Hi,
Quick summary:
two SSIDs configured to the same network. One SSID uses WPA2-PSK, other SSID uses WPA3-SAE.
IPAD can see network printer when connected via WPA2, but not when connected via WPA3.
Devices roam when connected to WPA2 but not when connected to WPA3
wpad-basic-wolfssl is replaced with wpad-openssl.
Questions
Am I missing something obvious? Do others have similar problems? How can I further debug this?
More details
I've a rather solid home network with a Belkin RT3200 as router and three Archer C7 (2 x v5, 1 x v2) as APs running a self compiled snapshot from January 22. DAWN is installed, active, and working nicely together with the scripts found at the end of
It all works fine for mobile devices connected to the WPA2 SSID. In particular roaming between APs works like a charm for all devices.
Recently I decided to give WPA3 a shot and I decided not to use mixed mode but the establish a dedicated SSID.
Now mobile devices connected to the WPA3 SSID observe a few subtil problems (they all connect just fine with WPA3).
- an IPAD does not "see" the network printer (but can access local SMB shares and has access to the internet).
- two OnePlus 6 devices and a Lenovo Yoga X1 would hardly roam (not within minutes of really bad signal)
Just to make it clear: I do not expect roaming between the different SSIDs.
802.11r is disabled in both SSIDs, because the OnePlus ends up in a state where the wifi symbol has an exclamation mark indicating problems after some roaming between APs. That was quite annoying until I found the root cause for that to be the combination of OnePlus and 802.11r (sorry, link target is in German):
With 802.11r disabled this issue should also not be the problem:
This is one of my wireless configs:
config wifi-device 'radio5'
option type 'mac80211'
option hwmode '11a'
option path 'pci0000:00/0000:00:00.0'
option country 'DE'
option txpower '23'
option htmode 'VHT80'
option channel '36'
option cell_density '0'
config wifi-iface 'wlan0'
option device 'radio5'
option network 'lan'
option mode 'ap'
option key 'XXXXX'
option ieee80211v '1'
option bss_transition '1'
option disassoc_low_ack '0'
option max_inactivity '65000'
option ieee80211k '1'
option ft_psk_generate_local '1'
option ssid 'whatever'
option ft_over_ds '1'
option encryption 'psk2+ccmp'
config wifi-device 'radio24'
option type 'mac80211'
option hwmode '11g'
option path 'platform/ahb/18100000.wmac'
option htmode 'HT20'
option channel '6'
option country 'DE'
option txpower '20'
option cell_density '0'
option legacy_rates '1'
config wifi-iface 'wlan1'
option device 'radio24'
option network 'lan'
option mode 'ap'
option key 'XXXXX'
option ieee80211v '1'
option ieee80211k '1'
option bss_transition '1'
option disassoc_low_ack '0'
option max_inactivity '65000'
option ssid 'whatever'
option encryption 'psk2+ccmp'
config wifi-iface 'wifinet2'
option device 'radio5'
option mode 'ap'
option ssid 'whatever-wpa3'
option encryption 'sae'
option key 'XXXXX'
option network 'lan'
option ieee80211v '1'
option ieee80211k '1'
option bss_transition '1'
option disassoc_low_ack '0'
option max_inactivity '65000'
option auth_cache '1'