Enabling 802.11r breaks WPA2 with hostapd

HarvsG · July 5, 2021, 10:55pm

Hi all,

I am running OpenWRT 15.05 (Qualcom SDK) on a GL-inet B1300. When I add the following options:

config wifi-iface 'guest2g'
        option device 'wifi0'
        option network 'guest'
        option mode 'ap'
        option encryption 'psk2'
        option ifname 'ath3'
        option guest '1'
        option ssid 'MyLAN'
        option key 'timesup'
        option mobility_domain '4f57'
        option ieee80211r '1'
        option ft_psk_generate_local '1'
        option ft_over_ds '0'
        option wmm '1'
        option nasid '3B83C400FD66'

It generates a hostapd-ath3.conf that looks like:

root@GL-B1300:/etc/config# cat /var/run/hostapd-ath3.conf
driver=atheros
interface=ath3
#channel=7
logger_syslog=127
logger_syslog_level=1
logger_stdout=127
logger_stdout_level=1
ctrl_interface=/var/run/hostapd-wifi0
wpa_passphrase=timesup
auth_algs=1
wpa=2
wpa_pairwise=CCMP
nas_identifier=3B83C400FD66
ssid=MyLAN
bridge=br-guest
ieee80211w=0
wpa_key_mgmt=WPA-PSK  FT-PSK
mobility_domain=4f57
r0_key_lifetime=10000
reassociation_deadline=1000
pmk_r1_push=1
ft_over_ds=0
r0kh=  000102030405060708090a0b0c0d0e0f
r0kh=  000102030405060708090a0b0c0d0e0f
r1kh=  000102030405060708090a0b0c0d0e0f

However when the wifi comes up - it brings up an unencrypted (open) network and devices can’t connect!

I would be grateful for any advice, I am very keen to get 802.11r working!

alzhao · July 6, 2021, 10:05am

I don’t think 802.11r works in qsdk.

Maybe you can try openwrt vanilla firmware?

HarvsG · July 8, 2021, 11:40am

I got it working (I think)

gist.github.com

https://gist.github.com/HarvsG/0575eb399d1920cd5ec5aae5db67929a

aHowTo80211ronQSKD.md

## How to get 802.11r (Fast Transition) working on Qualcomms fork of OpenWRT 15.05. In this case on a Gl-inet router

Unfortunately just setting the 4 lines as detailed in this [reddit post](https://www.reddit.com/r/openwrt/comments/515oea/finally_got_80211r_roaming_working/) _almost_ works, however hostapd fails to start due to the auto generated r0kh strings having incorrect formatting. The sypmtom was that the network would appear as open and devices would fail to connect. 

![image](https://user-images.githubusercontent.com/11440490/124912617-143dd200-dfe6-11eb-87fb-d1872cb29857.png)


As far as I can tell at the time of writing, this r0khs are unecessary with WPA2-PSK forms of authentication if `ft_psk_generate_local=1` is enabled in hostapd. So I commented out [lines 688 - 690](https://gist.github.com/HarvsG/0575eb399d1920cd5ec5aae5db67929a#file-hostapd-sh-L688-L690) of `/lib/wifi/hostapd.sh`

This file has been truncated. show original

hostapd.sh

#
# Copyright (c) 2017 Qualcomm Technologies, Inc.
#
# All Rights Reserved.
# Confidential and Proprietary - Qualcomm Technologies, Inc.
#

#
# Copyright (c) 2015, The Linux Foundation. All rights reserved.
#

This file has been truncated. show original

wireless

config wifi-device 'wifi0'
        option log_level '1'
        option type 'qcawifi'
        option macaddr '5f:83:c4:11:fd:66'
        option hwmode '11ng'
        option band '2G'
        option txpower_max '23'
        option noscan '0'
        option channel '7'
        option htmode 'HT20'

This file has been truncated. show original

HarvsG · July 8, 2021, 11:41am

I love your GUI/VPN management too much to go vanilla