Wednesday, January 29, 2020

Dot1x: How to go about testing priority tagged EAPOL with wpa_supplicant?

Hello, I am trying to test priority tagged EAPOL authentication.

To keep things simple I have a linux host running wpa_supplicant and there is 1 interface that is connected to an authenticator.

Now, I am sending priority tagged (dot1q packet with vlan_id set to 0) EAPOL start by configuring a "VLAN 0" interface in linux:

ip link add link dev eth0 name eth0.0 type vlan id 0 

then running wpa_supplicant over this device:

wpa_supplicant -Dwired -ieth0.0 -cmy_wpa_supplicant.conf 

Problem is that the switch on the other end acting as the Authenticator is replying with UNTAGGED frames which are getting received over eth0 instead of eth0.0 (correctly i assume). Thus wpa_supplicant cannot get any RequestIdentity frames and hence the authentication fails by time out.

Am I doing this wrong? How do you guys test EAPOL with priority tagged frames?



No comments:

Post a Comment