HOWTO: Wireless Security - WPA1, WPA2, LEAP, etc.

[Forgott3n]

Hello,

I am using the D-Link WDA-1320 card (Atheros) and it uses the restricted drivers (as said in Feisty).

I have followed the directions precisely but with no luck.

I also noticed with the d-link card I have ath0, eth2, and wlan0 (eth1 is my wired connection) So I added the static configuration to all of them.

I have removed NetworkManager and NetworkManager-Gnome, I have WPA_Supplicant, and I'm running Feisty Fawn 7.04


Any help would be greatly appreciated.


[Edit] Here's what I get when I restart, what iwconfig dumps, and what I have in /etc/networking/interfaces

justin@bullbox:~$ sudo /etc/init.d/networking restart
Password:
 * Reconfiguring network interfaces...                                          SIOCDELRT: No such process
eth1: ERROR while getting interface flags: No such device
There is already a pid file /var/run/dhclient.eth1.pid with pid 134993416
Internet Systems Consortium DHCP Client V3.0.4
Copyright 2004-2006 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/

wifi0: unknown hardware address type 801
SIOCSIFADDR: No such device
eth1: ERROR while getting interface flags: No such device
eth1: ERROR while getting interface flags: No such device
wifi0: unknown hardware address type 801
Bind socket to interface: No such device
Failed to bring up eth1.
eth2: ERROR while getting interface flags: No such device
ioctl[SIOCSIWPMKSA]: No such device
ioctl[SIOCSIWMODE]: No such device
Could not configure driver to use managed mode
ioctl[SIOCGIFFLAGS]: No such device
Could not set interface 'eth2' UP
ioctl[SIOCGIWRANGE]: No such device
ioctl[IEEE80211_IOCTL_SETPARAM]: No such device
ioctl[SIOCSIWAP]: No such device
ioctl[SIOCGIFFLAGS]: No such device
Failed to initialize driver interface
wpa_supplicant: /sbin/wpa_supplicant daemon failed to start
run-parts: /etc/network/if-pre-up.d/wpasupplicant exited with return code 1
SIOCSIFADDR: No such device
eth2: ERROR while getting interface flags: No such device
SIOCSIFNETMASK: No such device
eth2: ERROR while getting interface flags: No such device
Failed to bring up eth2.
ioctl[SIOCSIWPMKSA]: Invalid argument
ioctl[SIOCSIWMODE]: Invalid argument
Could not configure driver to use managed mode
ioctl[SIOCGIWRANGE]: Invalid argument
ioctl[IEEE80211_IOCTL_SETPARAM]: Invalid argument
ioctl[SIOCSIWAP]: Invalid argument
Failed to initialize driver interface
wpa_supplicant: /sbin/wpa_supplicant daemon failed to start
run-parts: /etc/network/if-pre-up.d/wpasupplicant exited with return code 1
RTNETLINK answers: File exists
run-parts: /etc/network/if-up.d/avahi-autoipd exited with return code 2
wlan0: ERROR while getting interface flags: No such device
ioctl[SIOCSIWPMKSA]: No such device
ioctl[SIOCSIWMODE]: No such device
Could not configure driver to use managed mode
ioctl[SIOCGIFFLAGS]: No such device
Could not set interface 'wlan0' UP
ioctl[SIOCGIWRANGE]: No such device
ioctl[IEEE80211_IOCTL_SETPARAM]: No such device
ioctl[SIOCSIWAP]: No such device
ioctl[SIOCGIFFLAGS]: No such device
Failed to initialize driver interface
wpa_supplicant: /sbin/wpa_supplicant daemon failed to start
run-parts: /etc/network/if-pre-up.d/wpasupplicant exited with return code 1
There is already a pid file /var/run/dhclient.wlan0.pid with pid 134993416
Internet Systems Consortium DHCP Client V3.0.4
Copyright 2004-2006 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/

wifi0: unknown hardware address type 801
SIOCSIFADDR: No such device
wlan0: ERROR while getting interface flags: No such device
wlan0: ERROR while getting interface flags: No such device
wifi0: unknown hardware address type 801
Bind socket to interface: No such device
Failed to bring up wlan0.
                                                                         [ OK ]
justin@bullbox:~$

=======

justin@bullbox:~$ iwconfig
lo        no wireless extensions.

eth0      no wireless extensions.

wifi0     no wireless extensions.

ath0      IEEE 802.11g  ESSID:""  Nickname:""
          Mode:Managed  Channel:0  Access Point: Not-Associated   
          Bit Rate:0 kb/s   Tx-Power:18 dBm   Sensitivity=0/3  
          Retry:off   RTS thr:off   Fragment thr:off
          Power Management:off
          Link Quality=0/94  Signal level=-96 dBm  Noise level=-96 dBm
          Rx invalid nwid:11990  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

justin@bullbox:~$

=======

auto lo
iface lo inet loopback

auto eth1
iface eth1 inet dhcp

auto eth2
iface eth2 inet static
address 192.168.1.127
gateway 192.168.1.1
dns-nameservers 192.168.1.1
netmask 255.255.255.0
wpa-driver madwifi
wpa-ssid gray-network
wpa-ap-scan 1
wpa-proto RSN
wpa-pairwise CCMP
wpa-group CCMP
wpa-key-mgmt WPA-PSK
wpa-psk 9783db4dfeaf61f96982d0791f15534ea0d9d98d55267bdf2ba750501f98a80d

auto ath0
iface ath0 inet static
address 192.168.1.127
gateway 192.168.1.1
dns-nameservers 192.168.1.1
netmask 255.255.255.0
wpa-driver madwifi
wpa-ssid gray-network
wpa-ap-scan 1
wpa-proto RSN
wpa-pairwise CCMP
wpa-group CCMP
wpa-key-mgmt WPA-PSK
wpa-psk 9783db4dfeaf61f96982d0791f15534ea0d9d98d55267bdf2ba750501f98a80d

auto wifi0
iface wifi0 inet static
address 192.168.1.127
gateway 192.168.1.1
dns-nameservers 192.168.1.1
netmask 255.255.255.0
wpa-driver madwifi
wpa-ssid gray-network
wpa-ap-scan 1
wpa-proto RSN
wpa-pairwise CCMP
wpa-group CCMP
wpa-key-mgmt WPA-PSK
wpa-psk 9783db4dfeaf61f96982d0791f15534ea0d9d98d55267bdf2ba750501f98a80d

auto wlan0
iface wlan0 inet dhcp
wpa-driver madwifi
wpa-ssid gray-network
wpa-ap-scan 1
wpa-proto RSN
wpa-pairwise CCMP
wpa-group CCMP
wpa-key-mgmt WPA-PSK
wpa-psk 9783db4dfeaf61f96982d0791f15534ea0d9d98d55267bdf2ba750501f98a80d

Note: I added wifi0 into the mix because on first attempt I noticed that the restart was complaining about a wifi0.

[wieman01]

Hello,

I am using the D-Link WDA-1320 card (Atheros) and it uses the restricted drivers (as said in Feisty).

I have followed the directions precisely but with no luck.

I also noticed with the d-link card I have ath0, eth2, and wlan0 (eth1 is my wired connection) So I added the static configuration to all of them.

I have removed NetworkManager and NetworkManager-Gnome, I have WPA_Supplicant, and I'm running Feisty Fawn 7.04


Any help would be greatly appreciated.

Two quesiton before we proceed... Have you scanned for your network yet & does it yield any results?

iwlist scan

Second, have you been able to connect to unsecured networks yet? That is particularly important because I need to now if you card is working or not.

Lastly, some card do not support WPA2 (RSN-CCMP) but only WPA1 (WPA-TKIP). Please try both options.

[Forgott3n]

Two quesiton before we proceed... Have you scanned for your network yet & does it yield any results?

Second, have you been able to connect to unsecured networks yet? That is particularly important because I need to now if you card is working or not.

Lastly, some card do not support WPA2 (RSN-CCMP) but only WPA1 (WPA-TKIP). Please try both options.

Ahh yes, forgot to mention. I was able to connect to my secured AP and unsecured APs via NetworkManager prior to attempting to make my system static. Here is the iwlist scan

justin@bullbox:~$ iwlist scan
lo        Interface doesn't support scanning.

eth0      Interface doesn't support scanning.

wifi0     Interface doesn't support scanning.

ath0      Scan completed :
          Cell 01 - Address: 00:40:10:10:00:03
                    ESSID:"gray-network"
                    Mode:Master
                    Frequency:2.462 GHz (Channel 11)
                    Quality=31/94  Signal level=-64 dBm  Noise level=-95 dBm
                    Encryption key:on
                    Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 18 Mb/s
                              24 Mb/s; 36 Mb/s; 54 Mb/s; 6 Mb/s; 9 Mb/s
                              12 Mb/s; 48 Mb/s
                    Extra:bcn_int=100
                    IE: IEEE 802.11i/WPA2 Version 1
                        Group Cipher : TKIP 
                        Pairwise Ciphers (2) : CCMP TKIP 
                        Authentication Suites (1) : PSK  
                    IE: WPA Version 1
                        Group Cipher : TKIP 
                        Pairwise Ciphers (2) : CCMP TKIP 
                        Authentication Suites (1) : PSK  
          Cell 02 - Address: 00:13:46:87:0F:74
                    ESSID:"default"
                    Mode:Master
                    Frequency:2.437 GHz (Channel 6)
                    Quality=1/94  Signal level=-94 dBm  Noise level=-95 dBm
                    Encryption key:off
                    Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 6 Mb/s; 9 Mb/s
                              11 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s; 36 Mb/s
                              48 Mb/s; 54 Mb/s
                    Extra:bcn_int=100
                    Extra:ath_ie=dd0900037f01010020ff7f
          Cell 03 - Address: 00:0C:41:B3:06:C0
                    ESSID:"linksys"
                    Mode:Master
                    Frequency:2.437 GHz (Channel 6)
                    Quality=10/94  Signal level=-85 dBm  Noise level=-95 dBm
                    Encryption key:off
                    Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s
                    Extra:bcn_int=100
          Cell 04 - Address: 00:0F:3D:5B:23:BA
                    ESSID:"ottis"
                    Mode:Master
                    Frequency:2.437 GHz (Channel 6)
                    Quality=2/94  Signal level=-93 dBm  Noise level=-95 dBm
                    Encryption key:on
                    Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 6 Mb/s
                              12 Mb/s; 24 Mb/s; 36 Mb/s; 9 Mb/s; 18 Mb/s
                              48 Mb/s; 54 Mb/s
                    Extra:bcn_int=100
                    Extra:ath_ie=dd0900037f010100170000

[wieman01]

Ahh yes, forgot to mention. I was able to connect to my secured AP and unsecured APs via NetworkManager prior to attempting to make my system static. Here is the iwlist scan:

I see... Please try WPA1 (TKIP) instead (sample script on first page), I don't know if the Madwifi driver supports WPA with CCMP (AES). Any better now?

[Forgott3n]

I see... Please try WPA1 (TKIP) instead (sample script on first page), I don't know if the Madwifi driver supports WPA with CCMP (AES). Any better now?

Thank you! It works perfectly.

[wieman01]

Thank you! It works perfectly.

It's the driver then. I should mention that in the tutorial. No all adapters/drivers support WPA2.

[Forgott3n]

It's the driver then. I should mention that in the tutorial. No all adapters/drivers support WPA2.

WPA2 worked alright, but its the encryption method (AES). Once I switched to TKIP it worked just fine.

A little side note: after boot up I have to restart the /etc/init.d/networking in order for it to work. I guess thats what the scripts are for on the tutorial page.

Thanks again!

[d3dtn01]

Wieman01,

Thanks for the suggestion about taking the "enable roaming" off. I deactivated that and now I'm connected to my network. Thanks for the great help!

[wieman01]

Wieman01,

Thanks for the suggestion about taking the "enable roaming" off. I deactivated that and now I'm connected to my network. Thanks for the great help!

That was Reauthor's idea. But anyway, good to hear it worked for you.

[Forgott3n]

Interesting... For some reason, every once in a while I have to restart the networking because the server will stop staying connected.

Can a script be written to restart the networking if the server cannot ping google?