Configuring 802.1x in WP8XX and GWN76XX Access Point

by

Description

This article describes the simple steps on how we configure 802.1X authentication protocol in WP810 and GWN76XX Access Point.

Steps

  1. Configure a Radius Server, you may follow this guide to install a FreeRadius server in a separate machine.
  2. At GWN76XX, create a SSID (the SSID is named as ‘CaptivePortal’ in this example), and select 802.1x as WPA Key Mode. Key in Radius Server Address, Radius Server Secret and Save the changes.
Figure 1: Select 802.1x as WPA Key Mode when creating an SSID in GWN76XX access point

3. From WP8XX, scan to connect the SSID, enter Identity and Password to connect to the internet. Other fields can be left as default.

4. And voila, you are connected to Wifi Network with Radius Server!

Log Analysis

Text
    665 2022-02-17 14:24:45.060242    192.168.0.146         DAEMON.ERR: Feb 17 06:24:46 GWN7630LR[c074ad142758][1.0.21.15] daemon.err: hostapd[4549]: [.061669]: OID_802_DOT1X_RADIUS_ACCOUNT_DATA Identity=admin
    666 2022-02-17 14:24:45.060622    192.168.0.146         KERN.WARNING: Feb 17 06:24:46 GWN7630LR[c074ad142758][1.0.21.15] kern.warn: rx_data_frm_announce: hotspot rcv eapol start, type:3 hotpot:0 IS_AKM_WPA2:1 ppsmo_exist:0 roaming_cons_sel_len:0
    667 2022-02-17 14:24:45.060622    192.168.0.146         KERN.WARNING: Feb 17 06:24:46 GWN7630LR[c074ad142758][1.0.21.15] kern.warn: [DSCP-QOS-MAP] update sta mapping to CR4 for Pool 0 wcid 2pEntry->PMKID_CacheIdx=255
    668 2022-02-17 14:24:45.060991    192.168.0.146         KERN.WARNING: Feb 17 06:24:46 GWN7630LR[c074ad142758][1.0.21.15] kern.warn: AP SETKEYS DONE – AKMMap=WPA2, PairwiseCipher=AES, GroupCipher=AES, wcid=2 from 92:9B:24:FF:48:61
    670 2022-02-17 14:24:45.061326    192.168.0.146         KERN.WARNING: Feb 17 06:24:46 GWN7630LR[c074ad142758][1.0.21.15] kern.warn: PTK:0dfb7edd8b8c947cb9d21abe920de0c26e61bba0a4450430af6ede05fb1eaa8b5980f90fcb27aabf888e7b0d6b03dc22b563cbb326114a8f2b9af044fd15d426
    672 2022-02-17 14:24:45.061994    192.168.0.146         KERN.WARNING: Feb 17 06:24:46 GWN7630LR[c074ad142758][1.0.21.15] kern.warn: RTMPIoctlSetStaVlan: associate STA 92:9b:24:ff:48:61 to VLAN 0
    682 2022-02-17 14:24:45.065990    192.168.0.146         DAEMON.DEBUG: Feb 17 06:24:46 GWN7630LR[c074ad142758][1.0.21.15] daemon.debug: gsacl: AP : c274ad14275a –> SSID : CaptivePortal –> IFNAME : athi1 –>CLIENT: 929b24ff4861 –> online
    684 2022-02-17 14:24:45.066899    192.168.0.146         DAEMON.DEBUG: Feb 17 06:24:46 GWN7630LR[c074ad142758][1.0.21.15] daemon.debug: UNS: create_events: content: { “mac”: “929b24ff4861”, “ssid”: “CaptivePortal”, “apmac”: “c274ad14275a”, “ifname”: “athi1”, “portal”: 0, “ctrl_iface“: “\/var\/run\/hostapd-wifi1”, “status”: 0 }
Table 1 shows the Syslog messages from GWN7630. Client with MAC address “929b24ff4861‘ is successfully connected with Radius Server via user ‘Admin’

Figure 2 shows you the entire 802.1X session Syslog messages in WP810.

1 thought on “Configuring 802.1x in WP8XX and GWN76XX Access Point”

Comments are closed.