Hi,

I have a functioning open 802.11s mesh that works great. Now I'm
attempting to set up an encrypted mesh using SAE and AMPE. First
I tried the wpa_supplicant approach and it appeared to authenticate
but I couldn't ping the nodes.

So I decided to simplify the problem and used the authsae based
daemon provided on GitHub.

When I start up the mesh it appears to be authenticated and ready to
go but I can't ping either node form the other. mpath dumps show nothing.
The dump has entries when I run an open mesh.

I seems like I'm missing some piece, step, or...what?

Details follow...

======= Test system:

* Two BeagleBone Blacks running Debian Wheezy w/kernel 3.15.10-bone8
* iw (4.1)
* authsae (Github commit tip 8531ab158910a.)
* Using rt2800usb with Ralink Technology, Corp.
  RT5370 Wireless Adapter (Debian version and firmware)
* wpa_supplicant (2.4) version used on failed attempts.

======= authsae.cfg file:
/* All mesh station settings */
authsae:
{
 sae:
  {
    debug = 172;  /* 0xac */
    password = "meshpassword";
    group = [19, 26, 21, 25, 20];
    blacklist = 5;
    thresh = 5;
    lifetime = 3600;
  };
 meshd:
  {
    meshid = "mesh-sae";
    interface = "mesh0";
    band = "11g";
    channel = 1;
    #htmode = "HT20";
    mcast-rate = 12;
  };
};

======== Station 1
Setup...

sudo iw wlan0 interface add mesh0 type mp
sudo ifconfig mesh0 192.168.42.1
sudo meshd-nl80211 -c authsae.cfg

Output...

debian@wifimesh01:~$ sudo meshd-nl80211 -c authsae.cfg
group 19 is configured, prime is 32 bytes
group 26 is configured, prime is 28 bytes
group 21 is configured, prime is 66 bytes
group 25 is configured, prime is 24 bytes
group 20 is configured, prime is 48 bytes
nlerror, cmd 11, seq 1431184951: Invalid argument
Initiate event
computing PWE on 256 bit curve number 19
it took 1 tries to find PWE: 19
state of 00:e0:4c:81:bd:a0 is now (1) COMMITTED

state of 00:e0:4c:81:bd:a0 is now (2) CONFIRMED

got COMMIT again, try to resync
state of 00:e0:4c:81:bd:a0 is now (2) CONFIRMED

PMK:
2c1fe937 662e76b8 16616662 bce48938 f064bb26 6c8f0fdc b27df2dd 0f54eb8f

Mesh plink: starting establishment with 00:e0:4c:81:bd:a0
Mesh plink: Sending plink action 1
state of 00:e0:4c:81:bd:a0 is now (3) ACCEPTED

TODO: return available peer link slots
Mesh plink (peer, state, llid, plid, event): 00:e0:4c:81:bd:a0 OPN-SNT
31070 40200 1
Mesh plink: Sending plink action 2
state of 00:e0:4c:81:bd:a0 is now (3) ACCEPTED

TODO: return available peer link slots
Mesh plink (peer, state, llid, plid, event): 00:e0:4c:81:bd:a0
OPN-RCVD 31070 40200 4
mesh plink with 00:e0:4c:81:bd:a0 established
nlerror, cmd 11, seq 1431184970: Invalid argument
nlerror, cmd 18, seq 1431184971: Invalid argument
Mesh plink timer for 00:e0:4c:81:bd:a0 fired on state ESTAB
Timeout for peer 00:e0:4c:81:bd:a0 in state 4

======== Station 2
Setup...

sudo iw wlan0 interface add mesh0 type mp
sudo ifconfig mesh0 192.168.42.2
sudo meshd-nl80211 -c authsae.cfg

Output...
debian@wifimesh02:~$ sudo meshd-nl80211 -c authsae.cfg
group 19 is configured, prime is 32 bytes
group 26 is configured, prime is 28 bytes
group 21 is configured, prime is 66 bytes
group 25 is configured, prime is 24 bytes
group 20 is configured, prime is 48 bytes
nlerror, cmd 11, seq 1431184956: Invalid argument
Initiate event
computing PWE on 256 bit curve number 19
it took 1 tries to find PWE: 19
state of 00:e0:4c:81:bc:1a is now (1) COMMITTED

state of 00:e0:4c:81:bc:1a is now (2) CONFIRMED

PMK:
2c1fe937 662e76b8 16616662 bce48938 f064bb26 6c8f0fdc b27df2dd 0f54eb8f

Mesh plink: starting establishment with 00:e0:4c:81:bc:1a
Mesh plink: Sending plink action 1
state of 00:e0:4c:81:bc:1a is now (3) ACCEPTED

resending CONFIRM...
state of 00:e0:4c:81:bc:1a is now (3) ACCEPTED

TODO: return available peer link slots
Mesh plink (peer, state, llid, plid, event): 00:e0:4c:81:bc:1a OPN-SNT
40200 31070 1
Mesh plink: Sending plink action 2
TODO: return available peer link slots
Mesh plink (peer, state, llid, plid, event): 00:e0:4c:81:bc:1a
OPN-RCVD 40200 31070 4
mesh plink with 00:e0:4c:81:bc:1a established
nlerror, cmd 11, seq 1431184974: Invalid argument
nlerror, cmd 18, seq 1431184975: Invalid argument
Mesh plink timer for 00:e0:4c:81:bc:1a fired on state ESTAB
Timeout for peer 00:e0:4c:81:bc:1a in state 4

======== Station Dumps (iw mesh0 station dump):
debian@wifimesh01:~$ iw mesh0 station dump
Station 00:e0:4c:81:bd:a0 (on mesh0)
        inactive time:  113720 ms
        rx bytes:       6689
        rx packets:     118
        tx bytes:       838
        tx packets:     7
        tx retries:     2
        tx failed:      0
        signal:         -23 dBm
        signal avg:     -23 dBm
        Toffset:        -5121717 us
        tx bitrate:     54.0 MBit/s
        rx bitrate:     1.0 MBit/s
        mesh llid:      0
        mesh plid:      0
        mesh plink:     ESTAB
        mesh local PS mode:     ACTIVE
        mesh peer PS mode:      UNKNOWN
        mesh non-peer PS mode:  ACTIVE
        authorized:     yes
        authenticated:  yes
        preamble:       long
        WMM/WME:        yes
        MFP:            yes
        TDLS peer:      no

debian@wifimesh02:~$ iw mesh0 station dump
Station 00:e0:4c:81:bc:1a (on mesh0)
        inactive time:  250 ms
        rx bytes:       4642
        rx packets:     81
        tx bytes:       646
        tx packets:     5
        tx retries:     1
        tx failed:      0
        signal:         -33 dBm
        signal avg:     -33 dBm
        Toffset:        287297429 us
        tx bitrate:     11.0 MBit/s
        rx bitrate:     1.0 MBit/s
        mesh llid:      0
        mesh plid:      0
        mesh plink:     ESTAB
        mesh local PS mode:     ACTIVE
        mesh peer PS mode:      ACTIVE
        mesh non-peer PS mode:  ACTIVE
        authorized:     yes
        authenticated:  yes
        preamble:       long
        WMM/WME:        yes
        MFP:            yes
        TDLS peer:      no

======== Yet pings don't work:

debian@wifimesh02:~$ ping 192.168.42.1
PING 192.168.42.1 (192.168.42.1) 56(84) bytes of data.
From 192.168.42.2 icmp_seq=1 Destination Host Unreachable
From 192.168.42.2 icmp_seq=2 Destination Host Unreachable
From 192.168.42.2 icmp_seq=3 Destination Host Unreachable
From 192.168.42.2 icmp_seq=4 Destination Host Unreachable
From 192.168.42.2 icmp_seq=5 Destination Host Unreachable
From 192.168.42.2 icmp_seq=6 Destination Host Unreachable
^C
debian@wifimesh02:~$ sudo iw mesh0 mpath dump
DEST ADDR         NEXT HOP          IFACE       SN      METRIC  QLEN
 EXPTIME         DTIM    DRET    FLAGS
debian@wifimesh02:~$

=======

Dale
_______________________________________________
Devel mailing list
[email protected]
http://lists.open80211s.org/cgi-bin/mailman/listinfo/devel

Reply via email to