hostapd + madwifi + bridge not working

[Sebastián González]

I've seen the same machine (a PowerBook G4 laptop with an 802.11b  
AirPort) associate successfully to encrypted networks, though I  
didn't pay attention to whether it was WEP or WPA at the time. In all  
cases, the access points were dedicated hardware, rather than a PC  
running Linux. Note: AFAIK, Apple updated the AirPort software so  
that it is WPA-capable even in the old 802.11b machines.

Yesterday I tried Gustavo's suggestions (disabling CCMP and using the  
ath_pci module option autocreate=ap) but it still doesn't work. I  
also tried configuring a WEP-encrypted network using the usual Gentoo  
configuration files (i.e. using iwconfig, without hostapd), and the  
Mac OS machine wouldn't associate either - which probably means that  
the problem is not related to hostapd specifically. The PowerBook  
only associates if the network is unencrypted. Unfortunately I don't  
have a second Linux machine at hand to see if it would work.

On 09 May 2006, at 02:07, Jonathan Kratter wrote:

> Hi Sebastian,
>
> I've had issues with associating an Airport Extreme client using  
> 10.3 and 10.4 to an AP advertising both WPA 1 / TKIP and WPA 2 /  
> CCMP capabilities.  This issue doesn't seem to be limited to hostap- 
> based access points but rather a problem with the STA in question.   
> Have you seen it successfully associate to any AP using both TKIP  
> and CCMP?
>
> Cheers,
> Jonathan
>
> On 5/8/06, Sebasti?n Gonz?lez <s.gonzalez at uclouvain.be> wrote: I  
> can't get my hostapd + madwifi-ng + bridge configuration to work.
>
> When I attempt to connect wirelessly to my Gentoo PC using a Mac OS X
> 10.4 machine, I get the following in the logs:
>
> May  5 02:38:53 [hostapd] ath0: STA 00:30:65:1c:4a:c2 IEEE 802.11:
> associated
> May  5 02:38:56 [hostapd] ath0: STA 00:30:65:1c:4a:c2 IEEE 802.11:
> deauthenticated due to local deauth request
> May  5 02:38:56 [hostapd] ath0: STA 00:30:65:1c:4a:c2 IEEE 802.11:
> disassociated
>
> Even if hostapd.conf contains the line "bridge=br0", the WPA key
> exchange packets seem to be eaten by the bridge. (There is a delay
> between the time the first line is logged and the time the other two
> lines appear in the log. This symptom seems to be exactly what the
> following document describes:
>
> http://madwifi.org/wiki/UserDocs/HostAP
>
> But again, "bridge=br0" in hostapd.conf is not fixing the issue.
>
> Is the combination hostapd + madwifi-ng + bridge supposed to work?
> If I don't use hostapd (i.e. an open, unencrypted network) everything
> works fine (bridge, DNAT & Firewall (shorewall), DHCP, etc.).
>
> I use gentoo. Package versions are:
>
> hostapd-0.5.3
> madwifi-ng-0.1531.20060427
> kernel 2.6.16-gentoo-r4
>
> My hostapd.conf is:
>
> interface=ath0
> bridge=br0
> driver=madwifi
> logger_syslog=-1
> logger_syslog_level=2
> logger_stdout=-1
> logger_stdout_level=2
> debug=3
> dump_file=/tmp/hostapd.dump
> ctrl_interface=/var/run/hostapd
> ctrl_interface_group=0
> ssid=guajira
> macaddr_acl=1
> accept_mac_file=/etc/hostapd/hostapd.accept
> deny_mac_file=/etc/hostapd/hostapd.deny
> auth_algs=1
> wpa=1
> wpa_psk_file=/etc/hostapd/hostapd.wpa_psk
> wpa_key_mgmt=WPA-PSK
> wpa_pairwise=TKIP CCMP
>
> The ath0 interface is created this way:
>
>        /sbin/wlanconfig ath0 destroy 2>/dev/null
>        /sbin/wlanconfig ath0 create wlandev wifi0 wlanmode ap > /dev/
> null
>        iwconfig ath0 rate 54M auto
>        iwpriv ath0 mode 0        # 0=auto, 1=11a, 2=11b, 3=11g
>        iwpriv ath0 bgscan 0      # disable client background scanning
>
> The bridge is configured in /etc/conf.d/net this way:
>
> config_eth0=( "null" )
> config_eth1=( "null" )
> config_ath0=( "null" )
> config_br0=( " 192.168.0.1/24" )
>
> bridge_br0=( "eth0" "eth1" "ath0" )
>
> hostapd produces this output when started:
>
> Configuration file: /etc/hostapd/hostapd.conf
> Configure bridge br0 for EAPOL traffic.
> madwifi_set_iface_flags: dev_up=0
> Using interface ath0 with hwaddr 00:15:e9:83:47:bb and ssid 'guajira'
> madwifi_set_ieee8021x: enabled=1
> madwifi_configure_wpa: group key cipher=1
> madwifi_configure_wpa: pairwise key ciphers=0xa
> madwifi_configure_wpa: key management algorithms=0x2
> madwifi_configure_wpa: rsn capabilities=0x0
> madwifi_configure_wpa: enable WPA= 0x1
> madwifi_set_iface_flags: dev_up=1
> madwifi_set_key: alg=TKIP addr=00:00:00:00:00:00 key_idx=1
> madwifi_set_privacy: enabled=1
> madwifi_sta_deauth: addr=ff:ff:ff:ff:ff:ff reason_code=3
>
> I (unsuccessfully) tried changing a few parameters with iwpriv and in
> hostapd.conf.
> Any help will be greatly appreciated!
>
>
> _______________________________________________
> HostAP mailing list
> HostAP at shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap
>