Time period for WPA3. Better WPA3 beta, than 14 years old and broken PWA2

Henry_Bruns · 2020-03-09T16:35:35.420Z

Thats sounds interesting. I have just installed the openwrt-ar750-3.103-0302 snapshotversion for testing purposes. This seems to me to be still based on the 18.06. Thats mean i have to wait a little bit more.

Now I have seen, the OpenWrt 19.07.2 - Service Release is out on 6 March 2020:

[OpenWrt Wiki] OpenWrt 19.07.2 - Service Release - 6 March 2020

It can be “try WPA3” will be:

a good default for owner and guest wifi
with the possibility to set to WPA3 only at minimum for owner wifi, for owners which stopped using non wpa3 devices.

Henry_Bruns · 2020-04-12T18:06:27.991Z

Alzo wrote 2020-03-09:
“The first firmware using 1907 will try WPA3. Hope to give you more specified new later.”

My Answer:
For some customers are, improving safety from Good to Excellent is an important argument for their purchase decision.

Is there already an approximate timetable for WPA3 support by gli devices ?

THX
Regards from Easter Bunny

alzhao · 2020-04-13T02:46:31.851Z

We are testing testing. It is slow.

But we will update the timetable this month.

wellnw · 2020-04-13T03:13:16.288Z

@Henry_Bruns @Plupy @jeffsf
Thank you for your love and suggestions for GL products. We will give priority to the AR750S in April, and then perform performance and stability tests. We plan to release the test firmware at the end of April. Once the test is stable, we will update other models in sequence (AR750 / AR300M / X750 / E750 / X1200, etc.)
We will update to 19.07 and then support WPA3 encryption.

Henry_Bruns · 2020-04-18T10:06:42.547Z

wellnw:

We plan to release the test firmware at the end of April. Once the test is stable, we will update other models in sequence (AR750 / AR300M / X750 / E750 / X1200, etc.)
We will update to 19.07 and then support WPA3 encryption.

Thats great. The customer will love it.

Henry_Bruns · 2020-04-28T09:07:18.641Z

wellnw:

@Henry_Bruns @Plupy @jeffsf
Thank you for your love and suggestions for GL products. We will give priority to the AR750S in April, and then perform performance and stability tests. We plan to release the test firmware at the end of April. Once the test is stable, we will update other models in sequence (AR750 / AR300M / X750 / E750 / X1200, etc.)
We will update to 19.07 and then support WPA3 encryption.

Push up from end of April.
Is there already a beta version for mainstream router like AR750 / AR300M ?
THX

wellnw · 2020-04-28T09:10:55.959Z

No， Only has ar750s under in testing

Henry_Bruns · 2020-04-28T09:12:11.382Z

Is there a public beta version ?

wellnw · 2020-04-28T09:17:16.409Z

@Henry_Bruns
Thank you for your concern, we will release a test version for AR750S tomorrow or the day after tomorrow

wellnw · 2020-04-30T09:34:30.422Z

@Henry_Bruns
You can download the firmware of the AR750S 19.07 version from the following link, but please note that uboot upgrade is currently supported,
https://dl.gl-inet.com/firmware/ar750s/snapshots/ar750s_19.07/

image762×144 11.3 KB

Note:

Upgrade from openwrt-18.06 version to openwrt-19.07 version, currently only support uboot upgrade（openwrt-ar750s-3.200.img）
upgrade method refer to the following link:Debrick via Uboot - GL.iNet Docs
By default, WPA2/WPA3 mixed encryption is used. During the self-test, some Android devices failed to connect.
If the connection fails, you can modify it on the WIRELESS.

typhoe · 2020-05-01T12:39:15.871Z

Hi,

quick test.

old Android 9 Sony phone : connect correctly in wpa2 psk (5GHz)
linux notebook : connect correctly in wpa3 (5GHz also)

No access yet to luci web interface?
No option in gl menu and it is redirected when trying http://192.168.8.1/cgi-bin/luci/

Thanks!

alzhao · 2020-05-01T16:53:48.612Z

The redirection may be just a browser issue?

typhoe · 2020-05-01T21:37:06.234Z

I don’t think.
I tried to force refresh and even tried the url directly in “incognito mode”.

rp201rp · 2020-05-02T01:15:25.133Z

I believe ar750s uses ath10 wireless
does this support 802.11w Management Frame Protection ?

alzhao · 2020-05-02T01:47:36.009Z

Can you just type http://192.168.8.1/#
Add # at the end

Henry_Bruns · 2020-05-03T07:55:03.617Z

wellnw:

By default, WPA2/WPA3 mixed encryption is used. During the self-test, some Android devices failed to connect.
If the connection fails, you can modify it on the WIRELESS.

A friend has been using the firmware on two AR750S for a few days. He’s been up and running so far. He probably uses a WLAN for non WPA3 devices and a WLAN for WPA3 only devices. It looks like this avoids possible problems with not fully wpa3 compliant client devices.

Its looks like, WPA3 is supported on this time by:

Windows 10, Linux Kernel 5.1 by self and 4.19 by installed Kernel driver for used WPA3 device, Androide 10 and Openwrt 19.07 RC2. I dont know about Apple OS.
https://en.wikipedia.org/wiki/IEEE_802.11ax#Silicon

I have not tested the new WPA3 firmware because I only have smaler ar750 and ar300.

typhoe · 2020-05-04T15:29:23.017Z

That’s simply the url to get the gl-inet web management interface.

I’m asking about the openWRT one !

There’s a redirection on the usual openwrt url (and anything else in fact):
http://192.168.8.1/cgi-bin/luci/ → http://192.168.8.1/#

curl http://192.168.8.1/cgi-bin/luci/
<html>

<head>
    <meta http-equiv='refresh' content='1; url=/#' />
</head>

<body>
</body>

rp201rp · 2020-05-05T04:24:11.977Z

Henry_Bruns:

I have not tested the new WPA3 firmware because I only have smaler ar750 and ar300.

I do extroot on my 750. have 19.07.2 clean loaded and use wpa3 no problem. also have freeradius3 and testing with wpa3_peap loaded.

rp201rp · 2020-05-05T07:08:41.364Z

Henry_Bruns:

He probably uses a WLAN for non WPA3 devices and a WLAN for WPA3 only devices. It looks like this avoids possible problems with not fully wpa3 compliant client devices

I have tested wpa2/wpa3 mixed mode sae and eap (enterprise) and have seen wpa2 working and wpa3 clients stepping down to wpa2 making it useless. What I have also read is to never have two ap’s on the same radio with different security schemes which I tested and found it not to be necessary but actually worked fine. please don’t take my word for it but please test yourself incase my testing was in correct cause i really diddn’t believe it myself. maybe a new enhancement in 19.07.x? Note no mixing enterpise because that defaulted to enterprise

satadru · 2020-05-16T14:52:47.641Z

I’m trying to use IPv6 with this ar750s-3.200 firmware. I can’t seem to get any IPv6 addresses on my client machines on the LAN.

I have run this first to enable IPv6:

uci set glipv6.globals.enabled=1 && uci commit

But I can’t get IPv6 addresses to show up on my LAN. Does anyone have a working set of /etc/config/network, /etc/config/dhcp, and /etc/config/firewall to let this work?

(Not currently using a VPN, so not worried about information leakage.)