From owner-freebsd-net@FreeBSD.ORG Wed Apr 9 20:43:08 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1765B1065672; Wed, 9 Apr 2008 20:43:08 +0000 (UTC) (envelope-from sam@freebsd.org) Received: from ebb.errno.com (ebb.errno.com [69.12.149.25]) by mx1.freebsd.org (Postfix) with ESMTP id DE6FC8FC14; Wed, 9 Apr 2008 20:43:07 +0000 (UTC) (envelope-from sam@freebsd.org) Received: from trouble.errno.com (trouble.errno.com [10.0.0.248]) (authenticated bits=0) by ebb.errno.com (8.13.6/8.12.6) with ESMTP id m39Kh7rG078338 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Apr 2008 13:43:07 -0700 (PDT) (envelope-from sam@freebsd.org) Message-ID: <47FD2A5B.6070706@freebsd.org> Date: Wed, 09 Apr 2008 13:43:07 -0700 From: Sam Leffler Organization: FreeBSD Project User-Agent: Thunderbird 2.0.0.9 (X11/20071125) MIME-Version: 1.0 To: Guido van Rooij References: <20080409130531.GA73375@gvr.gvr.org> <20080409141324.GA43689@lor.one-eyed-alien.net> <47FCEA99.4050000@freebsd.org> <20080409195831.GA79835@gvr.gvr.org> <20080409203840.GA80481@gvr.gvr.org> In-Reply-To: <20080409203840.GA80481@gvr.gvr.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-DCC--Metrics: ebb.errno.com; whitelist Cc: freebsd-net@freebsd.org, Brooks Davis Subject: Re: 802.1x for wired networks X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Apr 2008 20:43:08 -0000 Guido van Rooij wrote: > On Wed, Apr 09, 2008 at 09:58:31PM +0200, Guido van Rooij wrote: > >> wpa_supplicant send a EAPOL start (version 1, type start) >> procurve sends EAP failure (version 1, type: eap packet (code failure, id: 2) >> procurve send EAP request identify (veersion 1, type: eap packet (code: request >> type: identify). >> >> And that's it. wpa_supplicant does not respond. After a timeout, the >> start eapol packet is sent again. >> > > > After some research, it seems that wpa_supplicant is supposed to indeed > react to the requests identity with a repsonse identity. It does not > however. I verified that the multicast address as used by the switch > is the correct one. On the other hand it seems that the request identity > is not received.. > I tried debugging and it seems that indeed nothing is received (I asume > that reception of packets is handled in eloop.c:eloop_run(), > and I see no calling of eloop_sock_table_dispatch() there. > > Right now, I can't find thee place where a socket is created from which > to read the multicast frames. > I believe it's done w/ bpf and the important change for wired support was to accept mcast frames from the PAE mcast address. Like I said to you privately; you might try this on releng7 where it was tested by someone. Sam