Hi,<br>I have two network blocks in my wpa_supplicant.conf file.My wpa_supplicant.conf file is as shown below:<br><br>ctrl_interface=/var/run/wpa_supplicant<br>fast_reauth=0<br>update_config=1<br>network={<br> ssid="Cisco21444"<br>
proto=RSN<br> key_mgmt=WPA-EAP<br> pairwise=CCMP<br> auth_alg=OPEN<br> eap=TLS<br> identity="arvind"<br> ca_cert="/etc/wireless/cacert.pem"<br> private_key="/etc/wireless/linux_arvind.p12"<br>
private_key_passwd="password"<br>}<br><br>network={<br> ssid="Cisco21444"<br> proto=RSN<br> key_mgmt=WPA-EAP<br> pairwise=CCMP<br> auth_alg=OPEN<br> eap=TLS<br> identity="arvind"<br>
ca_cert="/etc/wireless/abcd.pem"<br> private_key="/etc/wireless/abcd.p12"<br> private_key_passwd="password"<br> disabled=1<br>}<br><br>The first network block has correct values and in the second network block ca_cert and private_key have wrong values(even those files doesn't exist).<br>
I have started wpa_supplicant process and I have made a following sequence of commands through wpa_cli.<br>a)select_network 0<br>b)disconnect<br>c)select_network 1<br>Even after loading the wrong network block wpa_supplicant has connected to the router.I can ping the router as well as my freeradius server.I think the problem is selecting the second network block is not making EAP authentication again.<br>
I have also tried another following sequence of commands through wpa_cli(This is fresh run of wpa_supplicant process)<br>a)select_network 0<br>b)logoff<br>c)select_network 1<br>d)logon<br>Even in this case,logon is not starting EAP authentication and wpa_supplicant has connected to the router.<br>
The wpa_cli log is below for reference(second sequence of commands)<br>What can be the solution for this problem. <br><br><br>> status<br><2>CTRL-EVENT-SCAN-RESULTS <br><2>WPS-AP-AVAILABLE <br><2>Trying to associate with 58:6d:8f:26:1a:f8 (SSID='Cisco21444' freq=2462 MHz)<br>
<2>Associated with 58:6d:8f:26:1a:f8<br><2>CTRL-EVENT-EAP-STARTED EAP authentication started<br><2>CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21 -> NAK<br><2>CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=13<br>
<2>CTRL-EVENT-EAP-METHOD EAP vendor 0 method 13 (TLS) selected<br><2>CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=IN/ST=UttarPradesh/O=SISC/OU=Connectivity/CN=THATHA RAGA NARESH KUMAR/emailAddress=<a href="mailto:raganaresh.thatha@gmail.com">raganaresh.thatha@gmail.com</a>'<br>
<2>CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=IN/ST=UttarPradesh/O=SISC/OU=Connectivity/CN=server/emailAddress=<a href="mailto:server@gmail.com">server@gmail.com</a>'<br><2>CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully<br>
<2>WPA: Key negotiation completed with 58:6d:8f:26:1a:f8 [PTK=CCMP GTK=CCMP]<br><2>CTRL-EVENT-CONNECTED - Connection to 58:6d:8f:26:1a:f8 completed (auth) [id=0 id_str=]<br>bssid=58:6d:8f:26:1a:f8<br>ssid=Cisco21444<br>
id=0<br>mode=station<br>pairwise_cipher=CCMP<br>group_cipher=CCMP<br>key_mgmt=WPA2/IEEE 802.1X/EAP<br>wpa_state=COMPLETED<br>Supplicant PAE state=AUTHENTICATED<br>suppPortStatus=Authorized<br>EAP state=SUCCESS<br>selectedMethod=13 (EAP-TLS)<br>
EAP TLS cipher=DHE-RSA-AES256-SHA<br>> logoff<br>OK<br>> select_network 1<br>OK<br>> logon<br><2>CTRL-EVENT-DISCONNECTED bssid=00:00:00:00:00:00 reason=0<br><2>CTRL-EVENT-DISCONNECTED bssid=00:00:00:00:00:00 reason=0<br>
<2>CTRL-EVENT-BSS-ADDED 11 58:6d:8f:26:1a:f9<br><2>CTRL-EVENT-SCAN-RESULTS <br><2>WPS-AP-AVAILABLE <br><2>Trying to associate with 58:6d:8f:26:1a:f8 (SSID='Cisco21444' freq=2462 MHz)<br><2>Associated with 58:6d:8f:26:1a:f8<br>
<2>WPA: Key negotiation completed with 58:6d:8f:26:1a:f8 [PTK=CCMP GTK=CCMP]<br><2>CTRL-EVENT-CONNECTED - Connection to 58:6d:8f:26:1a:f8 completed (reauth) [id=1 id_str=]<br>OK<br>> status<br>bssid=58:6d:8f:26:1a:f8<br>
ssid=Cisco21444<br>id=1<br>mode=station<br>pairwise_cipher=CCMP<br>group_cipher=CCMP<br>key_mgmt=WPA2/IEEE 802.1X/EAP<br>wpa_state=COMPLETED<br>Supplicant PAE state=AUTHENTICATED<br>suppPortStatus=Authorized<br>EAP state=SUCCESS<br>
<br><br><br>Thanks & Regards,<br>Naresh.<br><br>