Updated 2 devices from 18 to 21 but WPA2-Enterprise is not available

HI, I updated my 2 devices (devolo 1200e as well devolo1200i) from 19 to 21 by sysupdate.
No Problems. Box Bootet without probs and I am able to login to luci.
But when I went to Network, 2 popups with need to migrate configuration.
Wireless overview all SSIDs are disabled and the 2 radios
Qualcomm Atheros QCA9880 802.11nac
Qualcomm Atheros QCA9550 802.11bgn
are disabled. ??
So I clicked on the 2 devices and everything is enabled. Ok great.
I deleted all SSID's and tried to create new.
OK, new SSID can be created .. but only this are available.
WPA2-PSK
WPA3-SAE
WPA2-PSK / WPA3-SAE (mixed)
WPA-PSK/WPA2-PSK (mixed)
WPA-PSK
OWE
No Encryption

But where is the WPA2-Enterprise (802.1x) gone ?

Perhaps needs to be added manual ?

So I went to SSH Console:


root@devolo_1200e_dachboden:~# opkg install wpad
Installing wpad (2020-06-08-5a8b3662-35) to root...
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/mips_24kc/base/wpad_2020-06-08-5a8b3662-35_mips_24kc.ipk
Collected errors:
 * check_data_file_clashes: Package wpad wants to install file /usr/sbin/hostapd
        But that file is already provided by package  * wpad-basic-wolfssl
 * check_data_file_clashes: Package wpad wants to install file /usr/sbin/wpa_supplicant
        But that file is already provided by package  * wpad-basic-wolfssl
 * check_data_file_clashes: Package wpad wants to install file /usr/sbin/wpad
        But that file is already provided by package  * wpad-basic-wolfssl
 * opkg_install_cmd: Cannot install package wpad.
root@devolo_1200e_dachboden:~# ^C
root@devolo_1200e_dachboden:~#

Arg, how to get the possibility to add WPA2-Enterprise to the dropdown box in Luci ?
In Release 19 this was available.

Perhaps someone can tell whats going on ?

First remove the conflicting basic package, and then install the full wpad...

opkg update
opkg remove wpad-basic-wolfssl
opkg install wpad-wolfssl

Note that currently you need to specify as variant the SSL lib you are using. By default wolfssl, (but e.g. I use openssl)

1 Like

Hi , thanks for your help.
But I got this error when I execute your commands


root@devolo_1200e_dachboden:~# opkg remove wpad-basic-wolfssl
Removing package wpad-basic-wolfssl from root...
root@devolo_1200e_dachboden:~# opkg install wpad-wolfssl
Installing wpad-wolfssl (2020-06-08-5a8b3662-35) to root...
Collected errors:
 * check_conflicts_for: The following packages conflict with wpad-wolfssl:
 * check_conflicts_for:         wpad *
 * opkg_install_cmd: Cannot install package wpad-wolfssl.
root@devolo_1200e_dachboden:~#


Then try to remove also the plain "wpad", or just use the opkg options to override/force it ( --force-overwrite). All those variants install the hostapd/wpad binaries named identically.

I am not aware of the right syntax .

root@devolo_1200e_dachboden:~# opkg remove wpad
No packages removed.
root@devolo_1200e_dachboden:~# opkg remove wpad*
No packages removed.
root@devolo_1200e_dachboden:~#

opkg install --force-overwrite wpad-wolfssl

See https://openwrt.org/docs/guide-user/additional-software/opkg#options for more alternatives

Sorry ..
Same problem with force ..

root@devolo_1200e_dachboden:~# opkg install --force-overwrite wpad-wolfssl
Installing wpad-wolfssl (2020-06-08-5a8b3662-35) to root...
Collected errors:
 * check_conflicts_for: The following packages conflict with wpad-wolfssl:
 * check_conflicts_for:         wpad *
 * opkg_install_cmd: Cannot install package wpad-wolfssl.
root@devolo_1200e_dachboden:~#

Well, what do you have as installed right now?

opkg list-installed | grep wpad

Might be that opkg installed database is somehow confused, as there are so many wpad variants.

In principle it goes this smoothly:
(from master, but should be similar)

root@router1:~# opkg remove wpad-openssl
Removing package wpad-openssl from root...
root@router1:~# opkg install wpad-basic-wolfssl
Installing wpad-basic-wolfssl (2021-05-22-b102f19b-35) to root...
Downloading https://downloads.openwrt.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/base/wpad-basic-wolfssl_2021-05-22-b102f19b-35_arm_cortex-a15_neon-vfpv4.ipk
Installing libwolfssl4.7.0.ba20a816 (4.7.0-stable-2) to root...
Downloading https://downloads.openwrt.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/base/libwolfssl4.7.0.ba20a816_4.7.0-stable-2_arm_cortex-a15_neon-vfpv4.ipk
Configuring libwolfssl4.7.0.ba20a816.
Configuring wpad-basic-wolfssl.
root@router1:~# opkg remove wpad-basic-wolfssl
Removing package wpad-basic-wolfssl from root...
root@router1:~# opkg install wpad-wolfssl
Installing wpad-wolfssl (2021-05-22-b102f19b-35) to root...
Downloading https://downloads.openwrt.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/base/wpad-wolfssl_2021-05-22-b102f19b-35_arm_cortex-a15_neon-vfpv4.ipk
Configuring wpad-wolfssl.
root@router1:~# opkg remove wpad-wolfssl
Removing package wpad-wolfssl from root...
root@router1:~# opkg install wpad-openssl
Installing wpad-openssl (2021-05-22-b102f19b-35) to root...
Downloading https://downloads.openwrt.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/base/wpad-openssl_2021-05-22-b102f19b-35_arm_cortex-a15_neon-vfpv4.ipk
Configuring wpad-openssl.

Sorry again .. it shows no packages in list.

root@devolo_1200e_dachboden:~# opkg list-installed | grep wpad
root@devolo_1200e_dachboden:~# opkg remove wpad-openssl
No packages removed.
root@devolo_1200e_dachboden:~# opkg install wpad-basic-wolfssl
Installing wpad-basic-wolfssl (2020-06-08-5a8b3662-35) to root...
Collected errors:
 * check_conflicts_for: The following packages conflict with wpad-basic-wolfssl:
 * check_conflicts_for:         wpad *
 * opkg_install_cmd: Cannot install package wpad-basic-wolfssl.
root@devolo_1200e_dachboden:~#

This are the packages which are installed.

root@devolo_1200e_dachboden:~# opkg list-installed
ath10k-board-qca988x - 20201118-3
ath10k-firmware-qca988x-ct - 2020-11-08-1
base-files - 1432-r16279-5cc0535800
busybox - 1.33.1-6
ca-bundle - 20210119-1
cgi-io - 2020-10-27-ab4c3471-19
dnsmasq - 2.85-8
dropbear - 2020.81-2
firewall - 2021-03-23-61db17ed-1
fstools - 2021-01-04-c53b1882-1
fwtool - 2019-11-12-8f7fe925-1
getrandom - 2020-10-25-9ef88681-2
hostapd-common - 2020-06-08-5a8b3662-35
ip6tables - 1.8.7-1
iptables - 1.8.7-1
iw - 5.9-8fab0c9e-1
iwinfo - 2021-04-30-c45f0b58-2.1
jshn - 2021-05-16-b14c4688-2
jsonfilter - 2018-02-04-c7e938d6-1
kernel - 5.4.143-1-79c5dc6db69102eb2943a96b9bec8b63
kmod-ath - 5.4.143+5.10.42-1-1
kmod-ath10k-ct - 5.4.143+2021-06-03-b44cd7b2-2
kmod-ath9k - 5.4.143+5.10.42-1-1
kmod-ath9k-common - 5.4.143+5.10.42-1-1
kmod-cfg80211 - 5.4.143+5.10.42-1-1
kmod-gpio-button-hotplug - 5.4.143-3
kmod-hwmon-core - 5.4.143-1
kmod-ip6tables - 5.4.143-1
kmod-ipt-conntrack - 5.4.143-1
kmod-ipt-core - 5.4.143-1
kmod-ipt-nat - 5.4.143-1
kmod-ipt-offload - 5.4.143-1
kmod-lib-crc-ccitt - 5.4.143-1
kmod-mac80211 - 5.4.143+5.10.42-1-1
kmod-nf-conntrack - 5.4.143-1
kmod-nf-conntrack6 - 5.4.143-1
kmod-nf-flow - 5.4.143-1
kmod-nf-ipt - 5.4.143-1
kmod-nf-ipt6 - 5.4.143-1
kmod-nf-nat - 5.4.143-1
kmod-nf-reject - 5.4.143-1
kmod-nf-reject6 - 5.4.143-1
kmod-ppp - 5.4.143-1
kmod-pppoe - 5.4.143-1
kmod-pppox - 5.4.143-1
kmod-slhc - 5.4.143-1
libblobmsg-json20210516 - 2021-05-16-b14c4688-2
libc - 1.1.24-3
libgcc1 - 8.4.0-3
libip4tc2 - 1.8.7-1
libip6tc2 - 1.8.7-1
libiwinfo-data - 2021-04-30-c45f0b58-2.1
libiwinfo-lua - 2021-04-30-c45f0b58-2.1
libiwinfo20210430 - 2021-04-30-c45f0b58-2.1
libjson-c5 - 0.15-2
libjson-script20210516 - 2021-05-16-b14c4688-2
liblua5.1.5 - 5.1.5-9
liblucihttp-lua - 2021-06-11-3dc89af4-1
liblucihttp0 - 2021-06-11-3dc89af4-1
libnl-tiny1 - 2020-08-05-c291088f-2
libpthread - 1.1.24-3
libubox20210516 - 2021-05-16-b14c4688-2
libubus-lua - 2021-06-30-4fc532c8-2
libubus20210630 - 2021-06-30-4fc532c8-2
libuci20130104 - 2020-10-06-52bbc99f-5
libuclient20201210 - 2021-05-14-6a6011df-1
libustream-wolfssl20201210 - 2020-12-10-68d09243-1
libwolfssl4.7.0.66253b90 - 4.7.0-stable-2
libxtables12 - 1.8.7-1
logd - 2020-10-25-9ef88681-2
lua - 5.1.5-9
luci - git-20.074.84698-ead5e81
luci-app-firewall - git-21.244.20922-3b3c2e5
luci-app-opkg - git-21.079.58598-6639e31
luci-base - git-21.231.26241-422c175
luci-lib-base - git-20.232.39649-1f6dc29
luci-lib-ip - git-20.250.76529-62505bd
luci-lib-jsonc - git-19.317.29469-8da8f38
luci-lib-nixio - git-20.234.06894-c4a4e43
luci-mod-admin-full - git-19.253.48496-3f93650
luci-mod-network - git-21.243.25235-d9a228e
luci-mod-status - git-21.188.55036-eafe171
luci-mod-system - git-21.230.63964-c3580ee
luci-proto-ipv6 - git-21.148.49484-14511e5
luci-proto-ppp - git-21.163.64918-6c6559a
luci-ssl - git-20.244.36115-e10f954
luci-theme-bootstrap - git-21.164.71418-bd36169
mtd - 26
netifd - 2021-07-26-440eb064-1
odhcp6c - 2021-01-09-53f07e90-16
odhcpd-ipv6only - 2021-07-18-bc9d317f-3
openwrt-keyring - 2021-02-20-49283916-2
opkg - 2021-06-13-1bf042dd-1
ppp - 2.4.8.git-2020-10-03-3
ppp-mod-pppoe - 2.4.8.git-2020-10-03-3
procd - 2021-02-23-37eed131-1
px5g-wolfssl - 3
rpcd - 2021-03-11-ccb75178-1
rpcd-mod-file - 2021-03-11-ccb75178-1
rpcd-mod-iwinfo - 2021-03-11-ccb75178-1
rpcd-mod-luci - 20210614
rpcd-mod-rrdns - 20170710
swconfig - 12
uboot-envtools - 2021.01-10
ubox - 2020-10-25-9ef88681-2
ubus - 2021-06-30-4fc532c8-2
ubusd - 2021-06-30-4fc532c8-2
uci - 2020-10-06-52bbc99f-5
uclient-fetch - 2021-05-14-6a6011df-1
uhttpd - 2021-03-21-15346de8-1
uhttpd-mod-ubus - 2021-03-21-15346de8-1
urandom-seed - 3
urngd - 2020-01-21-c7f7b6b6-1
usign - 2020-05-23-f1f65026-1
wireless-regdb - 2021.04.21-1
root@devolo_1200e_dachboden:~#


Yes, I figured out how to get rid of the wpad message ...simply installed it again and removed it .


root@devolo_1200e_dachboden:~# opkg install wpad
Installing wpad (2020-06-08-5a8b3662-35) to root...
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/mips_24kc/base/wpad_2020-06-08-5a8b3662-35_mips_24kc.ipk
Configuring wpad.

root@devolo_1200e_dachboden:~# opkg remove wpad
Removing package wpad from root...

root@devolo_1200e_dachboden:~# opkg install wpad-wolfssl
Installing wpad-wolfssl (2020-06-08-5a8b3662-35) to root...
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/mips_24kc/base/wpad-wolfssl_2020-06-08-5a8b3662-35_mips_24kc.ipk
Configuring wpad-wolfssl.
root@devolo_1200e_dachboden:~#


Now the WPA2-EAP is available in the drodownbox in wiereless security in luci.

Great.

But when I configure the wpa2-EAP to connect to my radius with the right password, and press sava and apply ... the device radio 0 went to inaktive.

The other radio1 device stays online with only using wpa2-psk ..

Is there something wrong with this wpa-openssl or wpa-wolfssl implementation ?
As well the sysupgrade is not working well, cause I never had to install/install the wpa package twice.

I do not have any WPA2-EAP configured anymore, only 1 x WPA-PSK which is still disabled.

Funny, in System Log I am still able to locate this .. so there is something still about radius etc in the configfiles, but luci cannot change it or is aware of it.

How to solve this ?

Wed Sep  8 10:17:33 2021 daemon.notice netifd: Network device 'wlan1' link is down
Wed Sep  8 10:17:34 2021 daemon.notice hostapd: Configuration file: /var/run/hostapd-phy1.conf (phy wlan1) --> new PHY
Wed Sep  8 10:17:34 2021 daemon.err hostapd: Line 64: unknown configuration item 'acct_server_addr'
Wed Sep  8 10:17:34 2021 daemon.err hostapd: Line 65: unknown configuration item 'acct_server_port'
Wed Sep  8 10:17:34 2021 daemon.err hostapd: Line 66: unknown configuration item 'acct_server_shared_secret'
Wed Sep  8 10:17:34 2021 daemon.err hostapd: Line 67: unknown configuration item 'auth_server_addr'
Wed Sep  8 10:17:34 2021 daemon.err hostapd: Line 68: unknown configuration item 'auth_server_port'
Wed Sep  8 10:17:34 2021 daemon.err hostapd: Line 69: unknown configuration item 'auth_server_shared_secret'
Wed Sep  8 10:17:34 2021 daemon.err hostapd: Invalid IEEE 802.1X configuration (no EAP authenticator configured).
Wed Sep  8 10:17:34 2021 daemon.err hostapd: 7 errors found in configuration file '/var/run/hostapd-phy1.conf'
Wed Sep  8 10:17:34 2021 daemon.err hostapd: Failed to set up interface with /var/run/hostapd-phy1.conf
Wed Sep  8 10:17:34 2021 daemon.notice netifd: radio1 (2781): Command failed: Invalid argument
Wed Sep  8 10:17:34 2021 daemon.notice netifd: radio1 (2781): Device setup failed: HOSTAPD_START_FAILED

time will tell... no enough info to make hypothesis from what you have provided... fwiw... you are likely referring to opkg and not sysupgrade... unless you used attendedsysupgrade/auc/asu~chef which isn't really sysupgrade either...

again... not enough info provided... have you considered sharing your (sanitized) wireless settings?

I made this steps in upgrading my boxes .

/tmp/
wget http://downloads.openwrt.org/releases/21.02.0/targets/ath79/generic/openwrt-21.02.0-ath79-generic-devolo_dvl1200e-squashfs-sysupgrade.bin

sysupgrade -v /tmp/openwrt-21.02.0-ath79-generic-devolo_dvl1200e-squashfs-sysupgrade.bin

Reboot

Then open luci and went to network --wireless --- big popup with message .. all your devices need to be migrated ?

Thats all .. nothing special.

1 Like

great... so you kept settings...

  • what version of wpad did you have before?

How to provide my wifi settings ? screenshot from luci or output from config ?

uci show wireless

remove keys... public ips... pppoe usernames... wifi ssid etc. etc.

I think this was the installed wpa release before .. and after upgrade to 21.

root@devolo_1200e_dachboden:~# opkg install wpad
Installing wpad (2020-06-08-5a8b3662-35) to root...
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/mips_24kc/base/wpad_2020-06-08-5a8b3662-35_mips_24kc.ipk
Configuring wpad.
  • did you install 'opkg extras' (special save and restore packages script) by any chance...?
  • did you add any fancy directories to your sysupgrade.conf?