WPA_Supplicant: no unicast with wpa encryption

WPA_Supplicant: no unicast with wpa encryption

[mkettn]

Hello,

I want to use wpa_supplicant to encrypt a ad-hoc network with WPA.
Each device is also a router (using babeld). 
With encryption the support for unicast packages drops. I've used
tshark to monitor the traffic of two devices (A and B):

when A wants to ping B it broadcasts a ask for the MAC-address of B.
B sends the MAC-address successfully but A doesn't care.

I see the reply of B in tshark (running on B), but the ARP-package
doesn't show up on tshark on A.

this only happens with wpa_supplicant enabled.

The wpa_supplicant.conf looks like this:
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
update_config=1

# use 'ap_scan=2' on all devices connected to the network
ap_scan=2

network={
    ssid="mesh-wpa"
    mode=1
    frequency=2432
    proto=WPA
    key_mgmt=WPA-NONE
    pairwise=NONE
    group=TKIP
    psk="secret passphrase"
}


and the /etc/network/interfaces like this:
auto lo

iface lo inet loopback
iface eth0 inet dhcp

allow-hotplug wlan0
iface wlan0 inet static
    address 192.168.13.37
    netmask 255.255.255.255

    # Load WPA-Supplicant for WPA in Ad-Hoc Mode
    wpa-driver wext
    wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf

iface default inet dhcp


I'm using two RaspberryPis with Raspbian Linux 3.6.11+.
Here is the device descriptor of the wlan usb stick:
lsusb -v -d 0cf3:9271 - http://pastebin.com/nfvVp80u

the output of wpa_supplicant -i wlan0 -D wext
-c /etc/wpa_supplicant/wpa_supplicant.conf brings:

ioctl[SIOCSIWPMKSA]: Invalid argument
ioctl[SIOCSIWENCODEEXT]: Invalid argument
ioctl[SIOCSIWENCODEEXT]: Invalid argument
wlan0: Trying to associate with SSID 'mesh-wpa'
ioctl[SIOCSIWGENIE]: Operation not supported
wlan0: Association request to the driver failed
wlan0: CTRL-EVENT-CONNECTED - Connection to 00:00:00:00:00:00 completed
(auth) [id=-1 id_str=] wlan0: Trying to associate with SSID 'mesh-wpa'
ioctl[SIOCSIWENCODEEXT]: Invalid argument
ioctl[SIOCSIWENCODEEXT]: Invalid argument
ioctl[SIOCSIWGENIE]: Operation not supported
wlan0: Association request to the driver failed
wlan0: CTRL-EVENT-CONNECTED - Connection to 00:00:00:00:00:00 completed
(reauth) [id=0 id_str=]

-Mark

Re: WPA_Supplicant: no unicast with wpa encryption

[Nicolas Cavallari]

On 15/11/2013 10:18, mkettn@technik-emden.de wrote:
> Hello,
> 
> I want to use wpa_supplicant to encrypt a ad-hoc network with WPA.
> Each device is also a router (using babeld). 
> With encryption the support for unicast packages drops. I've used
> tshark to monitor the traffic of two devices (A and B):
> 
> when A wants to ping B it broadcasts a ask for the MAC-address of B.
> B sends the MAC-address successfully but A doesn't care.
> 
> I see the reply of B in tshark (running on B), but the ARP-package
> doesn't show up on tshark on A.
> 
> this only happens with wpa_supplicant enabled.
> 
> The wpa_supplicant.conf looks like this:
> ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
> update_config=1
> 
> # use 'ap_scan=2' on all devices connected to the network
> ap_scan=2
> 
> network={
>     ssid="mesh-wpa"
>     mode=1
>     frequency=2432
>     proto=WPA
>     key_mgmt=WPA-NONE

WPA-NONE is not true WPA. Support for it was broken in wpasupplicant for a long time,
and the kernel does not support it anymore. Use IBSS RSN instead :

proto=RSN
key_mgmt=WPA-PSK
pairwise=CCMP
group=CCMP

> and the /etc/network/interfaces like this:
> auto lo
> 
> iface lo inet loopback
> iface eth0 inet dhcp
> 
> allow-hotplug wlan0
> iface wlan0 inet static
>     address 192.168.13.37
>     netmask 255.255.255.255
> 
>     # Load WPA-Supplicant for WPA in Ad-Hoc Mode
>     wpa-driver wext

wext is deprecated, use nl80211 instead.

Re: WPA_Supplicant: no unicast with wpa encryption

[Mark Kettner]

On Fri, 15 Nov 2013 10:42:36 +0100 Nicolas Cavallari
<Nicolas.Cavallari@lri.fr> wrote:
> > […] 
> WPA-NONE is not true WPA. Support for it was broken in wpasupplicant
> for a long time, and the kernel does not support it anymore. Use IBSS
> RSN instead :
> 
> proto=RSN
> key_mgmt=WPA-PSK
> pairwise=CCMP
> group=CCMP
> 
> > and the /etc/network/interfaces like this:
> > auto lo
> > 
> > iface lo inet loopback
> > iface eth0 inet dhcp
> > 
> > allow-hotplug wlan0
> > iface wlan0 inet static
> >     address 192.168.13.37
> >     netmask 255.255.255.255
> > 
> >     # Load WPA-Supplicant for WPA in Ad-Hoc Mode
> >     wpa-driver wext
> 
> wext is deprecated, use nl80211 instead.

thanks for your reply.

I am now using the driver nl80211 and everything works again. But if I
apply the changes to the wpa_supplicant configuration I'm getting these
errors http://pastebin.com/GYW0mng2 in a endless loop.


- Mark

Re: WPA_Supplicant: no unicast with wpa encryption

[Simon Wunderlich]

Mark,

> On Fri, 15 Nov 2013 10:42:36 +0100 Nicolas Cavallari
> 
> <Nicolas.Cavallari@lri.fr> wrote:
> > > […]
> > 
> > WPA-NONE is not true WPA. Support for it was broken in wpasupplicant
> > for a long time, and the kernel does not support it anymore. Use IBSS
> > RSN instead :
> > 
> > proto=RSN
> > key_mgmt=WPA-PSK
> > pairwise=CCMP
> > group=CCMP
> > 
> > > and the /etc/network/interfaces like this:
> > > auto lo
> > > 
> > > iface lo inet loopback
> > > iface eth0 inet dhcp
> > > 
> > > allow-hotplug wlan0
> > > iface wlan0 inet static
> > > 
> > >     address 192.168.13.37
> > >     netmask 255.255.255.255
> > >     
> > >     # Load WPA-Supplicant for WPA in Ad-Hoc Mode
> > >     wpa-driver wext
> > 
> > wext is deprecated, use nl80211 instead.
> 
> thanks for your reply.
> 
> I am now using the driver nl80211 and everything works again. But if I
> apply the changes to the wpa_supplicant configuration I'm getting these
> errors http://pastebin.com/GYW0mng2 in a endless loop.

you might need a recent version of wpa_supplicant as well - AFAIK v2.0 or 
higher. If that is already installed, please let us know your kernel version 
and wpa_supplicant version.

Cheers,
    Simon

Re: WPA_Supplicant: no unicast with wpa encryption

[Mark Kettner]

Hi,
the update was quite a hassle, but now everything works fine, many
thanks.

-Mark

On Fri, 15 Nov 2013 16:12:50 +0100 Simon Wunderlich
<sw@simonwunderlich.de> wrote:
> Mark,
> 
> > On Fri, 15 Nov 2013 10:42:36 +0100 Nicolas Cavallari
> > 
> > <Nicolas.Cavallari@lri.fr> wrote:
> > > > […]
> > > 
> > > WPA-NONE is not true WPA. Support for it was broken in
> > > wpasupplicant for a long time, and the kernel does not support it
> > > anymore. Use IBSS RSN instead :
> > > 
> > > proto=RSN
> > > key_mgmt=WPA-PSK
> > > pairwise=CCMP
> > > group=CCMP
> > > 
> > > > and the /etc/network/interfaces like this:
> > > > auto lo
> > > > 
> > > > iface lo inet loopback
> > > > iface eth0 inet dhcp
> > > > 
> > > > allow-hotplug wlan0
> > > > iface wlan0 inet static
> > > > 
> > > >     address 192.168.13.37
> > > >     netmask 255.255.255.255
> > > >     
> > > >     # Load WPA-Supplicant for WPA in Ad-Hoc Mode
> > > >     wpa-driver wext
> > > 
> > > wext is deprecated, use nl80211 instead.
> > 
> > thanks for your reply.
> > 
> > I am now using the driver nl80211 and everything works again. But
> > if I apply the changes to the wpa_supplicant configuration I'm
> > getting these errors http://pastebin.com/GYW0mng2 in a endless loop.
> 
> you might need a recent version of wpa_supplicant as well - AFAIK
> v2.0 or higher. If that is already installed, please let us know your
> kernel version and wpa_supplicant version.
> 
> Cheers,
>     Simon