WPA3 support (maybe?) on Linksys WRT series router

I do realized in the OpenWRT form talking about Linksys WRT series router not able to support WPA3. Hence I’ve tested the OpenWRT February 2021 snapshot on my Linksys WRT1200AC (hardware revision 2), and “strangely” it works.

Edit: feel free to talk about your thoughts on this thread regarding WPA3 support on Linksys WRT series router.

Is IEEE 802.11W enabled (mandatoriy)? This is a mandatory requirement for WPA3 and afaik the biggest issue with mwlwifi.

1 Like

I set 802.11w to optional (did not ever set as required), but I did not use the WRT1200ac in production environment, so it's hard for me to say regarding link stability.

802.11w should be set as required with WPA3 as that's one of the main features. It encrypts management communication and prevents deauth and evil twin attacks.

If your client devices can use WAP3 they should also support 802.11w.

Please try enabling it and report if it's all OK as that means WPA3 is actually supported by the router

2 Likes

I’ve just set 802.11w in WiFi (of my WRT1200ac) as required, the iPad would still connects to the router, but I did not put WRT1200ac to production use, so I’m not sure regarding its long-term stability.

A little > year back I had WPA3 working in mixed mode on a mamba, the same config taken to a rango killed the device. I attributed it to the FW of each device, as the dirver is the same. Have not tried since, but does say something as to where an indication of support should go, as mwlwifi is not just good to go on all wrtpac devices I don't think.

@127.0.0.1 Is this mixed or strict WPA3 only? Please share your wireless config so we can be done with it and solve this riddle.

Strict WPA3 only.

Wireless config file as follows:


root@OpenWrt:~# cat /etc/config/wireless 

config wifi-device 'radio0'
	option type 'mac80211'
	option channel '36'
	option hwmode '11a'
	option path 'soc/soc:pcie/pci0000:00/0000:00:01.0/0000:01:00.0'
	option htmode 'VHT80'
	option country 'US'
	option txpower '23'
	option cell_density '0'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option macaddr '60:38:e0:0a:0e:cf'
	option ssid 'Temp'
	option encryption 'sae'
	option key '<redacted>'
	option ieee80211w '2'

config wifi-device 'radio1'
	option type 'mac80211'
	option channel '11'
	option hwmode '11g'
	option path 'soc/soc:pcie/pci0000:00/0000:00:02.0/0000:02:00.0'
	option htmode 'HT20'
	option country 'US'
	option txpower '23'
	option cell_density '0'
	option disabled '1'

config wifi-iface 'wifinet1'
	option device 'radio1'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'
	option disabled '1'

However, I do noticed the link speed fluctuation when running iperf3 (bi-directional mode) from my computer and WRT1200ac close to each other (1 feet away).

There’s no neighboring wifi using channel 36-64 (to my best knowledge), and only the testing computer is connected to WRT1200ac.


$ iperf3 -c 192.168.1.1 -p 5201 -t 1000 --bidir


Connecting to host 192.168.1.1, port 5201
[  5] local 192.168.1.209 port 63258 connected to 192.168.1.1 port 5201
[  7] local 192.168.1.209 port 63259 connected to 192.168.1.1 port 5201
[ ID][Role] Interval           Transfer     Bitrate
[  5][TX-C]   0.00-1.00   sec  60.8 MBytes   510 Mbits/sec                  
[  7][RX-C]   0.00-1.00   sec  5.16 MBytes  43.3 Mbits/sec                  
[  5][TX-C]   1.00-2.00   sec  50.5 MBytes   423 Mbits/sec                  
[  7][RX-C]   1.00-2.00   sec  13.6 MBytes   114 Mbits/sec                  
[  5][TX-C]   2.00-3.00   sec  54.6 MBytes   458 Mbits/sec                  
[  7][RX-C]   2.00-3.00   sec  10.2 MBytes  85.5 Mbits/sec                  
[  5][TX-C]   3.00-4.00   sec  56.5 MBytes   474 Mbits/sec                  
[  7][RX-C]   3.00-4.00   sec  5.52 MBytes  46.3 Mbits/sec                  
[  5][TX-C]   4.00-5.00   sec  59.6 MBytes   499 Mbits/sec                  
[  7][RX-C]   4.00-5.00   sec  3.64 MBytes  30.5 Mbits/sec                  
[  5][TX-C]   5.00-6.00   sec  60.7 MBytes   509 Mbits/sec                  
[  7][RX-C]   5.00-6.00   sec  2.75 MBytes  23.0 Mbits/sec                  
[  5][TX-C]   6.00-7.00   sec  61.3 MBytes   515 Mbits/sec                  
[  7][RX-C]   6.00-7.00   sec  3.94 MBytes  33.1 Mbits/sec                  
[  5][TX-C]   7.00-8.00   sec  60.3 MBytes   506 Mbits/sec                  
[  7][RX-C]   7.00-8.00   sec  4.86 MBytes  40.7 Mbits/sec                  
[  5][TX-C]   8.00-9.00   sec  58.8 MBytes   493 Mbits/sec                  
[  7][RX-C]   8.00-9.00   sec  3.95 MBytes  33.1 Mbits/sec                  
[  5][TX-C]   9.00-10.00  sec  59.6 MBytes   500 Mbits/sec                  
[  7][RX-C]   9.00-10.00  sec  3.30 MBytes  27.7 Mbits/sec                  
[  5][TX-C]  10.00-11.00  sec  60.6 MBytes   508 Mbits/sec                  
[  7][RX-C]  10.00-11.00  sec  4.15 MBytes  34.8 Mbits/sec                  
[  5][TX-C]  11.00-12.00  sec  59.5 MBytes   498 Mbits/sec                  
[  7][RX-C]  11.00-12.00  sec  4.98 MBytes  41.7 Mbits/sec                  
[  5][TX-C]  12.00-13.00  sec  60.2 MBytes   505 Mbits/sec                  
[  7][RX-C]  12.00-13.00  sec  4.67 MBytes  39.2 Mbits/sec                  
[  5][TX-C]  13.00-14.00  sec  56.4 MBytes   473 Mbits/sec                  
[  7][RX-C]  13.00-14.00  sec  6.04 MBytes  50.6 Mbits/sec                  
[  5][TX-C]  14.00-15.00  sec  59.6 MBytes   500 Mbits/sec                  
[  7][RX-C]  14.00-15.00  sec  6.40 MBytes  53.7 Mbits/sec                  
[  5][TX-C]  15.00-16.00  sec  59.3 MBytes   498 Mbits/sec                  
[  7][RX-C]  15.00-16.00  sec  5.83 MBytes  48.9 Mbits/sec                  
[  5][TX-C]  16.00-17.00  sec  60.5 MBytes   507 Mbits/sec                  
[  7][RX-C]  16.00-17.00  sec  4.75 MBytes  39.9 Mbits/sec                  
[  5][TX-C]  17.00-18.00  sec  60.1 MBytes   503 Mbits/sec                  
[  7][RX-C]  17.00-18.00  sec  3.60 MBytes  30.2 Mbits/sec                  
[  5][TX-C]  18.00-19.00  sec  60.5 MBytes   508 Mbits/sec                  
[  7][RX-C]  18.00-19.00  sec  2.96 MBytes  24.9 Mbits/sec                  
[  5][TX-C]  19.00-20.00  sec  60.7 MBytes   509 Mbits/sec                  
[  7][RX-C]  19.00-20.00  sec  3.52 MBytes  29.5 Mbits/sec                  
[  5][TX-C]  20.00-21.00  sec  60.8 MBytes   510 Mbits/sec                  
[  7][RX-C]  20.00-21.00  sec  4.11 MBytes  34.5 Mbits/sec                  
[  5][TX-C]  21.00-22.00  sec  60.7 MBytes   509 Mbits/sec                  
[  7][RX-C]  21.00-22.00  sec  3.38 MBytes  28.3 Mbits/sec                  
[  5][TX-C]  22.00-23.00  sec  60.8 MBytes   510 Mbits/sec                  
[  7][RX-C]  22.00-23.00  sec  5.11 MBytes  42.9 Mbits/sec                  
[  5][TX-C]  23.00-24.00  sec  54.4 MBytes   456 Mbits/sec                  
[  7][RX-C]  23.00-24.00  sec  5.44 MBytes  45.6 Mbits/sec                  
[  5][TX-C]  24.00-25.00  sec  62.1 MBytes   521 Mbits/sec                  
[  7][RX-C]  24.00-25.00  sec  3.80 MBytes  31.9 Mbits/sec                  
[  5][TX-C]  25.00-26.00  sec  62.5 MBytes   524 Mbits/sec                  
[  7][RX-C]  25.00-26.00  sec  2.41 MBytes  20.2 Mbits/sec                  
[  5][TX-C]  26.00-27.00  sec  42.3 MBytes   355 Mbits/sec                  
[  7][RX-C]  26.00-27.00  sec  2.30 MBytes  19.3 Mbits/sec                  
[  5][TX-C]  27.00-28.00  sec  22.5 MBytes   188 Mbits/sec                  
[  7][RX-C]  27.00-28.00  sec  1.83 MBytes  15.3 Mbits/sec                  
[  5][TX-C]  28.00-29.00  sec  22.9 MBytes   192 Mbits/sec                  
[  7][RX-C]  28.00-29.00  sec  1.03 MBytes  8.65 Mbits/sec                  
[  5][TX-C]  29.00-30.00  sec  29.8 MBytes   250 Mbits/sec                  
[  7][RX-C]  29.00-30.00  sec  1.35 MBytes  11.3 Mbits/sec                  
[  5][TX-C]  30.00-31.00  sec  28.0 MBytes   235 Mbits/sec                  
[  7][RX-C]  30.00-31.00  sec  2.20 MBytes  18.5 Mbits/sec                  
[  5][TX-C]  31.00-32.01  sec  28.2 MBytes   236 Mbits/sec                  
[  7][RX-C]  31.00-32.01  sec  2.22 MBytes  18.6 Mbits/sec                  
[  5][TX-C]  32.01-33.00  sec  29.5 MBytes   248 Mbits/sec                  
[  7][RX-C]  32.01-33.00  sec  1.91 MBytes  16.0 Mbits/sec                  
[  5][TX-C]  33.00-34.00  sec  28.5 MBytes   240 Mbits/sec                  
[  7][RX-C]  33.00-34.00  sec  1.64 MBytes  13.8 Mbits/sec                  
[  5][TX-C]  34.00-35.00  sec  35.7 MBytes   299 Mbits/sec                  
[  7][RX-C]  34.00-35.00  sec  2.86 MBytes  24.0 Mbits/sec                  
[  5][TX-C]  35.00-36.00  sec  35.8 MBytes   301 Mbits/sec                  
[  7][RX-C]  35.00-36.00  sec  3.71 MBytes  31.2 Mbits/sec                  
[  5][TX-C]  36.00-37.00  sec  31.9 MBytes   267 Mbits/sec                  
[  7][RX-C]  36.00-37.00  sec  3.96 MBytes  33.2 Mbits/sec                  
[  5][TX-C]  37.00-38.00  sec  35.9 MBytes   301 Mbits/sec                  
[  7][RX-C]  37.00-38.00  sec  3.85 MBytes  32.3 Mbits/sec                  
[  5][TX-C]  38.00-39.00  sec  34.0 MBytes   285 Mbits/sec                  
[  7][RX-C]  38.00-39.00  sec  2.40 MBytes  20.1 Mbits/sec                  
[  5][TX-C]  39.00-40.00  sec  37.7 MBytes   315 Mbits/sec                  
[  7][RX-C]  39.00-40.00  sec  2.39 MBytes  20.0 Mbits/sec                  
[  5][TX-C]  40.00-41.00  sec  38.8 MBytes   326 Mbits/sec                  
[  7][RX-C]  40.00-41.00  sec  3.50 MBytes  29.4 Mbits/sec                  
[  5][TX-C]  41.00-42.00  sec  38.5 MBytes   322 Mbits/sec                  
[  7][RX-C]  41.00-42.00  sec  3.42 MBytes  28.6 Mbits/sec                  
[  5][TX-C]  42.00-43.00  sec  37.5 MBytes   315 Mbits/sec                  
[  7][RX-C]  42.00-43.00  sec  3.80 MBytes  31.9 Mbits/sec                  
[  5][TX-C]  43.00-44.00  sec  32.6 MBytes   274 Mbits/sec                  
[  7][RX-C]  43.00-44.00  sec  4.07 MBytes  34.2 Mbits/sec                  
[  5][TX-C]  44.00-45.00  sec  33.8 MBytes   283 Mbits/sec                  
[  7][RX-C]  44.00-45.00  sec  4.19 MBytes  35.1 Mbits/sec                  
[  5][TX-C]  45.00-46.00  sec  53.7 MBytes   451 Mbits/sec                  
[  7][RX-C]  45.00-46.00  sec  6.45 MBytes  54.1 Mbits/sec                  
[  5][TX-C]  46.00-47.00  sec  56.4 MBytes   473 Mbits/sec                  
[  7][RX-C]  46.00-47.00  sec  4.33 MBytes  36.3 Mbits/sec                  
[  5][TX-C]  47.00-48.00  sec  61.5 MBytes   517 Mbits/sec                  
[  7][RX-C]  47.00-48.00  sec  3.21 MBytes  27.0 Mbits/sec                  
[  5][TX-C]  48.00-49.00  sec  59.5 MBytes   499 Mbits/sec                  
[  7][RX-C]  48.00-49.00  sec  3.57 MBytes  29.9 Mbits/sec                  
[  5][TX-C]  49.00-50.00  sec  60.8 MBytes   510 Mbits/sec                  
[  7][RX-C]  49.00-50.00  sec  4.91 MBytes  41.1 Mbits/sec                  
[  5][TX-C]  50.00-51.00  sec  61.2 MBytes   513 Mbits/sec                  
[  7][RX-C]  50.00-51.00  sec  3.89 MBytes  32.6 Mbits/sec                  
[  5][TX-C]  51.00-52.00  sec  60.4 MBytes   507 Mbits/sec                  
[  7][RX-C]  51.00-52.00  sec  2.89 MBytes  24.3 Mbits/sec                  
[  5][TX-C]  52.00-53.00  sec  60.9 MBytes   511 Mbits/sec                  
[  7][RX-C]  52.00-53.00  sec  2.29 MBytes  19.2 Mbits/sec                  
[  5][TX-C]  53.00-54.00  sec  58.1 MBytes   488 Mbits/sec                  
[  7][RX-C]  53.00-54.00  sec  2.47 MBytes  20.7 Mbits/sec                  
[  5][TX-C]  54.00-55.00  sec  58.3 MBytes   489 Mbits/sec                  
[  7][RX-C]  54.00-55.00  sec  1.96 MBytes  16.4 Mbits/sec                  
[  5][TX-C]  55.00-56.00  sec  54.4 MBytes   456 Mbits/sec                  
[  7][RX-C]  55.00-56.00  sec  8.46 MBytes  71.0 Mbits/sec                  
[  5][TX-C]  56.00-57.00  sec  30.1 MBytes   253 Mbits/sec                  
[  7][RX-C]  56.00-57.00  sec  26.7 MBytes   224 Mbits/sec                  
[  5][TX-C]  57.00-58.00  sec  19.4 MBytes   163 Mbits/sec                  
[  7][RX-C]  57.00-58.00  sec  48.5 MBytes   407 Mbits/sec                  
[  5][TX-C]  58.00-59.00  sec  13.7 MBytes   115 Mbits/sec                  
[  7][RX-C]  58.00-59.00  sec  61.2 MBytes   514 Mbits/sec                  
[  5][TX-C]  59.00-60.00  sec  21.5 MBytes   180 Mbits/sec                  
[  7][RX-C]  59.00-60.00  sec  41.6 MBytes   349 Mbits/sec                  
[  5][TX-C]  60.00-61.00  sec  40.3 MBytes   338 Mbits/sec                  
[  7][RX-C]  60.00-61.00  sec  13.4 MBytes   113 Mbits/sec                  
[  5][TX-C]  61.00-62.00  sec  55.7 MBytes   467 Mbits/sec                  
[  7][RX-C]  61.00-62.00  sec  4.56 MBytes  38.2 Mbits/sec                  
[  5][TX-C]  62.00-63.00  sec  62.5 MBytes   524 Mbits/sec                  
[  7][RX-C]  62.00-63.00  sec  2.45 MBytes  20.5 Mbits/sec                  
[  5][TX-C]  63.00-64.00  sec  62.4 MBytes   523 Mbits/sec                  
[  7][RX-C]  63.00-64.00  sec  1.62 MBytes  13.6 Mbits/sec                  
[  5][TX-C]  64.00-65.00  sec  60.2 MBytes   505 Mbits/sec                  
[  7][RX-C]  64.00-65.00  sec  3.03 MBytes  25.5 Mbits/sec                  
[  5][TX-C]  65.00-66.00  sec  60.5 MBytes   508 Mbits/sec                  
[  7][RX-C]  65.00-66.00  sec  4.03 MBytes  33.8 Mbits/sec                  
[  5][TX-C]  66.00-67.00  sec  60.1 MBytes   504 Mbits/sec                  
[  7][RX-C]  66.00-67.00  sec  4.97 MBytes  41.7 Mbits/sec                  
[  5][TX-C]  67.00-68.00  sec  61.2 MBytes   514 Mbits/sec                  
[  7][RX-C]  67.00-68.00  sec  2.93 MBytes  24.5 Mbits/sec                  
[  5][TX-C]  68.00-69.00  sec  61.7 MBytes   517 Mbits/sec                  
[  7][RX-C]  68.00-69.00  sec  4.01 MBytes  33.6 Mbits/sec                  
[  5][TX-C]  69.00-70.00  sec  60.5 MBytes   508 Mbits/sec                  
[  7][RX-C]  69.00-70.00  sec  3.54 MBytes  29.7 Mbits/sec                  
[  5][TX-C]  70.00-71.00  sec  61.6 MBytes   516 Mbits/sec                  
[  7][RX-C]  70.00-71.00  sec  3.55 MBytes  29.8 Mbits/sec                  
[  5][TX-C]  71.00-72.00  sec  60.9 MBytes   510 Mbits/sec                  
[  7][RX-C]  71.00-72.00  sec  3.91 MBytes  32.7 Mbits/sec                  
[  5][TX-C]  72.00-73.00  sec  60.4 MBytes   507 Mbits/sec                  
[  7][RX-C]  72.00-73.00  sec  4.84 MBytes  40.7 Mbits/sec                  
[  5][TX-C]  73.00-74.00  sec  61.0 MBytes   511 Mbits/sec                  
[  7][RX-C]  73.00-74.00  sec  3.33 MBytes  28.0 Mbits/sec                  
[  5][TX-C]  74.00-75.00  sec  60.2 MBytes   505 Mbits/sec                  
[  7][RX-C]  74.00-75.00  sec  1.80 MBytes  15.1 Mbits/sec                  
[  5][TX-C]  75.00-76.00  sec  61.6 MBytes   517 Mbits/sec                  
[  7][RX-C]  75.00-76.00  sec  2.66 MBytes  22.3 Mbits/sec                  
[  5][TX-C]  76.00-77.00  sec  60.2 MBytes   505 Mbits/sec                  
[  7][RX-C]  76.00-77.00  sec  4.31 MBytes  36.2 Mbits/sec                  
[  5][TX-C]  77.00-78.00  sec  60.8 MBytes   509 Mbits/sec                  
[  7][RX-C]  77.00-78.00  sec  4.59 MBytes  38.4 Mbits/sec                  
[  5][TX-C]  78.00-79.00  sec  59.0 MBytes   496 Mbits/sec                  
[  7][RX-C]  78.00-79.00  sec  5.87 MBytes  49.3 Mbits/sec                  
[  5][TX-C]  79.00-80.00  sec  57.6 MBytes   484 Mbits/sec                  
[  7][RX-C]  79.00-80.00  sec  5.71 MBytes  47.9 Mbits/sec                  
[  5][TX-C]  80.00-81.00  sec  60.0 MBytes   503 Mbits/sec                  
[  7][RX-C]  80.00-81.00  sec  5.16 MBytes  43.3 Mbits/sec                  
[  5][TX-C]  81.00-82.00  sec  58.1 MBytes   488 Mbits/sec                  
[  7][RX-C]  81.00-82.00  sec  5.51 MBytes  46.2 Mbits/sec                  
[  5][TX-C]  82.00-83.00  sec  54.3 MBytes   456 Mbits/sec                  
[  7][RX-C]  82.00-83.00  sec  4.98 MBytes  41.7 Mbits/sec                  
[  5][TX-C]  83.00-84.00  sec  49.9 MBytes   418 Mbits/sec                  
[  7][RX-C]  83.00-84.00  sec  5.73 MBytes  48.0 Mbits/sec                  
[  5][TX-C]  84.00-85.00  sec  46.1 MBytes   387 Mbits/sec                  
[  7][RX-C]  84.00-85.00  sec  6.41 MBytes  53.8 Mbits/sec                  
[  5][TX-C]  85.00-86.00  sec  46.3 MBytes   389 Mbits/sec                  
[  7][RX-C]  85.00-86.00  sec  4.62 MBytes  38.8 Mbits/sec                  
[  5][TX-C]  86.00-87.00  sec  50.1 MBytes   420 Mbits/sec                  
[  7][RX-C]  86.00-87.00  sec  3.71 MBytes  31.1 Mbits/sec                  
[  5][TX-C]  87.00-88.00  sec  22.2 MBytes   187 Mbits/sec                  
[  7][RX-C]  87.00-88.00  sec  1.39 MBytes  11.7 Mbits/sec                  
[  5][TX-C]  88.00-89.00  sec  16.6 MBytes   139 Mbits/sec                  
[  7][RX-C]  88.00-89.00  sec   706 KBytes  5.78 Mbits/sec                  
[  5][TX-C]  89.00-90.00  sec  21.0 MBytes   176 Mbits/sec                  
[  7][RX-C]  89.00-90.00  sec   634 KBytes  5.19 Mbits/sec                  
[  5][TX-C]  90.00-91.00  sec  24.5 MBytes   205 Mbits/sec                  
[  7][RX-C]  90.00-91.00  sec   912 KBytes  7.47 Mbits/sec                  
[  5][TX-C]  91.00-92.00  sec  21.0 MBytes   176 Mbits/sec                  
[  7][RX-C]  91.00-92.00  sec   710 KBytes  5.80 Mbits/sec                  
[  5][TX-C]  92.00-93.00  sec  23.6 MBytes   198 Mbits/sec                  
[  7][RX-C]  92.00-93.00  sec   533 KBytes  4.37 Mbits/sec                  
[  5][TX-C]  93.00-94.00  sec  23.3 MBytes   196 Mbits/sec                  
[  7][RX-C]  93.00-94.00  sec   642 KBytes  5.26 Mbits/sec                  
[  5][TX-C]  94.00-95.00  sec  35.1 MBytes   295 Mbits/sec                  
[  7][RX-C]  94.00-95.00  sec  1.59 MBytes  13.4 Mbits/sec                  
[  5][TX-C]  95.00-96.00  sec  32.8 MBytes   275 Mbits/sec                  
[  7][RX-C]  95.00-96.00  sec  1.45 MBytes  12.2 Mbits/sec                  
[  5][TX-C]  96.00-97.00  sec  33.6 MBytes   282 Mbits/sec                  
[  7][RX-C]  96.00-97.00  sec  2.17 MBytes  18.2 Mbits/sec                  
[  5][TX-C]  97.00-98.00  sec  35.4 MBytes   297 Mbits/sec                  
[  7][RX-C]  97.00-98.00  sec  2.59 MBytes  21.7 Mbits/sec                  
[  5][TX-C]  98.00-99.00  sec  33.6 MBytes   280 Mbits/sec                  
[  7][RX-C]  98.00-99.00  sec  2.62 MBytes  21.9 Mbits/sec                  
[  5][TX-C]  99.00-100.00 sec  32.8 MBytes   276 Mbits/sec                  
[  7][RX-C]  99.00-100.00 sec  1.69 MBytes  14.2 Mbits/sec                  
[  5][TX-C] 100.00-101.00 sec  35.7 MBytes   300 Mbits/sec                  
[  7][RX-C] 100.00-101.00 sec  1.09 MBytes  9.13 Mbits/sec                  
[  5][TX-C] 101.00-102.00 sec  38.0 MBytes   319 Mbits/sec                  
[  7][RX-C] 101.00-102.00 sec  1.31 MBytes  11.0 Mbits/sec                  
[  5][TX-C] 102.00-103.00 sec  35.1 MBytes   295 Mbits/sec                  
[  7][RX-C] 102.00-103.00 sec  1.93 MBytes  16.2 Mbits/sec                  
[  5][TX-C] 103.00-104.00 sec  36.7 MBytes   307 Mbits/sec                  
[  7][RX-C] 103.00-104.00 sec  2.11 MBytes  17.7 Mbits/sec                  
[  5][TX-C] 104.00-105.00 sec  37.1 MBytes   311 Mbits/sec                  
[  7][RX-C] 104.00-105.00 sec  1.11 MBytes  9.30 Mbits/sec                  
[  5][TX-C] 105.00-106.00 sec  53.2 MBytes   445 Mbits/sec                  
[  7][RX-C] 105.00-106.00 sec  2.33 MBytes  19.5 Mbits/sec                  
[  5][TX-C] 106.00-107.00 sec  59.2 MBytes   498 Mbits/sec                  
[  7][RX-C] 106.00-107.00 sec  3.59 MBytes  30.2 Mbits/sec                  
[  5][TX-C] 107.00-108.00 sec  52.4 MBytes   439 Mbits/sec                  
[  7][RX-C] 107.00-108.00 sec  3.05 MBytes  25.5 Mbits/sec                  
[  5][TX-C] 108.00-109.00 sec  57.5 MBytes   483 Mbits/sec                  
[  7][RX-C] 108.00-109.00 sec  2.75 MBytes  23.1 Mbits/sec                  
[  5][TX-C] 109.00-110.00 sec  59.0 MBytes   495 Mbits/sec                  
[  7][RX-C] 109.00-110.00 sec  3.61 MBytes  30.3 Mbits/sec                  
[  5][TX-C] 110.00-111.00 sec  60.5 MBytes   507 Mbits/sec                  
[  7][RX-C] 110.00-111.00 sec  4.94 MBytes  41.4 Mbits/sec                  
[  5][TX-C] 111.00-112.00 sec  58.8 MBytes   493 Mbits/sec                  
[  7][RX-C] 111.00-112.00 sec  3.40 MBytes  28.5 Mbits/sec                  
[  5][TX-C] 112.00-113.00 sec  60.4 MBytes   506 Mbits/sec                  
[  7][RX-C] 112.00-113.00 sec  3.09 MBytes  25.9 Mbits/sec                  
[  5][TX-C] 113.00-114.00 sec  56.3 MBytes   473 Mbits/sec                  
[  7][RX-C] 113.00-114.00 sec  3.26 MBytes  27.4 Mbits/sec                  
[  5][TX-C] 114.00-115.00 sec  61.7 MBytes   518 Mbits/sec                  
[  7][RX-C] 114.00-115.00 sec  2.02 MBytes  16.9 Mbits/sec                  
[  5][TX-C] 115.00-116.00 sec  53.4 MBytes   448 Mbits/sec                  
[  7][RX-C] 115.00-116.00 sec  1.57 MBytes  13.2 Mbits/sec                  
[  5][TX-C] 116.00-117.00 sec  58.6 MBytes   492 Mbits/sec                  
[  7][RX-C] 116.00-117.00 sec  2.00 MBytes  16.8 Mbits/sec                  
[  5][TX-C] 117.00-118.00 sec  61.6 MBytes   517 Mbits/sec                  
[  7][RX-C] 117.00-118.00 sec  2.88 MBytes  24.2 Mbits/sec                  
[  5][TX-C] 118.00-119.00 sec  60.7 MBytes   509 Mbits/sec                  
[  7][RX-C] 118.00-119.00 sec  2.59 MBytes  21.7 Mbits/sec                  
[  5][TX-C] 119.00-120.00 sec  60.4 MBytes   507 Mbits/sec                  
[  7][RX-C] 119.00-120.00 sec  3.72 MBytes  31.2 Mbits/sec                  
[  5][TX-C] 120.00-121.00 sec  59.9 MBytes   501 Mbits/sec                  
[  7][RX-C] 120.00-121.00 sec  4.98 MBytes  41.7 Mbits/sec                  
[  5][TX-C] 121.00-122.00 sec  58.4 MBytes   490 Mbits/sec                  
[  7][RX-C] 121.00-122.00 sec  4.11 MBytes  34.5 Mbits/sec                  
[  5][TX-C] 122.00-123.00 sec  60.7 MBytes   510 Mbits/sec                  
[  7][RX-C] 122.00-123.00 sec  2.47 MBytes  20.8 Mbits/sec                  
[  5][TX-C] 123.00-124.00 sec  57.5 MBytes   482 Mbits/sec                  
[  7][RX-C] 123.00-124.00 sec  4.00 MBytes  33.5 Mbits/sec                  
[  5][TX-C] 124.00-125.00 sec  58.8 MBytes   493 Mbits/sec                  
[  7][RX-C] 124.00-125.00 sec  4.73 MBytes  39.6 Mbits/sec                  
[  5][TX-C] 125.00-126.00 sec  60.4 MBytes   507 Mbits/sec                  
[  7][RX-C] 125.00-126.00 sec  3.76 MBytes  31.5 Mbits/sec                  
[  5][TX-C] 126.00-127.00 sec  59.7 MBytes   501 Mbits/sec                  
[  7][RX-C] 126.00-127.00 sec  3.21 MBytes  26.9 Mbits/sec                  
[  5][TX-C] 127.00-128.00 sec  52.4 MBytes   440 Mbits/sec                  
[  7][RX-C] 127.00-128.00 sec  2.74 MBytes  22.9 Mbits/sec                  
[  5][TX-C] 128.00-129.00 sec  54.9 MBytes   460 Mbits/sec                  
[  7][RX-C] 128.00-129.00 sec  1.63 MBytes  13.7 Mbits/sec                  
[  5][TX-C] 129.00-130.00 sec  61.2 MBytes   513 Mbits/sec                  
[  7][RX-C] 129.00-130.00 sec  2.55 MBytes  21.4 Mbits/sec                  
^C[  5][TX-C] 130.00-130.71 sec  42.5 MBytes   506 Mbits/sec                  
[  7][RX-C] 130.00-130.71 sec  2.01 MBytes  23.9 Mbits/sec                  
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID][Role] Interval           Transfer     Bitrate
[  5][TX-C]   0.00-130.71 sec  6.33 GBytes   416 Mbits/sec                  sender
[  5][TX-C]   0.00-130.71 sec  0.00 Bytes  0.00 bits/sec                  receiver
[  7][RX-C]   0.00-130.71 sec  0.00 Bytes  0.00 bits/sec                  sender
[  7][RX-C]   0.00-130.71 sec   631 MBytes  40.5 Mbits/sec                  receiver
iperf3: interrupt - the client has terminated

Reading the conversation in mwlwifi issue, with commit and commit pushed a couple of weeks later, has me wondering if this was self inflicted and is now working on 5.10. Anyone taken a kick at it on any wrtpac device lately.

1 Like

Enabling

	option ieee80211w '2'
	option encryption 'sae'

no longer kills a rango with a runaway load and no discernible process being the culprit, and I can connect with the one WPA3 client I have in my shack. It seems to work.

3 Likes

How about ieee80211w '1' ?
Have you tested it?
Earlier the '1' = optional 802.11w (like possible e.g. with WPA2/WPA3 mixed mode) caused the clients to stop sooner or later.

is station mode wpa3 working too on rango?

I tried bringing up the radios with various combinations of

option ieee80211w '1'
option ieee80211w '2'
and
option encryption 'sae'
option encryption 'sae-mixed'

and nothing sent the rango into a death spiral. I know that in the past

option ieee80211w '1'
option encryption 'sae-mixed'

would kill the rango in a matter of minutes, without a device even trying to connect.

@bricco1981 , did not try STA, I do not usually even have the radios enabled, but the mwlwifi github issue piqued my curiosity. Worth a test with a 5.10 image post the commits linked above, for reference I tested on r17406-76f46f4105.510

Interesting.
I will have to test it with my own wrt3200acm. Would be great if the ieee80211w '1' death issue would have been fixed (by removing the older OpenWrt mods, like you implicate above).

Mixed results :frowning:

I flashed my WRT3200ACM with the newest master, configured WPA2/WPA3 mixed mode (with 802.11w optional (='1')), and initially everything went ok. There were the three different clients connected: one printer to 2.4 GHz with WPA(2?) (AKMSuite 2), Android 10 phone with WPA2 (PSK with SHA256) (AKMSuite 6) and Android 11 tablet with WPA3 (AKMSuite 8).

root@router3:~# hostapd_cli -i wlan0 all_sta | grep -E "^..:..:|AKMSuite"
e0:c3:77:ae:0a:30
AKMSuiteSelector=00-0f-ac-8
ac:57:75:56:c1:e0
AKMSuiteSelector=00-0f-ac-6
root@router3:~# hostapd_cli -i wlan1 all_sta | grep -E "^..:..:|AKMSuite"
30:cd:a7:b3:33:5d
AKMSuiteSelector=00-0f-ac-2

Initially the router's wifi was up and the clients can connect. However, after a few minutes, the connectivity from the clients has died.

Likely the earlier symptom of having both 802.11w enabled and 802.11w ignorant devices active still kills the actual connectivity.

Wed Aug 25 18:28:19 2021 daemon.info hostapd: wlan0: STA ac:57:75:56:c1:e0 IEEE 802.11: authenticated
Wed Aug 25 18:30:53 2021 daemon.notice hostapd: wlan0: STA-OPMODE-N_SS-CHANGED e0:c3:77:ae:0a:30 1
Wed Aug 25 18:30:53 2021 daemon.info hostapd: wlan0: STA e0:c3:77:ae:0a:30 IEEE 802.11: associated (aid 2)
Wed Aug 25 18:30:53 2021 daemon.notice hostapd: wlan0: AP-STA-CONNECTED e0:c3:77:ae:0a:30
Wed Aug 25 18:30:53 2021 daemon.info hostapd: wlan0: STA e0:c3:77:ae:0a:30 RADIUS: starting accounting session 17099FFE8BFA481A
Wed Aug 25 18:30:53 2021 daemon.info hostapd: wlan0: STA e0:c3:77:ae:0a:30 WPA: pairwise key handshake completed (RSN)
Wed Aug 25 18:30:53 2021 daemon.notice hostapd: wlan0: EAPOL-4WAY-HS-COMPLETED e0:c3:77:ae:0a:30
Wed Aug 25 18:42:06 2021 daemon.notice hostapd: wlan0: STA-OPMODE-SMPS-MODE-CHANGED ac:57:75:56:c1:e0 off
Wed Aug 25 18:51:57 2021 daemon.notice hostapd: wlan0: AP-STA-DISCONNECTED ac:57:75:56:c1:e0
Wed Aug 25 18:51:57 2021 daemon.info hostapd: wlan0: STA ac:57:75:56:c1:e0 IEEE 802.11: disassociated due to inactivity
Wed Aug 25 18:52:31 2021 kern.err kernel: [ 1609.140616] ieee80211 phy0: cmd 0x9122=UpdateEncryption timed out
Wed Aug 25 18:52:31 2021 kern.err kernel: [ 1609.146752] ieee80211 phy0: return code: 0x1122
Wed Aug 25 18:52:31 2021 kern.err kernel: [ 1609.151302] ieee80211 phy0: timeout: 0x1122
Wed Aug 25 18:52:31 2021 kern.err kernel: [ 1609.155506] wlan0: failed to remove key (0, ac:57:75:56:c1:e0) from hardware (-5)
Wed Aug 25 18:52:31 2021 kern.debug kernel: [ 1609.168109] ieee80211 phy0: MACREG_REG_INT_CODE: 0x0000

wifi down / up does not return connectivity

Wed Aug 25 18:52:31 2021 kern.err kernel: [ 1609.140616] ieee80211 phy0: cmd 0x9122=UpdateEncryption timed out
Wed Aug 25 18:52:31 2021 kern.err kernel: [ 1609.146752] ieee80211 phy0: return code: 0x1122
Wed Aug 25 18:52:31 2021 kern.err kernel: [ 1609.151302] ieee80211 phy0: timeout: 0x1122
Wed Aug 25 18:52:31 2021 kern.err kernel: [ 1609.155506] wlan0: failed to remove key (0, ac:57:75:56:c1:e0) from hardware (-5)
Wed Aug 25 18:52:31 2021 kern.debug kernel: [ 1609.168109] ieee80211 phy0: MACREG_REG_INT_CODE: 0x0000
Wed Aug 25 18:53:04 2021 kern.err kernel: [ 1642.599613] ieee80211 phy0: cmd 0x801d=MEMAddrAccess timed out
Wed Aug 25 18:53:04 2021 kern.err kernel: [ 1642.605493] ieee80211 phy0: return code: 0x001d
Wed Aug 25 18:53:04 2021 kern.err kernel: [ 1642.610043] ieee80211 phy0: timeout: 0x001d
Wed Aug 25 18:53:04 2021 kern.debug kernel: [ 1642.614247] ieee80211 phy0: MACREG_REG_INT_CODE: 0x0000
Wed Aug 25 18:53:37 2021 daemon.notice netifd: radio1 (6860): Command failed: Request timed out
Wed Aug 25 18:53:37 2021 daemon.notice netifd: radio0 (6859): Command failed: Request timed out
Wed Aug 25 18:53:38 2021 kern.err kernel: [ 1676.074789] ieee80211 phy0: cmd 0x801d=MEMAddrAccess timed out
Wed Aug 25 18:53:38 2021 kern.err kernel: [ 1676.080653] ieee80211 phy0: return code: 0x001d
Wed Aug 25 18:53:38 2021 kern.err kernel: [ 1676.085219] ieee80211 phy0: timeout: 0x001d
Wed Aug 25 18:53:38 2021 kern.debug kernel: [ 1676.089424] ieee80211 phy0: MACREG_REG_INT_CODE: 0x0000

So, my verdict at this point is that 802.11w is still broken if some devices do not use 802.11w while others do. Roughly the issue from https://github.com/kaloz/mwlwifi/issues/362

Possibly, if all devices are 802.11w compliant, then WPA3 may work.

EDIT:
Hmmm. I enabled 802.11w only for the 5GHz radio0, but not for the 2.4 GHz radio1, and still the network died (although the old printer was connected to 2.4 Ghz)

EDIT2:
Sounds like https://github.com/kaloz/mwlwifi/issues/133 or
https://github.com/kaloz/mwlwifi/issues/55 or
https://github.com/kaloz/mwlwifi/issues/93

EDIT3:
I tried also with both radios with WPA2/WPA3 mixed with 802.11w. The result was the same. In a few minutes the actual connectivity died.

2 Likes

Disappointing result. I have been running mixed mode on a mamba but of course the 88W8864 has behaved differently/better than the 88W8964.

Sharing my recent experience of WPA3 on WRT1900ACS/21.02.0. I started playing with it yesterday, and have the following config:

config wifi-iface 'default_radio0'      
        [...]
        option encryption 'sae'
        option ieee80211w '2'

config wifi-iface 'default_radio1'
        [...]
        option encryption 'sae-mixed'
        option ieee80211w '1'

FWIW on 5GHz all devices are WPA3 capable, but this is not the case on 2.4. Only one day uptime, but wifi stable so far.