E410 - Invalid pre-shared key

Products Enterprise Wi-Fi Networks
1

Hello,
I have 3 identical e410 cnPilot.
I have configured 3 SSID (WPA-PSK) on each cnPilot.
I’m trying to connect a RaspberryPI (debian Stretch) to one of those SSIDs, but I keep receiving "
Invalid pre-shared key" message on Cambium logs.

The key is valid, the raspberry is connecting to other hotspots. I have tried all SSIDs and all 3 cnPilots.

sw version of Access Points is 4.2-r15

Can you help me?
thank you

2

Seems that disabling PMF 802.11w protocol, solves this problem.
Now I can associate correctly the RaspberryPi to the e410 ap.

Any idea why only the Raspberry is having this problem?

3

Most likely the driver for the Pi lacks 802.11w capability.

Check iw phy0 info | grep -A9 ‘Supported Ciphers’ to see what the driver supports.

https://kevinlocke.name/bits/2019/12/28/checking-802.11w-support/

Honestly frustrating in this day and age that os drivers still have spotty PMF support.

4

This is the output


        Supported Ciphers:
                * WEP40 (00-0f-ac:1)
                * WEP104 (00-0f-ac:5)
                * TKIP (00-0f-ac:2)
                * CCMP-128 (00-0f-ac:4)
                * CMAC (00-0f-ac:6)

And (00-0f-ac:6 ) is present in that list although it says only CMAC and not AES-CMAC

I’m suspecting that the phy0 interface is not supporting PMF, as the article states:

Additionally, to check whether the driver+firmware supports optional 802.11w, ensure you are using iw 5.0 or later and look for MFP_OPTIONAL in Supported extended features: in the iw phy output.

and the output of the iw phy output is:

Supported extended features:
                * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
                * [ 4WAY_HANDSHAKE_STA_PSK ]: 4-way handshake with PSK in station mode
                * [ 4WAY_HANDSHAKE_STA_1X ]: 4-way handshake with 802.1X in station mode
                * [ DFS_OFFLOAD ]: DFS offload
                * [ 4WAY_HANDSHAKE_AP_PSK ]: AP mode PSK offload support

so I’m guessing that PMF is not supported by the driver.