About "non WPA network not allowed"

[why]

Hello, I'm new to hostapd and wpa_supplicant. I have a few question to ask about EAP-SIM and the "non WPA network not allowed".

1.My hostapd.conf is:
interface=wlan0
bridge=br0
driver=nl80211
ssid=eap-sim
hw_mode=g
channel=1
auth_algs=3
ieee8021x=1
eapol_version=1
eap_server=1
eap_user_file=./hostapd.eap_user
eap_sim_db=unix:/tmp/hlr_auc_gw.sock
radius_server_clients=./hostapd.radius_clients
radius_server_auth_port=1812
2.My hostapd.eap_user is:
# Wildcard for all other identities
*        SIM    #PEAP,TTLS,TLS,SIM,AKA
"0"*        SIM    [2]
"1"*        SIM    [2]
"2"*        SIM    [2]
"3"*        SIM    [2]
"4"*        SIM    [2]
"5"*        SIM    [2]
3.I run the hlr_auc_gw and use the original hostapd_sim.db
4.My hostapd/.config is:
CONFIG_DRIVER_NL80211=y
CONFIG_EAP=y
CONFIG_PKCS12=y
CONFIG_RADIUS_SERVER=y
CONFIG_EAP_SIM=y
5.My wpa_supplicant/.config is:
CONFIG_DRIVER_HOSTAP=y
CONFIG_DRIVER_ATMEL=y
CONFIG_DRIVER_WEXT=y
CONFIG_DRIVER_NL80211=y
CONFIG_DRIVER_WIRED=y
CONFIG_IEEE8021X_EAPOL=y
CONFIG_EAP_MD5=y
CONFIG_EAP_MSCHAPV2=y
CONFIG_EAP_TLS=y
CONFIG_EAP_PEAP=y
CONFIG_EAP_TTLS=y
CONFIG_EAP_GTC=y
CONFIG_EAP_OTP=y
CONFIG_EAP_SIM=y
CONFIG_EAP_LEAP=y
CONFIG_PCSC=y
CONFIG_CTRL_IFACE=y
CONFIG_BACKEND=file
CONFIG_PEERKEY=y
6.My wpa_sim.conf
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=root
ap_scan=0
eapol_version=1
# EAP-SIM with a GSM SIM or USIM
network={
ssid="epa-sim"
key_mgmt=WPA-EAP
eap=SIM
pin="1234"
pcsc=""
eapol_flags=0
}
7. I run "sudo ./wpa_supplicant -dd -D nl80211 -i wlan0 -c wpa_sim.conf"
8.The output is:

  Setting scan request: 0 sec 100000 usec
EAPOL: SUPP_PAE entering state DISCONNECTED
EAPOL: Supplicant port status: Unauthorized
EAPOL: KEY_RX entering state NO_KEY_RECEIVE
EAPOL: SUPP_BE entering state INITIALIZE
EAP: EAP entering state DISABLED
EAPOL: Supplicant port status: Unauthorized
EAPOL: Supplicant port status: Unauthorized
Added interface wlan1
RTM_NEWLINK: operstate=0 ifi_flags=0x1043 ([UP][RUNNING])
RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan1' added
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan1' added
State: DISCONNECTED -> SCANNING
Starting AP scan for wildcard SSID
nl80211: Scan SSID - hexdump_ascii(len=0): [NULL]
Scan requested (ret=0) - scan timeout 10 seconds
nl80211: Event message available
nl80211: Scan trigger
EAPOL: disable timer tick
EAPOL: Supplicant port status: Unauthorized
nl80211: Event message available
nl80211: New scan results available
Received scan results (4 BSSes)
BSS: Start scan result update 1
BSS: Add new id 0 BSSID 00:1a:1e:d2:6d:90 SSID 'NCRL'
BSS: Add new id 1 BSSID c8:3a:35:10:2f:d8 SSID 'Tenda'
BSS: Add new id 2 BSSID 00:0b:86:20:cc:20 SSID 'rcls-wlan'
BSS: Add new id 3 BSSID 00:14:78:71:42:67 SSID 'eap-sim'
New scan results available
Selecting BSS from priority group 0
Try to find WPA-enabled AP
0: 00:1a:1e:d2:6d:90 ssid='NCRL' wpa_ie_len=22 rsn_ie_len=0 caps=0x431
   skip - SSID mismatch
1: c8:3a:35:10:2f:d8 ssid='Tenda' wpa_ie_len=22 rsn_ie_len=20 caps=0x11
   skip - SSID mismatch
2: 00:0b:86:20:cc:20 ssid='rcls-wlan' wpa_ie_len=0 rsn_ie_len=0 caps=0x431
   skip - no WPA/RSN IE
3: 00:14:78:71:42:67 ssid='eap-sim' wpa_ie_len=0 rsn_ie_len=0 caps=0x401
   skip - no WPA/RSN IE
Try to find non-WPA AP
0: 00:1a:1e:d2:6d:90 ssid='NCRL' wpa_ie_len=22 rsn_ie_len=0 caps=0x431
   skip - SSID mismatch
1: c8:3a:35:10:2f:d8 ssid='Tenda' wpa_ie_len=22 rsn_ie_len=20 caps=0x11
   skip - SSID mismatch
2: 00:0b:86:20:cc:20 ssid='rcls-wlan' wpa_ie_len=0 rsn_ie_len=0 caps=0x431
   skip - SSID mismatch
3: 00:14:78:71:42:67 ssid='eap-sim' wpa_ie_len=0 rsn_ie_len=0 caps=0x401
   skip - non-WPA network not allowed
No suitable network found
9.Where is wrong? How should I correct? Thank you very much!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20110911/07d77719/attachment-0001.htm