Authentication failed, but I still can send packets

henry1412 henry1412
Tue Nov 25 19:06:54 PST 2008


>Are you using wired networks (i.e., IEEE 802.1X for Ethernet)? If yes,
>please note that hostapd does not include port access entity (PAE). In
>other words, it does not enforce the port authorized/unauthorized
>processing or in any way change how data frames are passed through.
>If you want to block the frames on an unauthorized port in a wired
>network, you will need to use external mechanism (e.g., a kernel module
>to implement PAE functionality or Linux bridge filtering/ibtables) to do
>this and modify hostapd wired driver wrapper (driver_wired.c) to
>configure the external mechanism to block/unblock the port based on IEEE
>802.1X authorization state.
>Jouni Malinen                                            PGP id EFC895FA
Thanks Jouni Malinen for your help.I used wired networks for IEEE 802.1X authenticaion. I will have a try by your suggestion.
-------------- next part --------------
An HTML attachment was scrubbed...

More information about the Hostap mailing list