From owner-freebsd-wireless@FreeBSD.ORG  Sun Mar 29 13:31:59 2015
Return-Path: <owner-freebsd-wireless@FreeBSD.ORG>
Delivered-To: freebsd-wireless@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id B6A353F3
 for <freebsd-wireless@freebsd.org>; Sun, 29 Mar 2015 13:31:59 +0000 (UTC)
Received: from system.jails.se (unknown [IPv6:2001:16d8:cc1e:1::1])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 0DC60178
 for <freebsd-wireless@freebsd.org>; Sun, 29 Mar 2015 13:31:58 +0000 (UTC)
Received: from system.jails.se (system.jails.se [172.31.20.14])
 by system.jails.se (Postfix) with SMTP id AA5B338FD40
 for <freebsd-wireless@freebsd.org>; Sun, 29 Mar 2015 15:31:44 +0200 (CEST)
Received: from klein.pean.org (klein.pean.org [IPv6:2001:16d8:ff9f::60])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by system.jails.se (Postfix) with ESMTPSA id 8EA4A38FD3C
 for <freebsd-wireless@freebsd.org>; Sun, 29 Mar 2015 15:31:43 +0200 (CEST)
From: =?utf-8?Q?Peter_Ankerst=C3=A5l?= <peter@pean.org>
Content-Type: multipart/signed;
 boundary="Apple-Mail=_E5115A5F-7D1C-4F16-AD08-457438DEF775";
 protocol="application/pkcs7-signature"; micalg=sha1
Subject: WPA2 Enterprise with hostapd and iphone
Message-Id: <2643C4C9-AE61-4F14-9DE4-2272C0FFCEE2@pean.org>
Date: Sun, 29 Mar 2015 15:31:23 +0200
To: freebsd-wireless@freebsd.org
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\))
X-Mailer: Apple Mail (2.2070.6)
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Sun Mar 29 15:31:44 2015
X-DSPAM-Confidence: 1.0000
X-DSPAM-Probability: 0.0023
X-DSPAM-Signature: 5517fec015281406845711
X-DSPAM-Factors: 27, STA+#+Response+#+25, 0.40000,
 STA+#+Response+#+25, 0.40000,
 mgmt+#+EAP+wpa+pairwise, 0.40000, code+#+#+108, 0.40000,
 220+#+29+15+15, 0.40000, authorizing, 0.40000,
 EAP+Packet+identifier+112+Mar, 0.40000,
 dhcpd+#+on+172, 0.40000, 25+0+#+to, 0.40000,
 and+#+The, 0.40000, 29+gw+hostapd, 0.40000,
 29+gw+hostapd, 0.40000,
 conf+#+interface+wlan0+driver, 0.40000, 2+#+#+mgmt, 0.40000,
 ssid+#+#+2, 0.40000, FreeBSD+#+#+#+p1, 0.40000,
 78+7b+WPA+PMKID, 0.40000, server+1+eapol, 0.40000,
 WPA+#+3+#+msg, 0.40000, 10+1+#+p1, 0.40000,
 10+1+#+p1, 0.40000, work+fine+at, 0.40000,
 112+Mar+29+15+14, 0.40000,
 2+r275849+hostapd+v+hostapd, 0.40000, 3a+#+78+#+Mar, 0.40000,
 3a+#+78+#+Mar, 0.40000, dhcpd+DHCPREQUEST+#+#+25, 0.40000
X-BeenThere: freebsd-wireless@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Discussions of 802.11 stack,
 tools device driver development." <freebsd-wireless.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-wireless>, 
 <mailto:freebsd-wireless-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-wireless/>
List-Post: <mailto:freebsd-wireless@freebsd.org>
List-Help: <mailto:freebsd-wireless-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-wireless>, 
 <mailto:freebsd-wireless-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Mar 2015 13:31:59 -0000


--Apple-Mail=_E5115A5F-7D1C-4F16-AD08-457438DEF775
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Hi!

I have problems with my iphone since i switched to wpa2 enterprise on my =
home network. (All other devices work fine including ipad and macs). The =
connection seems to work fine at first but then it gets REALLY slow or =
no connection at all. (but iOS still shows it as connected).

machine:=20
FreeBSD gw 10.1-RELEASE-p1 FreeBSD 10.1-RELEASE-p1 #2 r275849

# hostapd -v
hostapd v2.0
User space daemon for IEEE 802.11 AP management,
IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
Copyright (c) 2002-2012, Jouni Malinen <j@w1.fi> and contributors

hostapd.conf:
=E2=80=94
interface=3Dwlan0
driver=3Dbsd
logger_syslog=3D-1
logger_syslog_level=3D0
ctrl_interface=3D/var/run/hostapd
ctrl_interface_group=3Dwheel
ssid=3Dweb
wpa=3D2
wpa_key_mgmt=3DWPA-EAP
wpa_pairwise=3DTKIP CCMP
macaddr_acl=3D0
auth_algs=3D1
own_ip_addr=3D127.0.0.1
ieee8021x=3D1
eap_server=3D1
eapol_version=3D1
eap_user_file=3D/etc/hostapd_eap_user
ca_cert=3D/etc/ssl/startssl.ca.pem
server_cert=3D/etc/ssl/auth.pean.org/auth.pean.org.crt
private_key=3D/etc/ssl/auth.pean.org/auth.pean.org.key
=E2=80=94

This is what hostapd spits out when I connect with the phone:

=E2=80=94
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: event 1 =
notification
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
start authentication
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: start =
authentication
Mar 29 15:14:08 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:14:08 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
unauthorizing port
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 105)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D105 len=3D19) from STA: EAP =
Response-Identity (1)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 106)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D106 len=3D152) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 107)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D107 len=3D6) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 108)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D108 len=3D6) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 109)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D109 len=3D6) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 110)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D110 len=3D592) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 111)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D111 len=3D6) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 112)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D112 len=3D59) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 113)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D113 len=3D107) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 114)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D114 len=3D43) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:08 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 115)
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
received EAP packet (code=3D2 id=3D115 len=3D43) from STA: EAP =
Response-PEAP (25)
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 115)
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: sending =
1/4 msg of 4-Way Handshake
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: received =
EAPOL-Key frame (2/4 Pairwise)
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: sending =
3/4 msg of 4-Way Handshake
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: received =
EAPOL-Key frame (4/4 Pairwise)
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: pairwise =
key handshake completed (RSN)
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
authorizing port
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b RADIUS: =
starting accounting session 54E5E3BB-00000E3D
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
authenticated - EAP type: 0 ((null))
Mar 29 15:14:09 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: Added =
PMKSA cache entry (IEEE 802.1X)
Mar 29 15:14:09 gw dhcpd: DHCPREQUEST for 172.25.0.70 from =
cb:aa:3a:a1:78:7b via bridge0
Mar 29 15:14:09 gw dhcpd: DHCPACK on 172.25.0.70 to cb:aa:3a:a1:78:7b =
via bridge0
Mar 29 15:15:20 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:20 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: event 1 =
notification
Mar 29 15:15:20 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: event 4 =
notification
Mar 29 15:15:20 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:20 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b WPA: event 1 =
notification
Mar 29 15:15:20 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
start authentication
Mar 29 15:15:20 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b WPA: start =
authentication
Mar 29 15:15:20 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:20 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DISASSOCIATE.indication(cb:aa:3a:a1:78:7b, 1)
Mar 29 15:15:20 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DELETEKEYS.request(cb:aa:3a:a1:78:7b)
Mar 29 15:15:20 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DISASSOCIATE.indication(cb:aa:3a:a1:78:7b, 1)
Mar 29 15:15:20 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DELETEKEYS.request(cb:aa:3a:a1:78:7b)
Mar 29 15:15:20 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DISASSOCIATE.indication(cb:aa:3a:a1:78:7b, 1)
Mar 29 15:15:20 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DELETEKEYS.request(cb:aa:3a:a1:78:7b)
Mar 29 15:15:28 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:28 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: PMKID =
found from PMKSA cache eap_type=3D0 vlan_id=3D0
Mar 29 15:15:28 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: event 1 =
notification
Mar 29 15:15:28 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
start authentication
Mar 29 15:15:28 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
PMK from PMKSA cache - skip IEEE 802.1X/EAP
Mar 29 15:15:28 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: sending =
1/4 msg of 4-Way Handshake
Mar 29 15:15:28 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:28 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b WPA: event 1 =
notification
Mar 29 15:15:28 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
start authentication
Mar 29 15:15:28 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:28 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DISASSOCIATE.indication(cb:aa:3a:a1:78:7b, 1)
Mar 29 15:15:28 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DELETEKEYS.request(cb:aa:3a:a1:78:7b)
Mar 29 15:15:28 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DISASSOCIATE.indication(cb:aa:3a:a1:78:7b, 1)
Mar 29 15:15:28 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DELETEKEYS.request(cb:aa:3a:a1:78:7b)
Mar 29 15:15:28 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DISASSOCIATE.indication(cb:aa:3a:a1:78:7b, 1)
Mar 29 15:15:28 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DELETEKEYS.request(cb:aa:3a:a1:78:7b)
Mar 29 15:15:29 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: EAPOL-Key =
timeout
Mar 29 15:15:29 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: sending =
1/4 msg of 4-Way Handshake
Mar 29 15:15:30 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: EAPOL-Key =
timeout
Mar 29 15:15:30 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: sending =
1/4 msg of 4-Way Handshake
Mar 29 15:15:31 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: EAPOL-Key =
timeout
Mar 29 15:15:31 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: sending =
1/4 msg of 4-Way Handshake
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: EAPOL-Key =
timeout
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: PTKSTART: =
Retry limit 4 reached
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: event 3 =
notification
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
disassociated
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: event 2 =
notification
Mar 29 15:15:32 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
disassociated
Mar 29 15:15:32 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b WPA: event 2 =
notification
Mar 29 15:15:32 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
disassociated
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: event 1 =
notification
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
start authentication
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: start =
authentication
Mar 29 15:15:32 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:32 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b WPA: event 1 =
notification
Mar 29 15:15:32 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
start authentication
Mar 29 15:15:32 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b WPA: start =
authentication
Mar 29 15:15:32 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
associated
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DISASSOCIATE.indication(cb:aa:3a:a1:78:7b, 1)
Mar 29 15:15:32 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b MLME: =
MLME-DELETEKEYS.request(cb:aa:3a:a1:78:7b)
Mar 29 15:15:32 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
unauthorizing port
Mar 29 15:15:32 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.1X: =
Sending EAP Packet (identifier 220)
Mar 29 15:15:56 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
disassociated
Mar 29 15:15:56 gw hostapd: wlan0: STA cb:aa:3a:a1:78:7b WPA: event 2 =
notification
Mar 29 15:15:56 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
disassociated
Mar 29 15:15:56 gw hostapd: wlan1: STA cb:aa:3a:a1:78:7b WPA: event 2 =
notification
Mar 29 15:15:56 gw hostapd: wlan2: STA cb:aa:3a:a1:78:7b IEEE 802.11: =
disassociated
=E2=80=94


--Apple-Mail=_E5115A5F-7D1C-4F16-AD08-457438DEF775
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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=
--Apple-Mail=_E5115A5F-7D1C-4F16-AD08-457438DEF775--