[FS#4098] MESH-SAE-AUTH-BLOCKED

OpenWrt Bugs openwrt-bugs at lists.openwrt.org
Wed Oct 20 10:31:49 PDT 2021


THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

A new Flyspray task has been opened.  Details are below. 

User who did this - Federico Capoano (nemesisdev) 

Attached to Project - OpenWrt/LEDE Project
Summary - MESH-SAE-AUTH-BLOCKED
Task Type - Bug Report
Category - Base system
Status - Unconfirmed
Assigned To - 
Operating System - All
Severity - Low
Priority - Very Low
Reported Version - Trunk
Due in Version - Undecided
Due Date - Undecided
Details - - **Device problem occurs on**: reported by multiple users on [[https://github.com/libremesh/lime-packages/issues/837|different devices]], I am using [[http://www.win-star.com/en_us/product/WS_WN552K1_WN552K2_WN552K3.html|a mediatek based one]]

- I am experiencing this on current master, **revision r2857+4-9d994f35b4**

- **Steps to reproduce**: it randomly occurs some times when the root node of a mesh using plain 802.11s (mesh mode) + SAE/PSK2 authentication is rebooted (or a power outage), in order to replicate it, one would have to keep on rebooting aggressively until it happens. Maybe turning off and on wifi may be able to replicate it as well

**What happens?**

Some times, the devices in a mesh can't connect each other after a power outage or a reboot of the root node (the node which is connected to the gateway and allows the rest of the mesh to connect to the internet).

Log lines:

Oct 20 13:04:40 OpenWrt wpa_supplicant[1335]: mesh0: MESH-SAE-AUTH-FAILURE addr=*0:3f:5d:**:**:1a
Oct 20 13:04:47 OpenWrt wpa_supplicant[1335]: mesh1: MESH-SAE-AUTH-FAILURE addr=*0:3f:5d:**:**:1b
Oct 20 13:04:59 OpenWrt wpa_supplicant[1335]: mesh0: MESH-SAE-AUTH-FAILURE addr=*0:3f:5d:**:**:1a
Oct 20 13:05:01 OpenWrt wpa_supplicant[1335]: mesh1: MESH-SAE-AUTH-FAILURE addr=*0:3f:5d:**:**:1b
Oct 20 13:05:11 OpenWrt wpa_supplicant[1335]: mesh0: MESH-SAE-AUTH-FAILURE addr=*0:3f:5d:**:**:1a
Oct 20 13:05:12 OpenWrt wpa_supplicant[1335]: mesh1: MESH-SAE-AUTH-FAILURE addr=*0:3f:5d:**:**:1b
Oct 20 13:05:24 OpenWrt wpa_supplicant[1335]: mesh0: MESH-SAE-AUTH-FAILURE addr=*0:3f:5d:**:**:1a
Oct 20 13:05:24 OpenWrt wpa_supplicant[1335]: mesh0: MESH-SAE-AUTH-BLOCKED addr=*0:3f:5d:**:**:1a duration=300
Oct 20 13:05:26 OpenWrt wpa_supplicant[1335]: mesh1: MESH-SAE-AUTH-FAILURE addr=*0:3f:5d:**:**:1b
Oct 20 13:05:26 OpenWrt wpa_supplicant[1335]: mesh1: MESH-SAE-AUTH-BLOCKED addr=*0:3f:5d:**:**:1b duration=300

When this happens, the links show up in "iw mesh0 station dump" or "iw mesh1 station dump" but in BLOCKED state.

Rebooting the nodes which have their link blocked at the same time fixes the issue, which seems to rule out an interference issue, because how can a reboot fix an interference issue?

I also tried setting "cell_density '1'" in the configuration of the radios, but the problem keep happening, it doesn't happen often, but when it happens it can wreak havoc.

The mesh configuration is the following:

config wifi-device 'radio0'
	option type 'mac80211'
	option channel '11'
	option hwmode '11g'
	option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option htmode 'HT20'
	option disabled '0'
	option log_level '0'
	option legacy_rates '0'
	option country 'US'
	option cell_density '1'

config wifi-device 'radio1'
	option type 'mac80211'
	option hwmode '11a'
	option path '1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0'
	option htmode 'VHT80'
	option disabled '0'
	option log_level '0'
	option channel '40'
	option country 'US'
	option cell_density '1'

config wifi-iface 'wifi_mesh0'
	option device 'radio0'
	option ifname 'mesh0'
	option mode 'mesh'
	option encryption 'psk2+ccmp'
	option key '***************'
	option mesh_id '***************'
	option network 'lan'
	option mesh_fwding '1'
	option mesh_rssi_threshold '-80'

config wifi-iface 'wifi_mesh1'
	option device 'radio1'
	option ifname 'mesh1'
	option mode 'mesh'
	option encryption 'psk2+ccmp'
	option key '***************'
	option mesh_id '***************'
	option network 'lan'
	option mesh_fwding '1'
	option mesh_rssi_threshold '-80'

config wifi-iface 'wifi_wlan0'
	option device 'radio0'
	option ifname 'wlan0'
	option mode 'ap'
	option encryption 'psk2'
	option key '***************'
	option ssid '***************'
	option network 'lan'
	option ieee80211r '1'
	option ft_psk_generate_local '1'
	option rsn_preauth '1'
	option reassociation_deadline '20000'
	option ft_over_ds '1'

config wifi-iface 'wifi_wlan1'
	option device 'radio1'
	option ifname 'wlan1'
	option mode 'ap'
	option encryption 'psk2'
	option key '***************'
	option ssid '***************'
	option network 'lan'
	option ieee80211r '1'
	option ft_psk_generate_local '1'
	option rsn_preauth '1'
	option reassociation_deadline '20000'
	option ft_over_ds '1'

More information can be found at the following URL:
https://bugs.openwrt.org/index.php?do=details&task_id=4098

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.



More information about the openwrt-bugs mailing list