WPA-EAP network stops working after random interval

Wed Nov 23 03:26:41 PST 2011

Hi,

When using WPA-EAP protected wlan at Eduroam[1] enabled locations, the
connectivity is lost randomly after some time (usually within 120 minutes).
This affects many other Linux users I have talked to at my university and the
problem persists across distributions. Currently, I'm using Arch with
supplicant 0.7.3 and openssl 1.0.0, but I also experienced this problem on
Ubuntu, and so do many others[2].

I've been trying to debug the problem, but have come short, and I'm hoping to
get some input. I have tried both with and without fast_reauth. Running
"wpa_cli reassoc" regains connectivity.

Parameters:
    key_mgmt=WPA-EAP
    eap=TTLS
    GTK=TKIP
    PTK=TKIP

All access points are made by Cisco.

I do have an Intel 5300 WLAN adapter, but the problem persists across vendors.
Note that the network works fine on other operating systems.

Please advice on how to further debug this problem. If applicable, I can run
further tests and try patches.

[1] http://www.eduroam.org/
[2] https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/429370

------

Log output when connectivity problems occuring, about 20 minutes after
establishing the connection. After the state re-enters COMPLETED, connectivity
is lost. Issuing "wpa_cli reassoc" regains connectivity. 

1321534090.799091: RX EAPOL from fc:fb:fb:d9:f0:8d
1321534090.799137: RX EAPOL - hexdump(len=131): 01 03 00 7f fe 03 91 00 20 00 00 00 00 00 00 00 03 70 70 51 2f 17 37 3b 30 4f 67 d4 2d 27 cb 3a dd b7 5d 60 1e e4 56 33 4d fa 5b d3 83 bf 16 0c 9d 47 89 40 be f6 62 58 47 c2 c1 c4 3b 0d eb 81 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bb df 5c 43 8c 30 e2 53 54 66 50 c9 31 8d 7a 82 00 20 7e 95 bd b3 c6 06 f7 bc 65 a3 ec d0 0c f8 61 bc 5f d7 de 97 25 c9 dc 26 e0 8a 91 a8 86 32 8b 73
1321534090.799193: EAPOL: Ignoring WPA EAPOL-Key frame in EAPOL state machines
1321534090.799206: IEEE 802.1X RX: version=1 type=3 length=127
1321534090.799215:   EAPOL-Key type=254
1321534090.799222:   key_info 0x391 (ver=1 keyidx=1 rsvd=0 Group Ack MIC Secure)
1321534090.799240:   key_length=32 key_data_length=32
1321534090.799253:   replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 03
1321534090.799259:   key_nonce - hexdump(len=32): 70 70 51 2f 17 37 3b 30 4f 67 d4 2d 27 cb 3a dd b7 5d 60 1e e4 56 33 4d fa 5b d3 83 bf 16 0c 9d
1321534090.799269:   key_iv - hexdump(len=16): 47 89 40 be f6 62 58 47 c2 c1 c4 3b 0d eb 81 16
1321534090.799276:   key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
1321534090.799282:   key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
1321534090.799288:   key_mic - hexdump(len=16): bb df 5c 43 8c 30 e2 53 54 66 50 c9 31 8d 7a 82
1321534090.799297: WPA: RX EAPOL-Key - hexdump(len=131): 01 03 00 7f fe 03 91 00 20 00 00 00 00 00 00 00 03 70 70 51 2f 17 37 3b 30 4f 67 d4 2d 27 cb 3a dd b7 5d 60 1e e4 56 33 4d fa 5b d3 83 bf 16 0c 9d 47 89 40 be f6 62 58 47 c2 c1 c4 3b 0d eb 81 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bb df 5c 43 8c 30 e2 53 54 66 50 c9 31 8d 7a 82 00 20 7e 95 bd b3 c6 06 f7 bc 65 a3 ec d0 0c f8 61 bc 5f d7 de 97 25 c9 dc 26 e0 8a 91 a8 86 32 8b 73
1321534090.799328: WPA: RX message 1 of Group Key Handshake from fc:fb:fb:d9:f0:8d (ver=1)
1321534090.799344: State: COMPLETED -> GROUP_HANDSHAKE
1321534090.799351: WPA: Group Key - hexdump(len=32): [REMOVED]
1321534090.799357: WPA: Installing GTK to the driver (keyidx=1 tx=0 len=32).
1321534090.799362: WPA: RSC - hexdump(len=6): 00 00 00 00 00 00
1321534090.799381: wpa_driver_nl80211_set_key: ifindex=2 alg=2 addr=0x466559 key_idx=1 set_tx=0 seq_len=6 key_len=32
1321534090.833324: WPA: Sending EAPOL-Key 2/2
1321534090.833361: WPA: TX EAPOL-Key - hexdump(len=99): 01 03 00 5f fe 03 11 00 20 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 97 13 ae 4f f2 a3 f4 b1 24 a3 31 66 63 63 ec 9b 00 00
1321534090.833409: WPA: Group rekeying completed with fc:fb:fb:d9:f0:8d [GTK=TKIP]
1321534090.833418: Cancelling authentication timeout
1321534090.833424: State: GROUP_HANDSHAKE -> COMPLETED

-- 
H?vard Espeland