Re: IWD 1.27 with brcmfmac not working for roaming

[James Prestwood <prestwoj@gmail.com>]

Hi Martin,

On 10/22/24 11:04 AM, Martin Petzold wrote:
> Hi James,
>
> Am 22.10.24 um 19:40 schrieb James Prestwood:
>> Hi Martin,
>>
>> On 10/21/24 3:10 PM, Martin Petzold wrote:
>>> Hi Arend,
>>>
>>> Am 22.10.24 um 00:01 schrieb KeithG:
>>>> Arend,
>>>>
>>>> If there is a patch for brcmfmac to use CMD_EXTERNAL_AUTH, I am
>>>> interested in testing. The last time we tried, it errored out and did
>>>> not work as expected.
>>>
>>> Support with our current chip for WPA3 and also OWE by offloading 
>>> SAE etc. to IWD. That is possible?! This would be great!
>>
>> Have you also checked with the vendor (Solid Run?) if SAE/OWE are 
>> supported by the hardware/kernel they ship with (even with 
>> wpa_supplicant)?
>
> Vendor is Variscite and the chip is Laird LWB5 (BCM4339). According to 
> Laird WPA3 is NOT supported. However, this is not the problem: I knew 
> this all the time.
>
> The Cisco enterprise network is (should be) configured as WPA3 OWE 
> with Transition Mode (there should be one hidden and one visible 
> network) [1]. And, my device connects ONCE initially (it is connected 
> and online). Then it looses the connection (I assume maybe due to 
> roaming) and does not connect again. Also manual re-connection 
> attempts using iwctl fail (see log). All auto-connects fail. Maybe you 
> can check the logs again, and can confirm WPA3 OWE with Transition 
> Mode is configured?

 From your logs I see no successful connection, but it looks like the 
OWE transition mode is configured on the APs. Based on what brcmfmac is 
saying the issue appears to be that IWD chooses the OWE AKM when 
connecting and brcmfmac errors out as its unsupported. I don't believe 
there is any way for IWD to check if OWE is supported by the driver, and 
we just assume it is (Arend, maybe you know of a way to check this?). It 
appears that what you need is a new IWD option to force connecting to an 
open network, not the OWE transition/hidden network, right?

>
> [1] 
> https://www.cisco.com/c/de_de/support/docs/wireless/catalyst-9800-series-wireless-controllers/217737-configure-enhanced-open-ssid-with-transi.html