Can one STA with EAPOL errors make hostapd drop all clients?

[Krishna Chaitanya]

On Mon, May 25, 2015 at 10:48 AM, Rafa? Mi?ecki <zajec5 at gmail.com> wrote:
> Hi,
>
> I'm experimenting with various drivers and during my tests I got a
> faulty STA. It experiences some Michael failures which causes
> wpa_supplicant sending EAPOL errors to AP.
>
> What bothers me is that hostapd drops all STAs after getting the
> second "EAPOL-Key Error Request". Instead of just dealing with faulty
> STA it breaks connectivity for all other users. Moreover they can't
> re-connect for some reason until I disable faulty STA and wait few
> minutes.
This is expected as per spec, 2 Michael failures and AP should de-authenticate
all STA's. For cross checking, you can try CCMP instead of TKIP?
>
> I verified this faulty STA can affect hostapd like this when using:
> 1) Broadcom hw and hostapd-2014-06-03
> 2) Broadcom hw and hostapd-2015-03-25
> 3) Atheros hw and hostapd-2012-04-28
>
> Could you take a look at this? Attached is a log in HTML form for
> better comparison of hostapd and wpa_supplicant parts.