Traffic does not pass trought AP1300
I setup my Radius as described at http://web.archive.org/web/20031206113912/http://www.alphacore.net/spipen/ar... My Windows XP SP2 successful Authenticate using EAP-TLS, in radius log i see Sending Access-Accept of id 39 to 192.168.10.100:1645 MS-MPPE-Recv-Key = 0xefc02ac383a3a2faddaad9a7aea6cdab9cfe5a2a8ab6523225b11a321da469f9 MS-MPPE-Send-Key = 0x3d64ab1c9fe9f3aaf81115320f7e1253561415ee882671dda23cbd9181b1c6c1 EAP-Message = 0x03070004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "Sergey Velikanov" Everything works fine, but from my Windows I can ping nothing I use Cisco AP1300 as AP, and when I type bridge#show dot11 associations 0060.1d1e.245c bridge#show dot11 associations 0060.1d1e.245c Address : 0060.1d1e.245c Name : NONE IP Address : 0.0.0.0 Interface : Dot11Radio 0 Device : unknown Software Version : NONE CCX Version : NONE State : EAP-Assoc Parent : self SSID : protected VLAN : 0 Hops to Infra : 1 Association Id : 84 Clients Associated: 0 Repeaters associated: 0 Tunnel Address : 0.0.0.0 Key Mgmt type : NONE Encryption : WEP Current Rate : 11.0 Capability : Supported Rates : 1.0 2.0 5.5 11.0 Signal Strength : -48 dBm Connected for : 19 seconds Signal Quality : N/A Activity Timeout : 59 seconds Power-save : Off Last Activity : 1 seconds ago Packets Input : 56 Packets Output : 16 Bytes Input : 6723 Bytes Output : 3108 Duplicates Rcvd : 0 Data Retries : 0
Decrypt Failed : 45 RTS Retries : 0 MIC Failed : 0 MIC Missing : 0 Packets Redirected: 0 Redirect Filtered: 0
it seems that all traffic rejected by AP1300m why? Is it Radius, Cisco or my old orinoco card(I've bought it about 4 years ago) also in cisco's log I see *Mar 1 05:08:00.483: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 0060.1d1e.245c Associated KEY_MGMT[NONE] Is it normal that KEY_MGMT = NONE ? PS: This is my AP1300 config bridge#sh run int dot11Radio 0 Building configuration... Current configuration : 423 bytes ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode wep mandatory ! ssid protected authentication open eap eap_methods authentication network-eap eap_methods guest-mode ! short-slot-time concatenation speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 rts threshold 4000 station-role root ap-only infrastructure-client bridge-group 1 end
Hi,
State : EAP-Assoc Parent : self
This shows that from the RADIUS side, everything is fine.
Decrypt Failed : 45 RTS Retries : 0
it seems that all traffic rejected by AP1300m why? Is it Radius, Cisco or my old orinoco card(I've bought it about 4 years ago) interface Dot11Radio0 ! encryption mode wep mandatory !
So you have configured your AP for static WEP. My guess is that your Windows (XP?) box tries to apply a dynamic key, so that the two keys don't match, which in turn leads to Decrypt failed errors. Try encryption mode ciphers wep128 on the AP and set the option WEP, assigned automatically on the XP box. And don't ask the freeradius mailing list next time, your problem has nothing to do with RADIUS. Greetings, Stefan Winter -- Stefan WINTER Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingénieur de recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg email: stefan.winter@restena.lu tél.: +352 424409-1 http://www.restena.lu fax: +352 422473
participants (2)
-
Sergey Velikanov -
Stefan Winter