<div><br></div>Hello,<div><br>First off, thanks for a great package that allows me to replace a dedicated AP with a network processor.<br><br></div><div>I am working on a system that uses hostapd to implement an integrated access point to replace an existing product that uses an off-the-shelf access point with freeRADIUS as the authentication server.</div>



<div><br></div><div>The clients use WPA2-PEAP (with username and passwords) to authenticate with the AP and RADIUS server.</div><div><br></div><div>The username and password are stored in an &#39;eap_user&#39; file.</div>


<div><br></div><div>The clients that can connect with the freeRADIUS-based system can&#39;t connect to the hostapd-powered system.</div>
<div><br></div><div><br></div><div>The (verbose) hostapd log messages filtered for the specific client are:</div><div><div><br></div><div><div><p> Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.11:
authentication OK (open system)</p><p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 MLME:
MLME-AUTHENTICATE.indication(00:09:37:09:03:87, OPEN_SYSTEM)</p><p></p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 MLME:
MLME-DELETEKEYS.request(00:09:37:09:03:87)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt <a href="http://user.info" target="_blank">user.info</a> hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.11:
authenticated</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.11: association
OK (aid 13)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt <a href="http://user.info" target="_blank">user.info</a> hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.11: associated
(aid 13)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 MLME:
MLME-ASSOCIATE.indication(00:09:37:09:03:87)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 MLME:
MLME-DELETEKEYS.request(00:09:37:09:03:87)</p>



<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 WPA: event 1
notification</p><p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: start
authentication</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 WPA: start
authentication</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X:
unauthorizing port</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 84)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAPOL-Start from STA</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 WPA: event 5
notification</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: aborting
authentication</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 236)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAPOL-Start from STA</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 WPA: event 5
notification</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: aborting
authentication</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X:
unauthorizing port</p>

<p>Jan<span>  </span>1 00:02:22 OpenWrt
user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending EAP
Packet (identifier 219)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=84 len=21) from STA: EAP Response-Identity (1)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=236 len=21) from STA: EAP Response-Identity (1)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=219 len=21) from STA: EAP Response-Identity (1)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 220)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=220 len=86) from STA: EAP Response-PEAP (25)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 221)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=221 len=200) from STA: EAP Response-PEAP (25)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 222)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=222 len=6) from STA: EAP Response-PEAP (25)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 223)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=223 len=59) from STA: EAP Response-PEAP (25)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 224)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=224 len=107) from STA: EAP Response-PEAP (25)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 225)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: received
EAP packet (code=2 id=225 len=43) from STA: EAP Response-PEAP (25)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Sending
EAP Packet (identifier 225)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X:
unauthorizing port</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.warn hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X:
authentication failed - EAP type: 0 ((null))</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt <a href="http://user.info" target="_blank">user.info</a> hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.1X: Supplicant
used different EAP type: 25 (PEAP)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 WPA: event 2
notification</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt <a href="http://user.info" target="_blank">user.info</a> hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.11:
disassociated</p>

<p>Jan <span> </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 MLME:
MLME-DISASSOCIATE.indication(00:09:37:09:03:87, 8)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 MLME:
MLME-DELETEKEYS.request(00:09:37:09:03:87)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 WPA: event 3
notification</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 IEEE 802.11:
deauthenticated</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 MLME:
MLME-DEAUTHENTICATE.indication(00:09:37:09:03:87, 3)</p>

<p>Jan<span>  </span>1 00:02:22
OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87 MLME:
MLME-DELETEKEYS.request(00:09:37:09:03:87)</p>

<p> </p><p>(apologies for the verbose messages but I wanted to make sure I included all relevant information)<br></p>

<p></p></div></div></div><div><br></div><div>My config file is:</div><div><br></div><div>=====================</div><div><div>logger_syslog=-1</div><div>logger_syslog_level=0</div><div>logger_stdout=-1</div>
<div>logger_stdout_level=2</div>
<div><br></div><div># Dump file for state information (on SIGUSR1)</div><div>dump_file=/tmp/hostapd.dump</div><div><br></div><div>ctrl_interface=/var/run/hostapd-phy0</div><div>driver=nl80211</div><div>hw_mode=g</div><div>



interface=wlan0</div><div>eapol_version=2</div><div>#auth_algs=1</div><div>wpa=2</div><div>#ignore_broadcast_ssid=0</div><div>wpa_key_mgmt=WPA-EAP</div><div>wpa_pairwise=CCMP</div><div>wpa_group_rekey=300</div><div>wpa_gmk_rekey=640</div>



</div><div><br></div><div><div>ieee8021x=1</div><div>eapol_key_index_workaround=0</div><div>eap_server=1</div><div>eap_user_file=/localconf/eap_user</div><div>ca_cert=/etc/hostapd/ca.crt</div><div>server_cert=/etc/hostapd/ca.crt</div>



<div>private_key=/etc/hostapd/ca.key</div></div><div><br></div><div><div>ssid=mytest</div><div>channel=11</div></div><div><br></div><div>=====================</div><div><br></div><div>Setting &quot;eapol_version&quot; to 1 did not make a difference.<br>

</div>

<div><br></div><div><br></div><div>Any suggestions on any config settings to help my clients connect? Please let me know if you need any additional information.<br><br>Thanks in advance,<br>- Harshal<br> <br></div>