martin-ger / esp_wifi_repeater

A full functional WiFi Repeater (correctly: a WiFi NAT Router)
MIT License
4.72k stars 896 forks source link

Error while connecting to WPA Enterprise network #509

Open kbshal opened 1 year ago

kbshal commented 1 year ago

It gives an error while trying to connect to the enterprise network

vakshit commented 1 year ago

how do you check for errors? i'm having the same issue. I'm able to connect to a WPA2 network but not able to connect to enterprise network.

martin-ger commented 1 year ago

ESP8266 and WPA Enterprise is a pain. Think, often the certificates used by the WPA Enterprise networks are too large for the ESP8266's memory and this causes crashes. If possible, try with the ESP32 instead.

vakshit commented 1 year ago

my enterprise network doesn't use CA certificates. if that's what you are talking about.

martin-ger commented 1 year ago

What kind of authentication do you use?

vakshit commented 1 year ago

PEAP-MSCHAPv2. I read in the readme that something related to MSCHAPv2 is broken. Is that the issue here?

vakshit commented 1 year ago

image

this config after entering my username and password works well on my system.

martin-ger commented 1 year ago

This only means, this config doesn't check the server's certificate with a CA cert - there is the chance that you connect to a fake AP. Still the RADIUS server has a cert and sends it. See also: https://security.stackexchange.com/questions/182530/is-it-possible-for-an-802-1x-network-peap-mschapv2-to-have-no-certificate

martin-ger commented 1 year ago

MSCHAPv2 itself isn't a problem here as it is used inside a TLS tunnel to check the PW.

vakshit commented 1 year ago

Yes, there is a chance that the RADUIS server sends me a CA certificate, but i dont know a way to check it. Also, it is my institute's wifi so it's not getting connected to a fake AP.

Shall I try on an ESP32? I'm actually still unable to find out the issue. 😅

martin-ger commented 1 year ago

Think, you should try.

vakshit commented 1 year ago

the same code or this one https://github.com/martin-ger/esp32_nat_router.

edit: sorry, found out this one doesn't work.