Thank you. That confirms it. This change will fix it. Most of the bits have been wrong. I have no idea what happened there…
https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=0c6f6f182d0b2ac78d869582e7e2e2f8babecab5 On my system this also changes some settings. Best, -Michael > On 8 Oct 2025, at 14:45, Adolf Belka <[email protected]> wrote: > > Hi Michael, > > On 08/10/2025 15:40, Michael Tremer wrote: >> Hello Adolf, >> Thank you for testing this. >> Could you send me the output of “iw list” as well please? > > Here is the output > > # iw list > Wiphy phy0 > wiphy index: 0 > max # scan SSIDs: 4 > max scan IEs length: 2257 bytes > max # sched scan SSIDs: 0 > max # match sets: 0 > Retry short long limit: 2 > Coverage class: 0 (up to 0m) > Device supports RSN-IBSS. > Supported Ciphers: > * WEP40 (00-0f-ac:1) > * WEP104 (00-0f-ac:5) > * TKIP (00-0f-ac:2) > * CCMP-128 (00-0f-ac:4) > * CCMP-256 (00-0f-ac:10) > * GCMP-128 (00-0f-ac:8) > * GCMP-256 (00-0f-ac:9) > * CMAC (00-0f-ac:6) > * CMAC-256 (00-0f-ac:13) > * GMAC-128 (00-0f-ac:11) > * GMAC-256 (00-0f-ac:12) > Available Antennas: TX 0 RX 0 > Supported interface modes: > * IBSS > * managed > * AP > * AP/VLAN > * monitor > * mesh point > Band 1: > Capabilities: 0x2fe > HT20/HT40 > SM Power Save disabled > RX Greenfield > RX HT20 SGI > RX HT40 SGI > TX STBC > RX STBC 2-streams > Max AMSDU length: 3839 bytes > No DSSS/CCK HT40 > Maximum RX AMPDU length 65535 bytes (exponent: 0x003) > Minimum RX AMPDU time spacing: 2 usec (0x04) > HT TX/RX MCS rate indexes supported: 0-15, 32 > Bitrates (non-HT): > * 1.0 Mbps > * 2.0 Mbps (short preamble supported) > * 5.5 Mbps (short preamble supported) > * 11.0 Mbps (short preamble supported) > * 6.0 Mbps > * 9.0 Mbps > * 12.0 Mbps > * 18.0 Mbps > * 24.0 Mbps > * 36.0 Mbps > * 48.0 Mbps > * 54.0 Mbps > Frequencies: > * 2412.0 MHz [1] (20.0 dBm) > * 2417.0 MHz [2] (20.0 dBm) > * 2422.0 MHz [3] (20.0 dBm) > * 2427.0 MHz [4] (20.0 dBm) > * 2432.0 MHz [5] (20.0 dBm) > * 2437.0 MHz [6] (20.0 dBm) > * 2442.0 MHz [7] (20.0 dBm) > * 2447.0 MHz [8] (20.0 dBm) > * 2452.0 MHz [9] (20.0 dBm) > * 2457.0 MHz [10] (20.0 dBm) > * 2462.0 MHz [11] (20.0 dBm) > * 2467.0 MHz [12] (20.0 dBm) (no IR) > * 2472.0 MHz [13] (20.0 dBm) (no IR) > * 2484.0 MHz [14] (20.0 dBm) (no IR) > Band 2: > Capabilities: 0x2fe > HT20/HT40 > SM Power Save disabled > RX Greenfield > RX HT20 SGI > RX HT40 SGI > TX STBC > RX STBC 2-streams > Max AMSDU length: 3839 bytes > No DSSS/CCK HT40 > Maximum RX AMPDU length 65535 bytes (exponent: 0x003) > Minimum RX AMPDU time spacing: 2 usec (0x04) > HT TX/RX MCS rate indexes supported: 0-15, 32 > Bitrates (non-HT): > * 6.0 Mbps > * 9.0 Mbps > * 12.0 Mbps > * 18.0 Mbps > * 24.0 Mbps > * 36.0 Mbps > * 48.0 Mbps > * 54.0 Mbps > Frequencies: > * 5180.0 MHz [36] (20.0 dBm) (no IR) > * 5190.0 MHz [38] (20.0 dBm) (no IR) > * 5200.0 MHz [40] (20.0 dBm) (no IR) > * 5210.0 MHz [42] (20.0 dBm) (no IR) > * 5220.0 MHz [44] (20.0 dBm) (no IR) > * 5230.0 MHz [46] (20.0 dBm) (no IR) > * 5240.0 MHz [48] (20.0 dBm) (no IR) > * 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection) > * 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection) > * 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection) > * 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection) > * 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection) > * 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection) > * 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection) > * 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection) > * 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection) > * 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection) > * 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection) > * 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection) > * 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection) > * 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection) > * 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection) > * 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection) > * 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection) > * 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection) > * 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection) > * 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection) > * 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection) > * 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection) > * 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection) > * 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection) > * 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection) > * 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection) > * 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection) > * 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection) > * 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection) > * 5745.0 MHz [149] (20.0 dBm) (no IR) > * 5755.0 MHz [151] (20.0 dBm) (no IR) > * 5765.0 MHz [153] (20.0 dBm) (no IR) > * 5775.0 MHz [155] (20.0 dBm) (no IR) > * 5785.0 MHz [157] (20.0 dBm) (no IR) > * 5795.0 MHz [159] (20.0 dBm) (no IR) > * 5805.0 MHz [161] (20.0 dBm) (no IR) > * 5825.0 MHz [165] (20.0 dBm) (no IR) > * 4920.0 MHz [184] (disabled) > * 4940.0 MHz [188] (disabled) > * 4960.0 MHz [192] (disabled) > * 4980.0 MHz [196] (disabled) > Supported commands: > * new_interface > * set_interface > * new_key > * start_ap > * new_station > * new_mpath > * set_mesh_config > * set_bss > * authenticate > * associate > * deauthenticate > * disassociate > * join_ibss > * join_mesh > * remain_on_channel > * set_tx_bitrate_mask > * frame > * frame_wait_cancel > * set_wiphy_netns > * set_channel > * probe_client > * set_noack_map > * register_beacons > * start_p2p_device > * set_mcast_rate > * testmode > * connect > * disconnect > * set_qos_map > * set_multicast_to_unicast > software interface modes (can always be added): > * AP/VLAN > * monitor > valid interface combinations: > * #{ AP, mesh point } <= 8, > total <= 8, #channels <= 1 > HT Capability overrides: > * MCS: ff ff ff ff ff ff ff ff ff ff > * maximum A-MSDU length > * supported channel width > * short GI for 40 MHz > * max A-MPDU length exponent > * min MPDU start spacing > Device supports TX status socket option. > Device supports HT-IBSS. > Device supports SAE with AUTHENTICATE command > Device supports low priority scan. > Device supports scan flush. > Device supports AP scan. > Device supports per-vif TX power setting > Driver supports full state transitions for AP/GO clients > Driver supports a userspace MPM > Device supports configuring vdev MAC-addr on create. > max # scan plans: 1 > max scan plan interval: -1 > max scan plan iterations: 0 > Supported TX frame types: > * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 > 0xe0 0xf0 > * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 > 0xd0 0xe0 0xf0 > * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 > 0xe0 0xf0 > * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 > 0xd0 0xe0 0xf0 > * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 > 0xc0 0xd0 0xe0 0xf0 > * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 > 0xc0 0xd0 0xe0 0xf0 > * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 > 0xd0 0xe0 0xf0 > * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 > 0xc0 0xd0 0xe0 0xf0 > Supported RX frame types: > * IBSS: 0x40 0xb0 0xc0 0xd0 > * managed: 0x40 0xb0 0xd0 > * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 > * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 > * mesh point: 0xb0 0xc0 0xd0 > * P2P-client: 0x40 0xd0 > * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 > * P2P-device: 0x40 0xd0 > Supported extended features: > * [ RRM ]: RRM > * [ FILS_STA ]: STA FILS (Fast Initial Link Setup) > * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records > * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211 > * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs > * [ SCAN_RANDOM_SN ]: use random sequence numbers in scans > * [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate IEs in scans > * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port > support > * [ DEL_IBSS_STA ]: deletion of IBSS station support > * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support > * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port > support > * [ POWERED_ADDR_CHANGE ]: can change MAC address while up > > > Regards, > > Adolf. > >> Either I have an error somewhere checking for the [MAX-AMSDU-7935] >> capability, or the device claims to support it but actually doesn't. >> -Michael >>> On 8 Oct 2025, at 14:38, Adolf Belka <[email protected]> wrote: >>> >>> Hi Michael, >>> >>> As mentioned at the monthly conf call I tested out today the wireless >>> function in CU199 but it won't start for me. >>> >>> Basically the code overwrites the WPA Passphrase in hostapd.conf with a >>> directory. In the WUI the passphrase is still correctly shown. It is >>> correctly stored in the wlanap/settings file. It is just not correct in the >>> hostapd.conf file. >>> >>> The first time I tried the update the WPA Passphrase was replaced with >>> /srv/web/ipfire/cgi-bin/ >>> >>> The second time I tried the update it was overwritten by / which is the >>> version shown below. >>> >>> The hostapd.conf with CU197 (with 63 character Passphrase redacted) was >>> >>> ------------------------------------- >>> driver=nl80211 >>> ######################### basic hostapd configuration >>> ########################## >>> # >>> country_code=NL >>> country3=0x49 # indoor >>> ieee80211d=1 >>> ieee80211h=1 >>> channel=6 >>> >>> # Always advertise TPC >>> local_pwr_constraint=3 >>> spectrum_mgmt_required=1 >>> hw_mode=g >>> ieee80211n=1 >>> wmm_enabled=1 >>> ht_capab= >>> # Enable logging >>> logger_syslog=-1 >>> logger_syslog_level=4 >>> auth_algs=1 >>> ctrl_interface=/var/run/hostapd >>> ctrl_interface_group=0 >>> disassoc_low_ack=1 >>> >>> # SSID >>> ssid2="Jarnsaxa" >>> utf8_ssid=1 >>> >>> noscan=1 >>> ieee80211w=0 >>> ######################### wpa hostapd configuration >>> ############################ >>> # >>> wpa=2 >>> wpa_passphrase=*************************************************************** >>> wpa_key_mgmt=WPA-PSK SAE >>> rsn_pairwise=CCMP >>> ------------------------------------- >>> >>> After the update the file contained >>> >>> ------------------------------------- >>> # Automatically generated configuration >>> # DO NOT EDIT >>> logger_syslog=-1 >>> logger_syslog_level=4 >>> driver=nl80211 >>> country_code=NL >>> country3=0x49 >>> ieee80211d=1 >>> ieee80211h=1 >>> channel=6 >>> local_pwr_constraint=3 >>> spectrum_mgmt_required=1 >>> enable_background_radar=1 >>> wmm_enabled=1 >>> hw_mode=g >>> ieee80211n=1 >>> ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] >>> [MAX-AMSDU-7935] [SHORT-GI-20] >>> auth_algs=1 >>> ctrl_interface=/var/run/hostapd >>> ctrl_interface_group=0 >>> disassoc_low_ack=1 >>> ssid2="Jarnsaxa" >>> utf8_ssid=1 >>> noscan=1 >>> ieee80211w=0 >>> wpa=2 >>> wpa_passphrase=/ >>> wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE >>> rsn_pairwise=CCMP >>> ssid_protection=1 >>> extended_key_id=1 >>> oce=7 >>> interworking=1 >>> access_network_type=0 >>> internet=1 >>> time_advertisement=2 >>> multicast_to_unicast=1 >>> ------------------------------------- >>> >>> The wireless log not surprisingly had a problem with the passphrase >>> >>> 15:00:00 hostapd: blue0: interface state ENABLED->DISABLED >>> 15:00:00 hostapd: blue0: AP-DISABLED >>> 15:00:00 hostapd: blue0: CTRL-EVENT-TERMINATING >>> 15:00:00 hostapd: nl80211: deinit ifname=blue0 disabled_11b_rates=0 >>> 15:00:02 hostapd: blue0: interface state UNINITIALIZED->COUNTRY_UPDATE >>> 15:00:02 hostapd: Driver does not support configured HT capability >>> [MAX-AMSDU-7935] >>> 15:00:02 hostapd: blue0: interface state COUNTRY_UPDATE->DISABLED >>> 15:00:02 hostapd: blue0: AP-DISABLED >>> 15:00:02 hostapd: blue0: Unable to setup interface. >>> 15:00:02 hostapd: blue0: interface state DISABLED->DISABLED >>> 15:00:02 hostapd: blue0: AP-DISABLED >>> 15:00:02 hostapd: blue0: CTRL-EVENT-TERMINATING >>> 15:00:02 hostapd: hostapd_free_hapd_data: Interface blue0 wasn't started >>> 15:00:02 hostapd: nl80211: deinit ifname=blue0 disabled_11b_rates=0 >>> 15:04:57 hostapd: Line 27: invalid WPA passphrase length 1 (expected 8..63) >>> 15:04:57 hostapd: WPA-PSK enabled, but PSK or passphrase is not configured. >>> 15:04:57 hostapd: 2 errors found in configuration file '/etc/hostapd.conf' >>> 15:04:57 hostapd: Failed to set up interface with /etc/hostapd.conf >>> 15:04:58 hostapd: Failed to initialize interface >>> >>> The log also mentions that the driver for the wireless chip in the Prime >>> unit doesn't support a configured HT capability. >>> I am presuming that that issue is the second error hostapd found in the >>> configuration file. >>> >>> I have also just noticed that the hostapd.conf file that was used in CU197 >>> is still physically present in /var/ipfire/wlanap/ while the new version is >>> in /etc. Probably should delete the version from the old location if it is >>> being replaced by the new version. >>> >>> Regards, >>> >>> Adolf. >>> > >
