topic Re: IW611, RT1064 Enterprise Security in Wi-Fi® + Bluetooth® + 802.15.4

IW611, RT1064 Enterprise Security

rtwheato — Thu, 16 May 2024 22:35:37 GMT

Trying to get enterprise network connectivity working using the wpa_supplicant-rtos SDK example project from the 2.15.100 SDK, but not able to connect to the external AP. I verified connectivity using wpa2-psk but I am not able to do the same using wpa2 enterprise mode.

Using the command line interface, I added a profile using these commands

wlan-add peapProfile ssid myTestRouter eap-peap-tls id client1 key_passwd password1

CLI says that profile is added. But, when I run the command

wlan-connect peapProfile

I see network not found response after a few seconds. Next, I tried the below profile

wlan-add tlsProfile ssid myTestRouter eap-tls id client1 key_passwd password1

CLI says that profile is added. But, when I run the command

wlan-connect tlsProfile

I see network not found response

In both cases, I am not able to see any log messages printed by freeRadius server.

In the code, I defined

#define CONFIG_WPA_SUPP_CRYPTO_ENTERPRISE

and undefined these authentication methods

/* #define CONFIG_EAP_SIM #define CONFIG_EAP_AKA #define CONFIG_EAP_AKA_PRIME */

In app_config.h, I defined the board type as

WIFI_IW611_BOARD_MURATA_2DL_USD

There has been some success using only AES encryption, but nothing at all is showing up or working for AES+TKIP.

What are the steps necessary to get WPA2 Enterprise working using the i.MX RT1064 SDK?

Re: IW611, RT1064 Enterprise Security

shaun_wu — Tue, 21 May 2024 07:35:31 GMT

Hello @rtwheato

Following way you used is correct steps, could you share return logs after connection?

wlan-add tlsProfile ssid myTestRouter eap-tls id client1 key_passwd password1

wlan-connect tlsProfile

Best Regards

Shaun

Re: IW611, RT1064 Enterprise Security

rtwheato — Tue, 21 May 2024 22:54:59 GMT

apologies @shaun_wu, I thought I included the log in the original post. attached.

Re: IW611, RT1064 Enterprise Security

shaun_wu — Wed, 29 May 2024 09:29:36 GMT

Hello @rtwheato

looks like RADIUS problem, did you successfully setup radius server?

Best Regards

SHaun

Re: IW611, RT1064 Enterprise Security

rtwheato — Wed, 29 May 2024 15:00:39 GMT

@shaun_wu

yes. the freeRADIUS server has been tested against other devices and works successfully. I'm able to connect to the enterprise network using my cellphone and PC.

Please note that wlan-scan reports that my router settings as WPA2 when the encryption setting in router is TKIP+AES and WPA2 Enterprise when router setting is AES only. In the case of TKIP+AES also it should have reported as WPA2 Enterprise. Connections work with AES only but not TKIP+AES.

Re: IW611, RT1064 Enterprise Security

shaun_wu — Mon, 03 Jun 2024 03:21:29 GMT

Hello @rtwheato

Do you porting iw611 to rt1064 yourself? Seems no problem no RT1170EVKB and RT1060EVKC which defiault supported by NXP official release.

Best Regards

Shaun

Re: IW611, RT1064 Enterprise Security

rtwheato — Mon, 03 Jun 2024 14:11:54 GMT

you're correct that AES enterprise works, but not TKIP+AES.

Can you try it and let me know how you got it to work?