MT3600BE (Beryl 7) EAP support and LuCi

I’m at a WeWork location now that uses EAP for authenticating to their WiFi. I came here the first time with my MT3600 (Beryl AX) and had to upgrade to the beta firmware (after some troubleshooting this was the solution) OpenWrt 24 and after that had no issues connecting to the WiFi as a Repeater.

With Beryl 7 (MT3600BE) there is no such firmware and I’ve also come to understand that LuCi (which seems to have been an option for MT3600) isn’t an option here as the router is with the MediaTek (MTK) WiFi stack and doesn’t have the Network / WiFi menu in LuCi, instead it’s under MTK / WiFi configuration which doesn’t seem to be the same as the other guides online.

I’ve also tried to manually enter in the SSID from the Repeater via setting "Join other network" and picking WPA/WPA2/WPA3 Enterprise, enter in the SSID, my username and password and it just doesn’t want to connect. I've made sure (and double sure) that the SSID is the same (lower/upper caps etc) and it just doesn't want to connect. I hit connect and basically instantly I get this error message " Connection failed, will retry later… Could not find the network, please check the SSID and security type you entered..."

When checking the environment with LuCi via ..cgi-bin/luci/admin/mtk/wifi/apcli_cfg_view/MT7993.1.2/apclii0 (via the MTK / WiFi Settings and hitting config on apclii0 (5G band)) I can see that the network is listed as (as I'm typing this now, I have very hard time getting this information again) FT-WPA2/AES followed by Security Not Supported, but it even says WPA2/AES is Security Not Supported so not sure what this means.

So with all this, is there no way today that we can connect to EAP networks with Beryl 7 on the GL iNet firmware? I’m guessing one solution here would be to upgrade to OpenWRT but I rather not do that for the one offs when I go here. Thanks for your time!

What encryption method does your upstream EAP WiFi use?

Can your other devices connect to this EAP WiFi?

Besides entering the username and password, are there any other steps required for a successful connection?

Could you export the router connection failure logs and send them to us for review?

What encryption method does your upstream EAP WiFi use?

When I scanned with LuCi it said: FT-WPA2/AES

Can your other devices connect to this EAP WiFi?

Yeah I had no issues connecting iPhone or my Mac to the WiFi, there were probably 80-90 ppl at the WeWork and didn’t see anyone complaining about not having internet :slight_smile: So no faults there.

Besides entering the username and password, are there any other steps required for a successful connection?

That’s all you need, username and the password

Could you export the router connection failure logs and send them to us for review?

I have the logs from that day but only from when I upgraded to the beta 4.8.6. Not sure how you want me to send them, via email or share them here?

Again I want to point out that with Beryl AX (MT3000) after installing the OpenWrt 24 firmware v. 4.8.3 there were no issues to connect to this same network. What stands out here for me is that many manuals mention WiFi settings in Network tab of LuCi, but Beryl 7 (MT3600BE) doesn’t have that, instead the MTK menu is there with other options:
<screenshot removed, only 1 supported for new users>

<screenshot removed, only 1 supported for new users>

<screenshot removed, only 1 supported for new users>

It was the last interface apclii0 that I was trying to connect to the network but it said SSID (WeWorkWiFi) - FT-WPA2/AES - Security Not Supported. As you can see on the screenshot there are a few of those:

Just for the sake of it, this is how LuCi looks on my Beryl AX:

<screenshot removed, only 1 supported for new users>

The options there are also very different and gives me a Scan option on radio0 which provides better results and easier (and supported) networks to join:

<screenshot removed, only 1 supported for new users>

<screenshot removed, only 1 supported for new users>

OK.

Having connection failure logs might be helpful for problem analysis.

If you'd like, you can send the logs to support@gl-inet.com along with a link to this post.

Thank you.

Thanks!

I’ve sent the logs I have via email.