Authentication failed, but I still can send packets

henry1412 henry1412 at 163.com
Tue Nov 25 22:06:54 EST 2008


 

>Are you using wired networks (i.e., IEEE 802.1X for Ethernet)? If yes,
>please note that hostapd does not include port access entity (PAE). In
>other words, it does not enforce the port authorized/unauthorized
>processing or in any way change how data frames are passed through.
>
>If you want to block the frames on an unauthorized port in a wired
>network, you will need to use external mechanism (e.g., a kernel module
>to implement PAE functionality or Linux bridge filtering/ibtables) to do
>this and modify hostapd wired driver wrapper (driver_wired.c) to
>configure the external mechanism to block/unblock the port based on IEEE
>802.1X authorization state.
>
>-- 
>Jouni Malinen                                            PGP id EFC895FA
>
Thanks Jouni Malinen for your help.I used wired networks for IEEE 802.1X authenticaion. I will have a try by your suggestion.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20081126/bbcfd4be/attachment.htm 


More information about the HostAP mailing list