Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 Jul 2025 09:53:23 -0700
From:      Doug Ambrisko <ambrisko@ambrisko.com>
To:        freebsd-wireless@freebsd.org
Subject:   802.11w Management Frame Protection support?
Message-ID:  <aIO2g975JQzgEmL2@ambrisko.com>

index | next in thread | raw e-mail

Do we support management frame protection?  I'm using iwlwifi on -current.
Work now requires it so I can't connect anymore.  I did some testing
with OpenWRT at home and when I require 802.11w Management Frame Protection
then I can't connect.  Linux works fine.  Linux shows pmf=2 for
wpa_supplicant and when I set that doesn't help for FreeBSD.  I'm using
wpa_supplicant from ports which is the same version running on Linux.

With pmf=2 set in wpa_supplicant.conf in the debug output I see:
	wlan0:    skip RSN IE - no mgmt frame protection enabled but AP requires it
	wlan0:    reject due to mismatch with WPA/WPA2

without I see:
	bsd_set_key: alg=3 addr=0x23f788 key_idx=1 set_tx=0 seq_len=6 key_len=16
	wlan0: WPA: IGTK keyid 4 pn 000000000000
	WPA: IGTK - hexdump(len=16): [REMOVED]
	bsd_set_key: alg=4 addr=0x23f788 key_idx=4 set_tx=0 seq_len=6 key_len=16
	ioctl[SIOCS80211, op=19, val=0, arg_len=64]: Invalid argument
	wlan0: WPA: Failed to configure IGTK to the driver
	wlan0: RSN: Failed to configure IGTK

and then it disconnects.

802.11r Fast Transition in OpenWRT seems to work okay when I enable that
without PMF.

Thanks,

Doug A.


help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?aIO2g975JQzgEmL2>