Any known problems with 802.1w together with 802.1x?

Jouni Malinen j at w1.fi
Sat Jun 6 10:13:46 EDT 2015


On Mon, Jun 01, 2015 at 02:27:39PM -0700, Ben Greear wrote:
> Actually, I'm having a hard time finding any info on exactly what combinations
> are supposed to be valid.  It seems that PSK + PMF works, but WPA-EAP
> will not work.

I'm not sure what you mean with "WPA-EAP will not work". WPA-EAP works
fine with PMF.

> Should we modify supplicant to require the 256 bit version of PSK for PMF?

No, there is no such requirement.

> Or, should we modify supplicant to allow 128-bit EAP to work for PMF?

What do you mean with "128-bit EAP"? If that is referring to using SHA-1
-based AKM, wpa_supplicant already allows this.
 
-- 
Jouni Malinen                                            PGP id EFC895FA


More information about the HostAP mailing list