Re: wpa-psk help with output of ifconfig ?

Bruno Damour wrote:
> Hello,
> 
> I'm trying to debug some problems using WPA-PSK with ral driver.
> Connection is often hanging after a while, network down.
> netstat -r takes a very long time, ping doesnt respond, etc...
> it works if I reset everything with netif restart.
> 
> I saw a difference in the output of ifconfig that seems to be connected :
> working state :
> 
> ral0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>        inet6 fe80::216:b6ff:fe5d:93f9%ral0 prefixlen 64 scopeid 0x2
>        inet 192.168.0.100 netmask 0xffffff00 broadcast 192.168.0.255
>        ether 00:16:b6:5d:93:f9
>        media: IEEE 802.11 Wireless Ethernet autoselect (OFDM/54Mbps)
>        status: associated
>        ssid ruomad channel 9 bssid 00:11:95:f0:8f:21
>        authmode WPA privacy ON deftxkey UNDEF TKIP 2:128-bit txpowmax 100
>        bmiss 7 protmode CTS roaming MANUAL bintval 100
> 
> not working :
> ral0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>        inet6 fe80::216:b6ff:fe5d:93f9%ral0 prefixlen 64 scopeid 0x2
>        inet 192.168.0.100 netmask 0xffffff00 broadcast 192.168.0.255
>        ether 00:16:b6:5d:93:f9
>        media: IEEE 802.11 Wireless Ethernet autoselect (OFDM/54Mbps)
>        status: associated
>        ssid ruomad channel 9 bssid 00:11:95:f0:8f:21
>        authmode WPA privacy ON deftxkey UNDEF TKIP 2:128-bit TKIP 3:128-bit
>        txpowmax 100 bmiss 7 protmode CTS roaming MANUAL bintval 100
> 
> The issue seems to be the TKIP 2:128-bit TKIP 3:128-bit (two items) when
> prevously there was only one...
> 
> Does anyone know what this output means ?

The key change is just the WPA group key being re-issued by the AP.
This happens periodically and/or when a new station joins the bss.

If your network connection stalls then you need to identify what's going
on.  It's likely you lost connectivity to the ap.  You can typically see
this happen by monitoring debug output from wpa_supplicant (e.g. by
supplying the -d option on the command line).  Assuming you've just lost
your association and are re-scanning you need to figure out why.  There
are tools and techniques for doing this (e.g. wlandebug can be used to
enable debug msgs from the net80211 layer). Unfortunately the ral driver
has no maintainer so resolving this may be difficult.

	Sam