wpa_supplicant: WPS Support-WSC_NACK packets

[h***@wipro.com]

Hi

Through supplicant I'm trying to establish WPS connection using RAlink wifi dongle.
But It was unsuccessful and if we check Packet captures its going upto M3 packet after M3 router is returning WSC_NACK packets and dongle inturn responds with WSC_NACK packets.
So can I know wht will be the reason for WSC_NACK PACKETS from Router.

Hari


Please do not print this email unless it is absolutely necessary.

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

www.wipro.com

[Jouni Malinen]

Post by h***@wipro.com
Through supplicant I'm trying to establish WPS connection using RAlink wifi dongle.
But It was unsuccessful and if we check Packet captures its going upto M3 packet after M3 router is returning WSC_NACK packets and dongle inturn responds with WSC_NACK packets.
So can I know wht will be the reason for WSC_NACK PACKETS from Router.

Did you check which Configuration Error value is used in the WSC_NACK
message?

[r***@wipro.com]

Post by Jouni Malinen
Did you check which Configuration Error value is used in the WSC_NACK
message?

In this case, Configuration error shows "No Error". Are there any other possibilities for router
to return a NACK even in case of no configuration error ?

One thing we noticed was that our device (with a 120MHz CPU) is taking a long time to reply to process M2
and generate M3 (about 15 secs)- in the meantime the router sends six M2 messages and then a NACK. Is that
a timeout situation happening ? Is there a time limit within which a message from registrar has to be
responded by enrollee ?

Regards
Raghu

Please do not print this email unless it is absolutely necessary.

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

www.wipro.com

[Jouni Malinen]

Post by r***@wipro.com
One thing we noticed was that our device (with a 120MHz CPU) is taking a long time to reply to process M2
and generate M3 (about 15 secs)- in the meantime the router sends six M2 messages and then a NACK. Is that
a timeout situation happening ? Is there a time limit within which a message from registrar has to be
responded by enrollee ?

That's quite slow and yes, it sounds quite likely that the reason for
the issue is indeed in taking too long to send the M3. The WSC
specification provides recommendations for timeouts and the value for
individual message processing timeout is 15 seconds..

Which crypto/TLS implementation are you using here? If this is with the
internal TLS implementation (CONFIG_TLS=internal), you will most likely
want to enable some optimizations with
CONFIG_INTERNAL_LIBTOMMATH_FAST=y, but I'm not sure whether even that
would be fast enough with that device.

[h***@wipro.com]

Hi,

I have Checked all the Packet Fields w.r.t Registrar-Nounces and Enrolee- Nounces with previous messages M2 and M1 with M3
But all are looking fine.
And also I observed no configuration errors w.r.t M3 messages before returning WSC-Nack message from Router.
My Questions are

1. What are the possible cases for router or registrar returning WSC-Nack messages?

2. Is there any Router specific like it doesn't support WPS or having any broken implementation[Using Dlink Dir-601]

Wireshark log w.r.t config error at M3 message: [10 09 00 02 00 00 ]

+ Configuration Error :No Error (0x0000)

Regards
Hari

------------------------------



Message: 3

Date: Sat, 21 Apr 2012 18:36:35 +0300

From: Jouni Malinen <***@w1.fi>

Subject: Re: wpa_supplicant: WPS Support-WSC_NACK packets

To: ***@lists.shmoo.com

Message-ID: <***@w1.fi>

Content-Type: text/plain; charset=us-ascii

Post by h***@wipro.com
Through supplicant I'm trying to establish WPS connection using RAlink wifi dongle.
But It was unsuccessful and if we check Packet captures its going upto M3 packet after M3 router is returning WSC_NACK packets and dongle inturn responds with WSC_NACK packets.
So can I know wht will be the reason for WSC_NACK PACKETS from Router.

Did you check which Configuration Error value is used in the WSC_NACK message?



--

Jouni Malinen PGP id EFC895FA





From: Hari Prasad M C (WT01 - Product Engineering Services)
Sent: Wednesday, April 18, 2012 10:14 PM
To: '***@w1.fi'
Cc: '***@lists.shmoo.com'
Subject: wpa_supplicant: WPS Support-WSC_NACK packets

Hi

Through supplicant I'm trying to establish WPS connection using RAlink wifi dongle.
But It was unsuccessful and if we check Packet captures its going upto M3 packet after M3 router is returning WSC_NACK packets and dongle inturn responds with WSC_NACK packets.
So can I know wht will be the reason for WSC_NACK PACKETS from Router.

Hari


Please do not print this email unless it is absolutely necessary.

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

www.wipro.com

[Cristian Ionescu-Idbohrn]

Hi,

Hari (and others),

Please teach your mail-clients good behaviour. Ignoring that will get you
less answers.

* never send html-formated attachments, which not only duplicate the
text/plain one but are also more than 3-10x (in this case) bigger;
spammers do frequently just that; Jouni's mail server has limited space;
same applies for the rest of us subscribing to this mailing list; huge
mail messages get deleted first

* do proper quoting; if you don't know what I mean, you'll find loads of
good advice (if you care about educating yourself) by searching the
internet

* trim your message; there's _no_ point duplicating the whole thread;
quote only what you _must_, to make sense of your question, and skip
everything else

* top-posting is annoying, to say the least; a person who could give an
answer to your question, won't; get to the point in short form and
you'll get more answers; it's just simple as that

* use this link (http://en.wikipedia.org/wiki/Posting_style) if you wonder
what I'm talking about


Cheers,