EAP wired connection on GLMT1300 doesn't work

Technical Support for Routers
1

Hello, I am working with a MT1300 (beryl) to implement an EAP-TLS connection with wpasupplicant and hostapd. I have access to the computer where the hostapd is running and I try running wpasupplicant on the beryl. I have read this https://forum.gl-inet.com/t/802-x-authentication/17882 but it’s about a wifi connection and i am trying to do a wired connection.
Here is the configuration of the wpasupplicant:

ap_scan=0

network={
        eap=TLS
        phase1="tls_disable_tlsv1_3=0"
        eapol_flags=0
        key_mgmt=IEEE8021X
        identity="**********"
        client_cert="path/station.cert.pem"
        private_key="path/station.key.pem"
        private_key_passwd="******"

        # CA certificate to validate the RADIUS server's identity
        ca_cert="path/ca-chain.cert.pem"
}

I think that the integrated switch pick up eap messages because they are sent but never received. Is there a way to avoid that ?
Here is the message of wpasupplicant:

Successfully initialized wpa_supplicant
eth0.2: Associated with 01:80:c2:00:00:03
eth0.2: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0

Here is the tcpdump of the router’s interface:

13:38:10.142909 EAPOL start (1) v1, len 0

Do you think it would work better with the GL-A1300 (wired connection) ?

2

It seems the eap message is blocked by switch vlan. You can try vanilla openwrt it uses dsa switch driver for A1300 that could avoid vlan issue.

3

Thank you for your answer, it works !!

1 Like