Hi Michael,

On 08/10/2025 15:40, Michael Tremer wrote:
Hello Adolf,

Thank you for testing this.

Could you send me the output of “iw list” as well please?

Here is the output

# iw list
Wiphy phy0
        wiphy index: 0
        max # scan SSIDs: 4
        max scan IEs length: 2257 bytes
        max # sched scan SSIDs: 0
        max # match sets: 0
        Retry short long limit: 2
        Coverage class: 0 (up to 0m)
        Device supports RSN-IBSS.
        Supported Ciphers:
                * WEP40 (00-0f-ac:1)
                * WEP104 (00-0f-ac:5)
                * TKIP (00-0f-ac:2)
                * CCMP-128 (00-0f-ac:4)
                * CCMP-256 (00-0f-ac:10)
                * GCMP-128 (00-0f-ac:8)
                * GCMP-256 (00-0f-ac:9)
                * CMAC (00-0f-ac:6)
                * CMAC-256 (00-0f-ac:13)
                * GMAC-128 (00-0f-ac:11)
                * GMAC-256 (00-0f-ac:12)
        Available Antennas: TX 0 RX 0
        Supported interface modes:
                 * IBSS
                 * managed
                 * AP
                 * AP/VLAN
                 * monitor
                 * mesh point
        Band 1:
                Capabilities: 0x2fe
                        HT20/HT40
                        SM Power Save disabled
                        RX Greenfield
                        RX HT20 SGI
                        RX HT40 SGI
                        TX STBC
                        RX STBC 2-streams
                        Max AMSDU length: 3839 bytes
                        No DSSS/CCK HT40
                Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
                Minimum RX AMPDU time spacing: 2 usec (0x04)
                HT TX/RX MCS rate indexes supported: 0-15, 32
                Bitrates (non-HT):
                        * 1.0 Mbps
                        * 2.0 Mbps (short preamble supported)
                        * 5.5 Mbps (short preamble supported)
                        * 11.0 Mbps (short preamble supported)
                        * 6.0 Mbps
                        * 9.0 Mbps
                        * 12.0 Mbps
                        * 18.0 Mbps
                        * 24.0 Mbps
                        * 36.0 Mbps
                        * 48.0 Mbps
                        * 54.0 Mbps
                Frequencies:
                        * 2412.0 MHz [1] (20.0 dBm)
                        * 2417.0 MHz [2] (20.0 dBm)
                        * 2422.0 MHz [3] (20.0 dBm)
                        * 2427.0 MHz [4] (20.0 dBm)
                        * 2432.0 MHz [5] (20.0 dBm)
                        * 2437.0 MHz [6] (20.0 dBm)
                        * 2442.0 MHz [7] (20.0 dBm)
                        * 2447.0 MHz [8] (20.0 dBm)
                        * 2452.0 MHz [9] (20.0 dBm)
                        * 2457.0 MHz [10] (20.0 dBm)
                        * 2462.0 MHz [11] (20.0 dBm)
                        * 2467.0 MHz [12] (20.0 dBm) (no IR)
                        * 2472.0 MHz [13] (20.0 dBm) (no IR)
                        * 2484.0 MHz [14] (20.0 dBm) (no IR)
        Band 2:
                Capabilities: 0x2fe
                        HT20/HT40
                        SM Power Save disabled
                        RX Greenfield
                        RX HT20 SGI
                        RX HT40 SGI
                        TX STBC
                        RX STBC 2-streams
                        Max AMSDU length: 3839 bytes
                        No DSSS/CCK HT40
                Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
                Minimum RX AMPDU time spacing: 2 usec (0x04)
                HT TX/RX MCS rate indexes supported: 0-15, 32
                Bitrates (non-HT):
                        * 6.0 Mbps
                        * 9.0 Mbps
                        * 12.0 Mbps
                        * 18.0 Mbps
                        * 24.0 Mbps
                        * 36.0 Mbps
                        * 48.0 Mbps
                        * 54.0 Mbps
                Frequencies:
                        * 5180.0 MHz [36] (20.0 dBm) (no IR)
                        * 5190.0 MHz [38] (20.0 dBm) (no IR)
                        * 5200.0 MHz [40] (20.0 dBm) (no IR)
                        * 5210.0 MHz [42] (20.0 dBm) (no IR)
                        * 5220.0 MHz [44] (20.0 dBm) (no IR)
                        * 5230.0 MHz [46] (20.0 dBm) (no IR)
                        * 5240.0 MHz [48] (20.0 dBm) (no IR)
                        * 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection)
                        * 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection)
                        * 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection)
                        * 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection)
                        * 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection)
                        * 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection)
                        * 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection)
                        * 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection)
                        * 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection)
                        * 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection)
                        * 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection)
                        * 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection)
                        * 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection)
                        * 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection)
                        * 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection)
                        * 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection)
                        * 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection)
                        * 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection)
                        * 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection)
                        * 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection)
                        * 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection)
                        * 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection)
                        * 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection)
                        * 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection)
                        * 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection)
                        * 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection)
                        * 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection)
                        * 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection)
                        * 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection)
                        * 5745.0 MHz [149] (20.0 dBm) (no IR)
                        * 5755.0 MHz [151] (20.0 dBm) (no IR)
                        * 5765.0 MHz [153] (20.0 dBm) (no IR)
                        * 5775.0 MHz [155] (20.0 dBm) (no IR)
                        * 5785.0 MHz [157] (20.0 dBm) (no IR)
                        * 5795.0 MHz [159] (20.0 dBm) (no IR)
                        * 5805.0 MHz [161] (20.0 dBm) (no IR)
                        * 5825.0 MHz [165] (20.0 dBm) (no IR)
                        * 4920.0 MHz [184] (disabled)
                        * 4940.0 MHz [188] (disabled)
                        * 4960.0 MHz [192] (disabled)
                        * 4980.0 MHz [196] (disabled)
        Supported commands:
                 * new_interface
                 * set_interface
                 * new_key
                 * start_ap
                 * new_station
                 * new_mpath
                 * set_mesh_config
                 * set_bss
                 * authenticate
                 * associate
                 * deauthenticate
                 * disassociate
                 * join_ibss
                 * join_mesh
                 * remain_on_channel
                 * set_tx_bitrate_mask
                 * frame
                 * frame_wait_cancel
                 * set_wiphy_netns
                 * set_channel
                 * probe_client
                 * set_noack_map
                 * register_beacons
                 * start_p2p_device
                 * set_mcast_rate
                 * testmode
                 * connect
                 * disconnect
                 * set_qos_map
                 * set_multicast_to_unicast
        software interface modes (can always be added):
                 * AP/VLAN
                 * monitor
        valid interface combinations:
                 * #{ AP, mesh point } <= 8,
                   total <= 8, #channels <= 1
        HT Capability overrides:
                 * MCS: ff ff ff ff ff ff ff ff ff ff
                 * maximum A-MSDU length
                 * supported channel width
                 * short GI for 40 MHz
                 * max A-MPDU length exponent
                 * min MPDU start spacing
        Device supports TX status socket option.
        Device supports HT-IBSS.
        Device supports SAE with AUTHENTICATE command
        Device supports low priority scan.
        Device supports scan flush.
        Device supports AP scan.
        Device supports per-vif TX power setting
        Driver supports full state transitions for AP/GO clients
        Driver supports a userspace MPM
        Device supports configuring vdev MAC-addr on create.
        max # scan plans: 1
        max scan plan interval: -1
        max scan plan iterations: 0
        Supported TX frame types:
                 * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 
0xb0 0xc0 0xd0 0xe0 0xf0
                 * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 
0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
                 * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 
0xb0 0xc0 0xd0 0xe0 0xf0
                 * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 
0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
                 * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 
0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
                 * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 
0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
                 * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 
0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
                 * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 
0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
        Supported RX frame types:
                 * IBSS: 0x40 0xb0 0xc0 0xd0
                 * managed: 0x40 0xb0 0xd0
                 * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
                 * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
                 * mesh point: 0xb0 0xc0 0xd0
                 * P2P-client: 0x40 0xd0
                 * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
                 * P2P-device: 0x40 0xd0
        Supported extended features:
                * [ RRM ]: RRM
                * [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
                * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
                * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
                * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
                * [ SCAN_RANDOM_SN ]: use random sequence numbers in scans
                * [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate 
IEs in scans
                * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 
control port support
                * [ DEL_IBSS_STA ]: deletion of IBSS station support
                * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
                * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for 
nl80211 control port support
                * [ POWERED_ADDR_CHANGE ]: can change MAC address while up


Regards,

Adolf.


Either I have an error somewhere checking for the [MAX-AMSDU-7935] capability, 
or the device claims to support it but actually doesn't.

-Michael

On 8 Oct 2025, at 14:38, Adolf Belka <[email protected]> wrote:

Hi Michael,

As mentioned at the monthly conf call I tested out today the wireless function 
in CU199 but it won't start for me.

Basically the code overwrites the WPA Passphrase in hostapd.conf with a 
directory. In the WUI the passphrase is still correctly shown. It is correctly 
stored in the wlanap/settings file. It is just not correct in the hostapd.conf 
file.

The first time I tried the update the WPA Passphrase was replaced with 
/srv/web/ipfire/cgi-bin/

The second time I tried the update it was overwritten by / which is the version 
shown below.

The hostapd.conf with CU197 (with 63 character Passphrase redacted) was

-------------------------------------
driver=nl80211
######################### basic hostapd configuration ##########################
#
country_code=NL
country3=0x49 # indoor
ieee80211d=1
ieee80211h=1
channel=6

# Always advertise TPC
local_pwr_constraint=3
spectrum_mgmt_required=1
hw_mode=g
ieee80211n=1
wmm_enabled=1
ht_capab=
# Enable logging
logger_syslog=-1
logger_syslog_level=4
auth_algs=1
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0
disassoc_low_ack=1

# SSID
ssid2="Jarnsaxa"
utf8_ssid=1

noscan=1
ieee80211w=0
######################### wpa hostapd configuration ############################
#
wpa=2
wpa_passphrase=***************************************************************
wpa_key_mgmt=WPA-PSK SAE
rsn_pairwise=CCMP
-------------------------------------

After the update the file contained

-------------------------------------
# Automatically generated configuration
# DO NOT EDIT
logger_syslog=-1
logger_syslog_level=4
driver=nl80211
country_code=NL
country3=0x49
ieee80211d=1
ieee80211h=1
channel=6
local_pwr_constraint=3
spectrum_mgmt_required=1
enable_background_radar=1
wmm_enabled=1
hw_mode=g
ieee80211n=1
ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] 
[MAX-AMSDU-7935] [SHORT-GI-20]
auth_algs=1
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0
disassoc_low_ack=1
ssid2="Jarnsaxa"
utf8_ssid=1
noscan=1
ieee80211w=0
wpa=2
wpa_passphrase=/
wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE
rsn_pairwise=CCMP
ssid_protection=1
extended_key_id=1
oce=7
interworking=1
access_network_type=0
internet=1
time_advertisement=2
multicast_to_unicast=1
-------------------------------------

The wireless log not surprisingly had a problem with the passphrase

15:00:00 hostapd:  blue0: interface state ENABLED->DISABLED
15:00:00 hostapd:  blue0: AP-DISABLED
15:00:00 hostapd:  blue0: CTRL-EVENT-TERMINATING
15:00:00 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
15:00:02 hostapd:  blue0: interface state UNINITIALIZED->COUNTRY_UPDATE
15:00:02 hostapd:  Driver does not support configured HT capability 
[MAX-AMSDU-7935]
15:00:02 hostapd:  blue0: interface state COUNTRY_UPDATE->DISABLED
15:00:02 hostapd:  blue0: AP-DISABLED
15:00:02 hostapd:  blue0: Unable to setup interface.
15:00:02 hostapd:  blue0: interface state DISABLED->DISABLED
15:00:02 hostapd:  blue0: AP-DISABLED
15:00:02 hostapd:  blue0: CTRL-EVENT-TERMINATING
15:00:02 hostapd:  hostapd_free_hapd_data: Interface blue0 wasn't started
15:00:02 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
15:04:57 hostapd:  Line 27: invalid WPA passphrase length 1 (expected 8..63)
15:04:57 hostapd:  WPA-PSK enabled, but PSK or passphrase is not configured.
15:04:57 hostapd:  2 errors found in configuration file '/etc/hostapd.conf'
15:04:57 hostapd:  Failed to set up interface with /etc/hostapd.conf
15:04:58 hostapd:  Failed to initialize interface

The log also mentions that the driver for the wireless chip in the Prime unit 
doesn't support a configured HT capability.
I am presuming that that issue is the second error hostapd found in the 
configuration file.

I have also just noticed that the hostapd.conf file that was used in CU197 is 
still physically present in /var/ipfire/wlanap/ while the new version is in 
/etc. Probably should delete the version from the old location if it is being 
replaced by the new version.

Regards,

Adolf.




Reply via email to