Hou-dev / supplicant_openwrt

How to enable wpa_supplicant for AT&T using OpenWRT and bypass the modem/router
5 stars 1 forks source link

Connection seems to stop on speedtest.net or any high bandwidth usage #3

Closed MasterJubei closed 1 month ago

MasterJubei commented 2 months ago

Hi, I am using a gl inet beryl mt1300 Based on OpenWrt 19.07.8, r11364-ef56c85848 Certs were from a bgw210, not that this should matter. Service is 1gb/s

Setup works, I get internet access. However, on high bandwidth usage, e.g. speedtest I lose connection for a few seconds. It doesn't seem to have anything to do with the reconnect scripts, as I'm not using those.

LAN traffic is fine to the router.

When I test the router itself, From WAN to LAN, it's fine and doesn't do this behavior. It's only when connected to the ONT does it drop.

Has this happened to you?

MasterJubei commented 1 month ago

Update, it was a software/hardware combination issue. I swapped to a nanopi r5c as a test device, and this seems to work.

I had to first remove wpad-mini as this does not support the network block. Then install wpad-openssl

opkg remove wpad-mini
opkg install wpad-openssl```

However I would get issues with openssl complaining about md5 authentication.
I had to adjust my wpa_supplicant.conf as such:

```sh
# Generated by 802.1x Credential Extraction Tool
# Copyright (c) 2018-2021 devicelocksmith.com
# Version: 1.06 windows 386
# 
# Change file names to absolute paths
eapol_version=1
openssl_ciphers=DEFAULT@SECLEVEL=0
ap_scan=0
fast_reauth=1
network={
        ca_cert="/etc/config/auth/CA_blah.pem"
        client_cert="/etc/config/auth/Client_blah.pem"
        eap=TLS
        eapol_flags=0
        identity="00:de:ad:be:ef:00" # Internet (ONT) interface MAC address must match this value
        key_mgmt=IEEE8021X
        phase1="allow_canned_success=1 allow_unsafe_renegotiation=1"
        private_key="/etc/config/auth/PrivateKey_PKCS1_blah.pem"
}

Note the addition of: openssl_ciphers=DEFAULT@SECLEVEL=0 allow_unsafe_renegotiation=1