Traffic does not pass trought AP1300

classic Classic list List threaded Threaded
2 messages Options
| Threaded
Open this post in threaded view
|

Traffic does not pass trought AP1300

Sergey Velikanov
I setup my Radius as described at
http://web.archive.org/web/20031206113912/http://www.alphacore.net/spipen/article.php3?id_article=2

My Windows XP SP2 successful Authenticate using EAP-TLS, in radius log i
see

Sending Access-Accept of id 39 to 192.168.10.100:1645
         MS-MPPE-Recv-Key =
0xefc02ac383a3a2faddaad9a7aea6cdab9cfe5a2a8ab6523225b11a321da469f9
         MS-MPPE-Send-Key =
0x3d64ab1c9fe9f3aaf81115320f7e1253561415ee882671dda23cbd9181b1c6c1
         EAP-Message = 0x03070004
         Message-Authenticator = 0x00000000000000000000000000000000
         User-Name = "Sergey Velikanov"

Everything works fine, but from my Windows I can ping nothing

I use Cisco AP1300 as AP, and when I type

bridge#show dot11 associations 0060.1d1e.245c

bridge#show dot11 associations 0060.1d1e.245c
Address           : 0060.1d1e.245c     Name             : NONE
IP Address        : 0.0.0.0            Interface        : Dot11Radio 0
Device            : unknown            Software Version : NONE
CCX Version       : NONE

State             : EAP-Assoc          Parent           : self

SSID              : protected          VLAN             : 0
Hops to Infra     : 1                  Association Id   : 84
Clients Associated: 0                  Repeaters associated: 0
Tunnel Address    : 0.0.0.0
Key Mgmt type     : NONE               Encryption       : WEP
Current Rate      : 11.0               Capability       :
Supported Rates   : 1.0 2.0 5.5 11.0
Signal Strength   : -48  dBm           Connected for    : 19 seconds
Signal Quality    : N/A                Activity Timeout : 59 seconds
Power-save        : Off                Last Activity    : 1 seconds ago

Packets Input     : 56                 Packets Output   : 16
Bytes Input       : 6723               Bytes Output     : 3108
Duplicates Rcvd   : 0                  Data Retries     : 0
 >Decrypt Failed    : 45                 RTS Retries      : 0
MIC Failed        : 0                  MIC Missing      : 0
Packets Redirected: 0                  Redirect Filtered: 0


it seems that all traffic rejected by AP1300m why? Is it Radius, Cisco
or my old orinoco card(I've bought it about 4 years ago)

also in cisco's log I see
*Mar  1 05:08:00.483: %DOT11-6-ASSOC: Interface Dot11Radio0, Station
0060.1d1e.245c Associated KEY_MGMT[NONE]

Is it normal that KEY_MGMT = NONE ?

PS: This is my AP1300 config

bridge#sh run int dot11Radio 0
Building configuration...

Current configuration : 423 bytes
!
interface Dot11Radio0
  no ip address
  no ip route-cache
  !
  encryption mode wep mandatory
  !
  ssid protected
     authentication open eap eap_methods
     authentication network-eap eap_methods
     guest-mode
  !
  short-slot-time
  concatenation
  speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0
36.0 48.0 54.0
  rts threshold 4000
  station-role root ap-only
  infrastructure-client
  bridge-group 1
end
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Traffic does not pass trought AP1300

Stefan Winter
Hi,

> State             : EAP-Assoc          Parent           : self

This shows that from the RADIUS side, everything is fine.

> Decrypt Failed    : 45                 RTS Retries      : 0

> it seems that all traffic rejected by AP1300m why? Is it Radius, Cisco
> or my old orinoco card(I've bought it about 4 years ago)
> interface Dot11Radio0
>   !
>   encryption mode wep mandatory
>   !

So you have configured your AP for static WEP. My guess is that your Windows
(XP?) box tries to apply a dynamic key, so that the two keys don't match,
which in turn leads to Decrypt failed errors.
Try
encryption mode ciphers wep128
on the AP and set the option WEP, assigned automatically on the XP box.
And don't ask the freeradius mailing list next time, your problem has nothing
to do with RADIUS.

Greetings,

Stefan Winter

--
Stefan WINTER

Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de
la Recherche
Ingénieur de recherche

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
email: [hidden email]     tél.:     +352 424409-1
http://www.restena.lu               fax:      +352 422473

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html