09 5b 69 64 e7 00 09 5b 2f 96 b2 00
09 5b 2f 96 b2 20 77 aa aa 03 00 00 00 88 8e 01 00 00 04 03 09 00 04
DATA (TX callback) ACK
IEEE 802.1X: 00:09:5b:69:64:e7 TX status - version=1 type=0 length=4 - ack=1
IEEE 802.1X: 00:09:5b:69:64:e7 Port Timers TICK (timers: 29 0 3599 29)
IEEE 802.1X: 00:09:5b:69:64:e7 Port Timers TICK (timers: 28 0 3598 28)
IEEE 802.1X: 00:09:5b:69:64:e7 Port Timers TICK (timers: 27 0 3597 27)
IEEE 802.1X: 00:09:5b:69:64:e7 Port Timers TICK (timers: 26 0 3596 26)
IEEE 802.1X: 00:09:5b:69:64:e7 Port Timers TICK (timers: 25 0 3595 25)
Received 26 bytes management frame
RX frame - hexdump(len=26): c0 00 11 93 00 09 5b 2f 96 b2 00 09 5b 69 64 e7 cb
3d 55 5d 5e 43 f0 ba 03 00
MGMT
MGMT: BSSID=cb:3d:55:5d:5e:43 not our address
IEEE 802.1X: 00:09:5b:69:64:e7 Port Timers TICK (timers: 24 0 3594 24)
---------------------------------------------------------------------------

More interesting thing is that XP doesn't send this "deauthentication" if I do
following:

(1)Start the "hostapd" and let XP connect.
(2)For some reason, after the station is associated and first "Sending EAP
Request-Identity", AP always have to wait long without response and try second
time. Kill the
"hostapd" when AP is waiting.
(3)restart "hostapd". The whole process will start again almost same as first run of
"hostapd" except it seems no waiting mentioned in (2). And guess what? This XP
"deauthentication" problem disappears!!!

I am so confused, hope get some help from somebody. Thanks.
Detail log is attached.

-yuannong
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: problem_log_1.txt
Url: http://lists.shmoo.com/pipermail/hostap/attachments/20040730/847b5e68/attachment.txt