Cannot connect with WPA2-EAP

Installing and Using OpenWrt
1

I am trying to set up a WPA2 Enterprise AP in my lab, in order to develop and test some wifi firmware. I dug a Raspberry Pi 4 out of the junk pile, and installed the latest release of OpenWRT on it (21.02.2). I am able to connect via WPA2-PSK to both my Windows 11 PC and Android.

I went through the HOWTO https://openwrt.org/docs/guide-user/network/wifi/freeradius, with the exception of creating certs. My understanding is that these are not really required when using PEAP.

Looking at the logs from Radius and hostapd, I see that we are authenticating via RADIUS, and then hostapd indicates success, immediately followed by a disassociated message. Nothing indicates what caused the disassociation.

Logread:

Mon Mar 28 14:27:38 2022 daemon.info dnsmasq[519]: read /etc/hosts - 5 addresses
Mon Mar 28 14:27:38 2022 daemon.info dnsmasq[519]: read /tmp/hosts/odhcpd - 0 addresses
Mon Mar 28 14:27:38 2022 daemon.info dnsmasq[519]: read /tmp/hosts/dhcp.cfg01411c - 0 addresses
Mon Mar 28 14:27:45 2022 daemon.info hostapd: wlan0: STA 36:79:e2:af:66:c4 IEEE 802.11: associated
Mon Mar 28 14:27:45 2022 daemon.notice hostapd: wlan0: CTRL-EVENT-EAP-STARTED 36:79:e2:af:66:c4
Mon Mar 28 14:27:45 2022 daemon.notice hostapd: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=1
Mon Mar 28 14:27:46 2022 daemon.notice hostapd: wlan0: CTRL-EVENT-EAP-SUCCESS2 36:79:e2:af:66:c4
Mon Mar 28 14:27:46 2022 daemon.info hostapd: wlan0: STA 36:79:e2:af:66:c4 IEEE 802.11: disassociated

And my current configuration (including the old WPA2-PSK which is disabled)
/etc/config/wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option path 'platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1'
        option channel 'auto'
        option cell_density '0'
        option band '2g'

config wifi-iface 'wifinet0'
        option device 'radio0'
        option mode 'ap'
        option ssid 'wpa2e'
        option encryption 'wpa2'
        option auth_server '127.0.0.1'
        option auth_secret '****'
        option network 'lan'

config wifi-iface 'wifinet1'
        option device 'radio0'
        option mode 'ap'
        option ssid 'wpa2'
        option encryption 'psk2'
        option key '****'
        option network 'lan'
        option disabled '1'

Any ideas what might be causing this or someplace to look for more info? Thanks.

2

Keep attention that wpad-mini package (included in release image by default) don't support wpa2 Enterprise. Replace it with full wpad.

3

Right, did that already (per the FreeRadus install instructions).