[gentoo-user] 回复： [gentoo-user] Why iwconfig wlan0 enc can't work?

[gentoo-user] 回复： [gentoo-user] Why iwconfig wlan0 enc can't work?

[Lavender]

[-- Attachment #1: Type: text/plain, Size: 1529 bytes --]

What!!!  I know wpa_supplicant don't support
 AES encryption method ,so I use wireless tools......
 So it seems that I have to use wpa_supplicant and 
 change AES encryption method into TKIP.
  I feel a little depressed :-(
  
   
  
  ------------------ 原始邮件 ------------------
  发件人: "Michael Mol"<mikemol@gmail.com>;
 发送时间: 2011年10月21日(星期五) 晚上10:08
 收件人: "gentoo-user"<gentoo-user@lists.gentoo.org>; 
 
 主题: Re: [gentoo-user] Why iwconfig wlan0 enc can't work?

  
On Fri, Oct 21, 2011 at 10:03 AM, Lavender <448463782@qq.com> wrote:
> The essid of my dormitory wireless netword is "Rebellion"
> and its password is "I'll leave it up to you"(It's OK to tell
> you this private information :-) ) .
> I typed command below
> #iwconfig wlan0 up
> #iwconfig wlan0 essid "Rebellion"
> Commands above worked normally, then
>
> #iwconfig wlan0 mode master
>
> Our AP mode which iwlist shows is master,
> but the command above failed. Error message was
> "Invalid argument".
> Then I typed
> #iwconfig wlan0 mode managed
> This worked , then
> #iwconfig wlan0 enc "I'll leave it up to you"
> This failed with error message "Invalid argument"
>
> I have searched the internet , but I didn't find
> useful information .  The password is right , it
> can work on windows system .So what's wrong
> with it?

What encryption method is used by the AP? The method you described
only kinda works for WEP. If the AP is using WPA or WPA2, you need a
WPA supplicant.

-- 
:wq

[-- Attachment #2: Type: text/html, Size: 2289 bytes --]

[gentoo-user] Re: [gentoo-user] 回复： [gentoo-user] Why iwconfig wlan0 enc can't work?

[Michael Mol]

2011/10/21 Lavender <448463782@qq.com>:
> What!!!  I know wpa_supplicant don't support
> AES encryption method ,so I use wireless tools......
> So it seems that I have to use wpa_supplicant and
> change AES encryption method into TKIP.
>  I feel a little depressed :-(

A WPA supplicant is a process which negotiates keychanges for WPA.
wpa_supplicant is not the only WPA supplicant package available;
there's also NetworkManager and wicd.

Also, while you've improved your posting form significantly, and
that's greatly appreciated, it'd be even more helpful if you learned
to bottom-post rather than top-post.

https://en.wikipedia.org/wiki/Posting_style#Bottom-posting

(interleaved posting also works nicely)

-- 
:wq

Re: [gentoo-user] Re: [gentoo-user] 回复： [gentoo-user] Why iwconfig wlan0 enc can't work?

[Sebastian Beßler]

[-- Attachment #1: Type: text/plain, Size: 297 bytes --]

Am 21.10.2011 18:07, schrieb Michael Mol:

> A WPA supplicant is a process which negotiates keychanges for WPA.
> wpa_supplicant is not the only WPA supplicant package available;
> there's also NetworkManager and wicd.

NetworkManager and wicd uses wpa_supplicant, they don't replace it.


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 900 bytes --]

[gentoo-user] Re: [gentoo-user] Re: [gentoo-user] 回复： [gentoo-user] Why iwconfig wlan0 enc can't work?

[Andrey Moshbear]

On Fri, Oct 21, 2011 at 12:39, Sebastian Beßler
<sebastian@darkmetatron.de> wrote:
> Am 21.10.2011 18:07, schrieb Michael Mol:
>
>> A WPA supplicant is a process which negotiates keychanges for WPA.
>> wpa_supplicant is not the only WPA supplicant package available;
>> there's also NetworkManager and wicd.
>
> NetworkManager and wicd uses wpa_supplicant, they don't replace it.
>

NetworkManager and wicd are pretty much wpa_gui with a
post-connection restart of dhcpcd (dhcpcd -k $iface; dhcpcd $iface) or
whatever your dhcp client is.
And, to some degree, netplug.

Re: [gentoo-user] 回复： [gentoo-user] Why iwconfig wlan0 enc can't work?

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 1542 bytes --]

On Friday 21 Oct 2011 16:40:01 Lavender wrote:
> What!!!  I know wpa_supplicant don't support
>  AES encryption method ,so I use wireless tools......

Who told you that?


>  So it seems that I have to use wpa_supplicant and
>  change AES encryption method into TKIP.

No you don't, unless the AP is configured to work with WPA only and not WPA2.  
The latter uses CCMP.


>   I feel a little depressed :-(

Instead of feeling unnecessarily depressed, you may want to spend a few 
minutes studying the manual files and looking at the example or configuration 
files of applications that you intend to use:

Why do you think that wpa_supplicant does not support AES encryption?  The 
config file which is nicely commented shows:

=========================================
# pairwise: list of accepted pairwise (unicast) ciphers for WPA
# CCMP = AES in Counter mode with CBC-MAC [RFC 3610, IEEE 802.11i/D7.0]
=========================================

So to make your wireless connection work, emerge wpa_supplicant and add 
something like this in /etc/wpa_supplicant/wpa_supplicant.conf:

network={
       ssid="Rebellion"
       bssid=XX:XX:XX:XX:XX:XX  <--enter the AP MAC address
        proto=RSN
        key_mgmt=WPA-PSK
        pairwise=CCMP
        auth_alg=OPEN
        group=CCMP
        psk="ascii key goes in here"  <--use wpa_passphrase to create it
       priority=5
}


To learn how to use wpa_passphrase run:

  man wpa_passphrase 

in a terminal.


HTH.
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re:Re: [gentoo-user] 回复： [gentoo-user] Why iwconfig wlan0 enc can't work?

[Lavender]

[-- Attachment #1: Type: text/plain, Size: 343 bytes --]


>Who told you that?
>I searched information though internal search engine,
all I got was that wpa_supplicant don't support AES and
once I had tried it just like the configuration you gave ,
it failed ,so I thought wpa_supplicant  still don't support AES .
Sorry, I made a mistake :-( , but finally I make it ,I can connect
 the Internet .
>
 

[-- Attachment #2: Type: text/html, Size: 644 bytes --]

Re: [gentoo-user] 回复： [gentoo-user] Why iwconfig wlan0 enc can't work?

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 1236 bytes --]

On Saturday 22 Oct 2011 10:30:34 Lavender wrote:
> >Who told you that?
> >I searched information though internal search engine,
> 
> all I got was that wpa_supplicant don't support AES and
> once I had tried it just like the configuration you gave ,
> it failed ,so I thought wpa_supplicant  still don't support AES .
> Sorry, I made a mistake :-( , but finally I make it ,I can connect
>  the Internet . 

I'm glad you can now connect!  :-)

CCMP which stands for "Counter Mode with Cipher Block Chaining Message 
Authentication Code Protocol" uses the Counter Mode with CBC-MAC, which from 
what I understand uses 128bit AES ciphers.  So, as long as you set up 
wpa_supplicant to use proto=RSN with pairwise=CCMP and group=CCMP you will 
always connect with the AES encryption standard.

NOTE:  It is not necessary to specify CCMP because it is used by default as 
the first option, but if you don't specify it and the AP uses WPA/TKIP only, 
then instead of the connection failing wpa_supplicant will switch from CCMP to 
TKIP.  I'm stating the obvious here, but if having a wireless connection is 
more important than *always* using AES, then of course you do not need to 
specify CCMP.
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]