Re: IEEE802.1x + STATIC WEP

[Dan Williams <dcbw redhat com>]

On Mon, 2008-11-24 at 03:38 +0200, Tomas Winkler wrote:
> On Thu, Nov 20, 2008 at 8:20 PM, Dan Williams <dcbw redhat com> wrote:
> > On Wed, 2008-11-19 at 14:41 -0600, Mario Medina wrote:
> >> Hi! I have in my office a uncommon configuration of the network, weuse
> >> IEEE802.1x keymanagement with TLS and static WEP keys, is N-M capable
> >> of configuring this type of network?
> >
> > Not at this time; this is the first instance I've heard of this, and
> > kinda pointless actually as the WEP key doesn't rotate...
> >
> > Any idea what AP hardware and RADIUS server is backing your network
> > setup?
> 
> > Dan
> 
> It may be a case of so called transitional setups where both
> legacy(WEP) only and WPA are supported. Usually bcast is all in WEP.
> Just a guess.
> I think Cisco APs can support this

Hmmm, could be.  Though I was under the impression that devices that
wouldn't have supported WPA at the time (ie, old PDAs, embedded
terminals, PoS stuff, etc) were also usually never updated to support
802.1x either...  Not sure though.

dan

> Tomas
> 
> 
> >> At this time I do the connection manually with this:
> >>
> >> ctrl_interface=/var/run/wpa_supplicant
> >> ctrl_interface_group=admin
> >> update_config=1
> >>
> >> network={
> >> ssid="wnetwork"
> >> key_mgmt=IEEE8021X
> >> auth_alg=OPEN
> >> eap=TLS
> >> identity="myusername"
> >> password="mypassword"
> >> ca_cert="/etc/network/cacert.pem"
> >> client_cert="/etc/network/cert.pem"
> >> private_key="/etc/network/key.pem"
> >> private_key_passwd="thekeypassword"
> >> wep_key0=hex static wep key
> >> disabled=0
> >> }
> >>
> >> and it connects. sometimes i need to issue a manual iwconfig to set
> >> the key, but at this time i can't find the way to do this with N-M.
> >>
> >> Thanks
> >>
> >> Cristo te Ama. Por que de tal manera te amó Dios, que dio a su único
> >> Hijo, para que vivas con Dios eternamente, si es que crees en su Hijo.
> >> www.iglesiacristianaebenezer.com
> >> Salud Integral: www.drmedina.com.mx
> >> Todo de Linux: www.viviendolinux.com
> >>
> >> _______________________________________________
> >> NetworkManager-list mailing list
> >> NetworkManager-list gnome org
> >> http://mail.gnome.org/mailman/listinfo/networkmanager-list
> >
> > _______________________________________________
> > NetworkManager-list mailing list
> > NetworkManager-list gnome org
> > http://mail.gnome.org/mailman/listinfo/networkmanager-list
> >