wpa_cli 无法连接到启用 WPS 的 WiFi

wpa_cli 无法连接到启用 WPS 的 WiFi

我正在尝试连接到 Netgear arlo 基站,该基站通过 WiFi 与其网络摄像头通信。连接通过 WiFi 保护设置 (WPS) 完成。我可以成功将摄像头连接到另一个启用 WPS 按钮的接入点,并查看摄像头/端口扫描。

现在我想将运行 debian 的笔记本电脑连接到 arlo 基站。

我已成功通过 WPS 连接到我常用的路由器,因此“东西本身”可以工作(即可以通过 WPS 按钮连接我的 WPA2/CCMP WiFiwpa_cli并随后使用)。

这是wpa_cli尝试连接到 arlo 基站时的输出,该基站的固定、不可更改且不可管理的 SSID 为NETGEAR73,bssid a0:63:91:xx:xx:xx(请查看我对此的安全担忧,在我舒适的家庭网络中留下一个无法管理的接入点?!):

> scan_results
bssid / frequency / signal level / flags / ssid
a0:63:91:xx:xx:xx   2437    -66 [WPA2-PSK-CCMP][WPS][ESS]   NETGEAR73
xx:xx:xx:xx:xx:x1   2462    -57 [WPA2-PSK-CCMP][ESS]    my_wifi
xx:xx:xx:xx:xx:x2   2462    -59 [WPA2-PSK-CCMP][ESS]    my_wifi
xx:xx:xx:xx:xx:x3   2412    -44 [WPA2-PSK-CCMP][ESS]    my_wifi
xx:xx:xx:xx:xx:x4   2462    -66 [WPA2-PSK-CCMP][ESS]    my_wifi
> wps_pbc a0:63:91:xx:xx:xx
OK
<3>CTRL-EVENT-SCAN-RESULTS
<3>WPS-AP-AVAILABLE
<3>CTRL-EVENT-SCAN-RESULTS
<3>WPS-AP-AVAILABLE
(...)

(我赶紧下楼来到 Arlo 基站,手动按了SYNC三次按钮来启动 WPS 按钮序列)

(...)
<3>Trying to associate with a0:63:91:xx:xx:xx (SSID='NETGEAR73' freq=2437 MHz)
<3>Association request to the driver failed
<3>Associated with a0:63:91:xx:xx:xx
<3>CTRL-EVENT-EAP-STARTED EAP authentication started
<3>CTRL-EVENT-EAP-STATUS status='started' parameter=''
<3>CTRL-EVENT-EAP-PROPOSED-METHOD vendor=14122 method=1
<3>CTRL-EVENT-EAP-STATUS status='accept proposed method' parameter='WSC'
<3>CTRL-EVENT-EAP-METHOD EAP vendor 14122 method 1 (WSC) selected
<3>CTRL-EVENT-EAP-STATUS status='completion' parameter='failure'
<3>CTRL-EVENT-EAP-FAILURE EAP authentication failed
<3>WPS-FAIL
<3>CTRL-EVENT-DISCONNECTED bssid=a0:63:91:xx:xx:xx reason=3 locally_generated=1
>

由于某种原因,我的连接被拒绝(<3>Association request to the driver failed当我成功连接到自己的 WiFi 网络时也会出现 -part)并出现 -error <3>CTRL-EVENT-EAP-FAILURE EAP authentication failed

做过确实注意到,我自己的路由器(见下文)被列为,[WPS-PBC]而 Arlo 基站被列为[WPS],这应该表示 PIN 模式。有时(我无法重现)它列为[WPS-PBC],但上​​述序列仍然完全相同地失败。

有什么想法可以解决这里的问题吗?为什么我无法通过 WPS 连接(从而发现它是 WPA2-PSK)到 arlo AP?


只是为了好玩地展示它确实有效对于其他连接,这是我通过 WPS 连接到我自己的 WiFi。xx:xx:xx:xx:xx:7a路由器可以执行 WPS 按钮吗?xx:xx:xx:xx:xx:x1/x2/x3其他接入点不能,但与路由器共享相同的 SSID 和 WPA2-PSK(有趣的旁注:WPS 在笔记本电脑和路由器之间通过,但 WPS 成功后,笔记本电脑通常会连接到距离它稍近的其中一个接入点):

me@notebook:~# /sbin/wpa_cli
wpa_cli v2.1
(...)
Selected interface 'wlan0'

Interactive mode

> scan_results
bssid / frequency / signal level / flags / ssid
xx:xx:xx:xx:xx:7a   2412    -38 [WPA2-PSK-CCMP][WPS-PBC][ESS]   my_wifi
xx:xx:xx:xx:xx:x1   2462    -58 [WPA2-PSK-CCMP][ESS]    my_wifi
xx:xx:xx:xx:xx:x2   2462    -63 [WPA2-PSK-CCMP][ESS]    my_wifi
a0:63:91:xx:xx:xx   2437    -69 [WPA2-PSK-CCMP][WPS][ESS]   NETGEAR73
xx:xx:xx:xx:xx:x3   2462    -70 [WPA2-PSK-CCMP][ESS]    my_wifi
> wps_pbc xx:xx:xx:xx:xx:7a
OK
<3>CTRL-EVENT-SCAN-RESULTS
<3>WPS-AP-AVAILABLE-PBC
<3>Trying to associate with xx:xx:xx:xx:xx:7a (SSID='my_wifi' freq=2412 MHz)
<3>Association request to the driver failed
<3>Associated with xx:xx:xx:xx:xx:7a
<3>CTRL-EVENT-EAP-STARTED EAP authentication started
<3>CTRL-EVENT-EAP-STATUS status='started' parameter=''
<3>CTRL-EVENT-EAP-PROPOSED-METHOD vendor=14122 method=1
<3>CTRL-EVENT-EAP-STATUS status='accept proposed method' parameter='WSC'
<3>CTRL-EVENT-EAP-METHOD EAP vendor 14122 method 1 (WSC) selected
<3>WPS-CRED-RECEIVED
<3>WPS-SUCCESS
<3>CTRL-EVENT-EAP-STATUS status='completion' parameter='failure'
<3>CTRL-EVENT-EAP-FAILURE EAP authentication failed
<3>CTRL-EVENT-DISCONNECTED bssid=xx:xx:xx:xx:xx:7a reason=3 locally_generated=1
<3>CTRL-EVENT-SCAN-RESULTS
<3>WPS-AP-AVAILABLE
<3>Trying to associate with xx:xx:xx:xx:xx:x2 (SSID='my_wifi' freq=2462 MHz)
<3>Association request to the driver failed
<3>Associated with xx:xx:xx:xx:xx:x2
<3>WPA: Key negotiation completed with xx:xx:xx:xx:xx:x2 [PTK=CCMP GTK=CCMP]
<3>CTRL-EVENT-CONNECTED - Connection to xx:xx:xx:xx:xx:x2 completed [id=0 id_str=]
> quit
me@notebook:~# /sbin/iwconfig wlan0
wlan0     IEEE 802.11bg  ESSID:"my_wifi"
          Mode:Managed  Frequency:2.462 GHz  Access Point: xx:xx:xx:xx:xx:x2
          Bit Rate=5.5 Mb/s   Tx-Power=20 dBm
          Retry  long limit:7   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          Link Quality=56/70  Signal level=-54 dBm
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

me@notebook:~# /sbin/dhclient -v wlan0
Internet Systems Consortium DHCP Client 4.2.4
(...)
Listening on LPF/wlan0/xx:xx:xx:xx:xx:8b
Sending on   LPF/wlan0/xx:xx:xx:xx:xx:8b
Sending on   Socket/fallback
DHCPDISCOVER on wlan0 to 255.255.255.255 port 67 interval 3 (xid=0x6fb7b800)
DHCPREQUEST of some.ip on wlan0 to 255.255.255.255 port 67 (xid=0x6fb7b800)
DHCPOFFER of some.ip from router.ip
DHCPACK of some.ip from router.ip
bound to some.ip -- renewal in 408095 seconds.
me@notebook:~# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=55 time=13.4 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=55 time=11.6 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=55 time=12.2 ms
^C
--- 8.8.8.8 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 11.680/12.469/13.442/0.736 ms
me@notebook:~#

所以 - 是的,它在其他情况下确实有效。

相关内容