WPA-EAP network stops working after random interval

[hong zhang]

--- On Wed, 11/23/11, H?vard Espeland <gus at ping.uio.no> wrote:

> From: H?vard Espeland <gus at ping.uio.no>
> Subject: WPA-EAP network stops working after random interval
> To: hostap at lists.shmoo.com
> Date: Wednesday, November 23, 2011, 5:26 AM
> Hi,
> 
> When using WPA-EAP protected wlan at Eduroam[1] enabled
> locations, the
> connectivity is lost randomly after some time (usually
> within 120 minutes).
> This affects many other Linux users I have talked to at my
> university and the
> problem persists across distributions. Currently, I'm using
> Arch with
> supplicant 0.7.3 and openssl 1.0.0, but I also experienced
> this problem on
> Ubuntu, and so do many others[2].
> 
> I've been trying to debug the problem, but have come short,
> and I'm hoping to
> get some input. I have tried both with and without
> fast_reauth. Running
> "wpa_cli reassoc" regains connectivity.
> 
> Parameters:
> ? ? key_mgmt=WPA-EAP
> ? ? eap=TTLS
> ? ? GTK=TKIP
> ? ? PTK=TKIP
> 
> All access points are made by Cisco.
> 
> I do have an Intel 5300 WLAN adapter, but the problem
> persists across vendors.

When you says all vendors. Do they include Mac or Windows?
Why Mac or iPhone or Windows has same problem, station side
will be excluded.

> Note that the network works fine on other operating
> systems.
> 
> Please advice on how to further debug this problem. If
> applicable, I can run
> further tests and try patches.
> 
> [1] http://www.eduroam.org/
> [2] https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/429370
> 
> ------
> 
> Log output when connectivity problems occuring, about 20
> minutes after
> establishing the connection. After the state re-enters
> COMPLETED, connectivity
> is lost. Issuing "wpa_cli reassoc" regains connectivity. 
> 
> 1321534090.799091: RX EAPOL from fc:fb:fb:d9:f0:8d
> 1321534090.799137: RX EAPOL - hexdump(len=131): 01 03 00 7f
> fe 03 91 00 20 00 00 00 00 00 00 00 03 70 70 51 2f 17 37 3b
> 30 4f 67 d4 2d 27 cb 3a dd b7 5d 60 1e e4 56 33 4d fa 5b d3
> 83 bf 16 0c 9d 47 89 40 be f6 62 58 47 c2 c1 c4 3b 0d eb 81
> 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bb df 5c
> 43 8c 30 e2 53 54 66 50 c9 31 8d 7a 82 00 20 7e 95 bd b3 c6
> 06 f7 bc 65 a3 ec d0 0c f8 61 bc 5f d7 de 97 25 c9 dc 26 e0
> 8a 91 a8 86 32 8b 73
> 1321534090.799193: EAPOL: Ignoring WPA EAPOL-Key frame in
> EAPOL state machines
> 1321534090.799206: IEEE 802.1X RX: version=1 type=3
> length=127
> 1321534090.799215:???EAPOL-Key type=254
> 1321534090.799222:???key_info 0x391 (ver=1
> keyidx=1 rsvd=0 Group Ack MIC Secure)
> 1321534090.799240:???key_length=32
> key_data_length=32
> 1321534090.799253:???replay_counter -
> hexdump(len=8): 00 00 00 00 00 00 00 03
> 1321534090.799259:???key_nonce -
> hexdump(len=32): 70 70 51 2f 17 37 3b 30 4f 67 d4 2d 27 cb
> 3a dd b7 5d 60 1e e4 56 33 4d fa 5b d3 83 bf 16 0c 9d
> 1321534090.799269:???key_iv -
> hexdump(len=16): 47 89 40 be f6 62 58 47 c2 c1 c4 3b 0d eb
> 81 16
> 1321534090.799276:???key_rsc -
> hexdump(len=8): 00 00 00 00 00 00 00 00
> 1321534090.799282:???key_id (reserved) -
> hexdump(len=8): 00 00 00 00 00 00 00 00
> 1321534090.799288:???key_mic -
> hexdump(len=16): bb df 5c 43 8c 30 e2 53 54 66 50 c9 31 8d
> 7a 82
> 1321534090.799297: WPA: RX EAPOL-Key - hexdump(len=131): 01
> 03 00 7f fe 03 91 00 20 00 00 00 00 00 00 00 03 70 70 51 2f
> 17 37 3b 30 4f 67 d4 2d 27 cb 3a dd b7 5d 60 1e e4 56 33 4d
> fa 5b d3 83 bf 16 0c 9d 47 89 40 be f6 62 58 47 c2 c1 c4 3b
> 0d eb 81 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
> bb df 5c 43 8c 30 e2 53 54 66 50 c9 31 8d 7a 82 00 20 7e 95
> bd b3 c6 06 f7 bc 65 a3 ec d0 0c f8 61 bc 5f d7 de 97 25 c9
> dc 26 e0 8a 91 a8 86 32 8b 73
> 1321534090.799328: WPA: RX message 1 of Group Key Handshake
> from fc:fb:fb:d9:f0:8d (ver=1)
> 1321534090.799344: State: COMPLETED -> GROUP_HANDSHAKE
> 1321534090.799351: WPA: Group Key - hexdump(len=32):
> [REMOVED]
> 1321534090.799357: WPA: Installing GTK to the driver
> (keyidx=1 tx=0 len=32).
> 1321534090.799362: WPA: RSC - hexdump(len=6): 00 00 00 00
> 00 00
> 1321534090.799381: wpa_driver_nl80211_set_key: ifindex=2
> alg=2 addr=0x466559 key_idx=1 set_tx=0 seq_len=6 key_len=32
> 1321534090.833324: WPA: Sending EAPOL-Key 2/2
> 1321534090.833361: WPA: TX EAPOL-Key - hexdump(len=99): 01
> 03 00 5f fe 03 11 00 20 00 00 00 00 00 00 00 03 00 00 00 00
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
> 97 13 ae 4f f2 a3 f4 b1 24 a3 31 66 63 63 ec 9b 00 00
> 1321534090.833409: WPA: Group rekeying completed with
> fc:fb:fb:d9:f0:8d [GTK=TKIP]
> 1321534090.833418: Cancelling authentication timeout
> 1321534090.833424: State: GROUP_HANDSHAKE -> COMPLETED
> 
> 
> -- 
> H?vard Espeland
> _______________________________________________
> HostAP mailing list
> HostAP at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap
>