[Olsr-users] Encryption in ad-hoc network using Openwrt+OLSR

[Ben West]

Hi Andrea,

Please note the 'encryption=psk2' option is the one I've verified to work.
'encryption=psk2+aes' actually does not enable any encryption.
Furthermore, I'm not sure the precompiled images for OpenWRT v12.09 support
IBSS-RSN reliably.  I'm using r39928 which I compiled myself, I believe
versions newer than r37xxx are preferred for reliably IBSS-RSN.

The 'wmesh' name given for the first interface stanza is not mandatory.  I
give my wireless virtual interfaces explicit names to make configuration
changes via UCI command tools easier.  In addition, the "beacon_int" option
is also not mandatory; it just sets a beacon interval to a known value.

Besides that, do please note the device options /etc/config/wireless file
will vary from device to device, in particular the "ht_capab" options
listed do need to match your radio's capabilities.  You can try
regenerating the minimal wireless config for your device file by
removing/backing-up your existing /etc/config/wireless, and then reading
the output "wifi detect" run at the shell prompt.



On Mon, Apr 7, 2014 at 7:34 AM, Andrea Mannoni <(spam-protected)>wrote:

> Hi ,
>
> thanks for your comments.
>
> I tried to modify the two scripts that you cited:
>
>
>    - -* /etc/config/wireless* in this way (i removed the last three raws
>    of the first block "option_beacon......." until "option disabed..."):
>
>
> config wifi-device  radio0
>     option type     mac80211
>     option channel  11
>
>     option hwmode   11ng
>     option macaddr  DC:XX:XX:XX:XX:XX
>     option htmode   HT20
>     list ht_capab   SHORT-GI-20
>     list ht_capab   SHORT-GI-40
>     list ht_capab   TX-STBC
>     list ht_capab   RX-STBC1
>     list ht_capab   DSSS_CCK-40
>     option beacon_int       337
>     # REMOVE THIS LINE TO ENABLE WIFI:
>     option disabled 0
>
> config wifi-iface wmesh
>     option network 'mesh'
>     option mode 'adhoc'
>     option device 'radio0'
>     option ssid 'MyMesh'
>     option bssid '02:CA:FF:EE:BA:BE'
>     option encryption 'psk2+aes'
>     option key 'areallyreallyreallyreallystrongpassword'
>
> *First question*: it's mandatory the part "wmesh" at the beginning of the
> first raw of the second block?
>
>
>    - Second change at the file */var/run/wpa_supplicant-wlan0.conf  *in
>    this mode*:*
>
>
>
>    -
>
>    ap_scan=2
>    network={
>        mode=1
>        scan_ssid=0
>        ssid="MyMesh"
>        bssid=02:CA:FF:EE:BA:BE
>        key_mgmt=WPA-PSK
>        proto=RSN
>        frequency=24xx
>        fixed_freq=1
>        mcast_rate=XX
>        psk="areallyreallyreallystrongpassword"
>    }
>
>
>
> Afther this changes, i tried to connect to the ad-hoc network with my
> laptop and it seems to by encrypted but it seems that the wi-fi card
> doesn't work....!? I'm using atheros art71xx A.A. 12.09 with Picostation
> M2-HP.
>
> Where I'm wrong? Have you other advices?
>
> Thanks.
>
> Andrea.
>
>
> 2014-04-04 8:49 GMT+02:00 Ben West <(spam-protected)>:
>
> Sorry for being ambiguous.  My experience has been that either of these
>> package selections ...
>>
>> A. wpad
>> B. wpa_supplicant & hostapd, which are complimentary
>>
>> ... enable IBSS-RSN WPA encryption.  Selecting all 3, i.e. wpad,
>> wpa_supplicant, and hostapd, cause conflicts.  Also, I think hostapd +
>> wpa_supplicant is possibly slated for obsolescence at some point (even
>> though these packages are all basically invoking bits from the same hostapd
>> tarball).
>>
>> I've been using the wpad package with encryption=psk2+aes w/o problem on
>> r38xxx revisions of OpenWRT AA and higher.
>>
>> The Commotion folks are actually using wpad_mini, patched to include
>> IBSS_RSN.  That works fine, too, and I can share the patch if you don't
>> mind cluttering your build tree.
>>
>>
>>
>> On Fri, Apr 4, 2014 at 1:26 AM, Henning Rogge <(spam-protected)> wrote:
>>
>>> On Thu, Apr 3, 2014 at 6:02 PM, Ben West <(spam-protected)> wrote:
>>> > This is possible in current generations of OpenWRT Attitude Adjustment,
>>> > although I'm not completely sure if the pre-compiled v12.09 binaries
>>> support
>>> > it reliably.  It is called IBSS-RSN.  You would need to include the
>>> package
>>> > wpad or hostapd + wpa_supplicant.  The wpad_mini package as-is doesn't
>>> > include IBSS-RSN support.
>>>
>>> Just to make sure to get this right...
>>>
>>> is wpad alone enough? "wpad or (hostapd + wpa_supplicant)"
>>>
>>> or do I need wpad and wpa_supplicant? " (wpad or hostapd) and
>>> wpa_supplicant"
>>>
>>> I am in the process of building an OpenWRT image for our "dlep based
>>> hybrid node design" and would like to support the wpa2 mode.
>>>
>>> Henning Rogge
>>>
>>
>>
>>
>> --
>> Ben West
>> http://gowasabi.net
>> (spam-protected)
>> 314-246-9434
>>
>
>
>
> --
> Andrea Mannoni
> *Research Fellow at STO NATO-CMRE* (*Centre for Maritime Research and
> Experimentation*)
> Oristano, via Pesaria n°10
> Mobile: 3408251376
> Mobile2:3298282487
> Skype:andrea_mannoni
> e-mail: (spam-protected)
>



-- 
Ben West
http://gowasabi.net
(spam-protected)
314-246-9434
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.olsr.org/pipermail/olsr-users/attachments/20140407/5fb8da9c/attachment.html>