[Prism54-devel] HELP : Broadcast data fails in WPA

[Rafiq Shaikh]

Hi All,

A similar problem I am facing with WPA on AP.
The pairwise and group keys are installed correctely. The wlan client is connected properly to the AP.
The ping from AP to client or vice versa does not work.

1)If I do ping from AP to client:
I observe that the ARP request from AP to client gets ARP response back successfully.
However the ping request packet (received at client from the AP) gets a MIC error at wlan client. 
If another ping request is sent to client then the client sends EAPOL-Key message with the MIC 
failure indication to AP(two MIC failures within 60 seconds). This results in disconnection of the client from AP.

2)If I do ping from client to AP:
I observe that the ARP request from client gets ARP response back successfully.
However the ping reply packet (received at client from the AP) gets a MIC error at wlan client. 
If another ping reply is received at client then the client sends EAPOL-Key message with the MIC 
failure indication to AP (two MIC failures within 60 seconds). This results in disconnection of the client from AP.

In summary the very first packet received at the client from AP is ok but the second and the subsequent packets
gets MIC error at the client.

What could be wrong with the AP that's resulting in MIC errors at the client? 
Could it be because of the Sequence counters not being set properly? If so then how can I verify and correct it? 
What are the possible reasons for getting the MIC failure at the client side?

Any help is appreciated.

Regards,
-Rafiq.






  ----- Original Message ----- 
  From: navaneeth 
  To: prism54-devel at prism54.org 
  Sent: Wednesday, July 07, 2004 1:03 AM
  Subject: [Prism54-devel] HELP : Broadcast data fails in WPA


  Hi All,

         I am adding WPA support to AP for my company. 

  I use the DOT11_OID_STAKEY for setting unicast and broadcast keys to the device.

  After I set the key, I read from the device and found the values correct.

  I use key ID 0 for unicast and Key ID 1 for broadcast.

  I use DOT11_OID_STASC for setting and getting the sequence counters.

  For broadcast the onlydiffence is that I set the keys with MAC ADDRESS FF-FF-FF-FF-FF-FF.

  I also set broacast key ID (1) as DEFAULT KEY.

  The unicast key seems to be working fine. I can to and from the AP when I connect using any wireless Client.

  However getting IP for client fails (DHCP).

  When I checked the reason, I found that the broadcast key is not being used at all.

  When I send broadcast data also, the UNICAST Sequence Counter is increasing. The broadcast sequence counter is not increasing at all.

  Can anyone please point me as to why the device is not using the broadcast key when sending broadcast packet.

  However it is using the DEFAULT key Index for broadcast which is 1.

  Any pointers on this will be greatly appreciated.

  Regards
  Navaneeth


------------------------------------------------------------------------------


  _______________________________________________
  Prism54-devel mailing list
  Prism54-devel at prism54.org
  http://prism54.org/mailman/listinfo/prism54-devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://prism54.org/pipermail/prism54-devel/attachments/20040715/038de5da/attachment.htm