Re: [Madwifi-users] VAP questions

[Matt B. <ma...@ma...>]

Brian Capouch wrote:

>  From what I understand it's impossible to have one VAP open and anothe=
r=20
> using any of the several forms of encryption?

This is not my experience. I currently have an access point running 3
VAPs as shown below

basic-ap  IEEE 802.11b  ESSID:"basic-ap"
          Mode:Master  Frequency:2.427 GHz  Access Point:
00:0B:6B:35:0B:32
          Bit Rate:0 kb/s   Tx-Power:20 dBm   Sensitivity=3D0/3
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          Link Quality=3D24/94  Signal level=3D-74 dBm  Noise level=3D-98=
 dBm
          Rx invalid nwid:172236  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

ap        IEEE 802.11b  ESSID:"ap"
          Mode:Master  Frequency:2.427 GHz  Access Point:
06:0B:6B:35:0B:32
          Bit Rate:0 kb/s   Tx-Power:20 dBm   Sensitivity=3D0/3
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:3C75-E720-C552-B739-95E8-D741-062A-6ADC [2]
Security mode:open
          Power Management:off
          Link Quality=3D24/94  Signal level=3D-74 dBm  Noise level=3D-98=
 dBm
          Rx invalid nwid:171288  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

ap-rep    IEEE 802.11b  ESSID:"ap-rep"
          Mode:Master  Frequency:2.427 GHz  Access Point:
0A:0B:6B:35:0B:32
          Bit Rate:0 kb/s   Tx-Power:20 dBm   Sensitivity=3D0/3
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          Link Quality=3D25/94  Signal level=3D-73 dBm  Noise level=3D-98=
 dBm
          Rx invalid nwid:1  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

As you can see basic-ap is unsecured and anyone can connect, ap is using
RADIUS backed WPA2 EAP to authenticate clients and ap-rep is unencrypted
but uses a mac filter to restrict who can associate.

> I am curious as to the situation with beacons.  I brought up a card wit=
h=20
> several VAPs and then did an access point search with a wireless IP=20
> phone that has that function built-in.
>=20
> In several trials, it consistently found one and only one of the variou=
s=20
> SSIDs, although if I manually entered one of the others I could get it =

> to associate.

I appear to see beacons for all three APs on the clients, or at list
iwlist <iface> scan shows three entries, one for each VAP with the
appropriate encryption key: on/off entries for each one.

Hope that helps.

Cheers

--=20
Matt Brown
ma...@ma...
Mob +64 21 611 544 www.mattb.net.nz