Re: WPA_Supplicant: no unicast with wpa encryption

[Nicolas Cavallari <Nicolas.Cavallari@lri.fr>]

On 15/11/2013 10:18, mkettn@technik-emden.de wrote:
> Hello,
> 
> I want to use wpa_supplicant to encrypt a ad-hoc network with WPA.
> Each device is also a router (using babeld). 
> With encryption the support for unicast packages drops. I've used
> tshark to monitor the traffic of two devices (A and B):
> 
> when A wants to ping B it broadcasts a ask for the MAC-address of B.
> B sends the MAC-address successfully but A doesn't care.
> 
> I see the reply of B in tshark (running on B), but the ARP-package
> doesn't show up on tshark on A.
> 
> this only happens with wpa_supplicant enabled.
> 
> The wpa_supplicant.conf looks like this:
> ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
> update_config=1
> 
> # use 'ap_scan=2' on all devices connected to the network
> ap_scan=2
> 
> network={
>     ssid="mesh-wpa"
>     mode=1
>     frequency=2432
>     proto=WPA
>     key_mgmt=WPA-NONE

WPA-NONE is not true WPA. Support for it was broken in wpasupplicant for a long time,
and the kernel does not support it anymore. Use IBSS RSN instead :

proto=RSN
key_mgmt=WPA-PSK
pairwise=CCMP
group=CCMP

> and the /etc/network/interfaces like this:
> auto lo
> 
> iface lo inet loopback
> iface eth0 inet dhcp
> 
> allow-hotplug wlan0
> iface wlan0 inet static
>     address 192.168.13.37
>     netmask 255.255.255.255
> 
>     # Load WPA-Supplicant for WPA in Ad-Hoc Mode
>     wpa-driver wext

wext is deprecated, use nl80211 instead.