..:::: Cisco 1242 AG association with Atheros cards ::::..

[maloomnahi]

Dear All,

My current inventory in LAB is as follows:
1] One cisco 1242AG AP with following software running on it:
Product/Model Number: AIR-AP1242AG-K-K9
System Software Version: 12.4(10b)JA
Bootloader Version: 12.3(7)JA1

2] Atheros WLAN PCI card with Madwifi v0.9.3.1 in a Linux Machine v2.6.18

My Aim: Associate Cisco AP and Atheros card using WPA-PSK with AES-CCMP or TKIP using open authentication algorithm

My current setup of these devices:
1] Cisco 1242 AG : More details below
- WPA PSK with the PSK set to "12345678"
- CCMP as cipher, WPA version 2
- No VLAN settings
- Essid CISCO_AP

2] Atheros Card settings
- WPA 2, cipher as CCMP, key MGT algorithm set to 3
- WPA PSK with the PSK set to "12345678"
- Station managed mode with essid "CISCO_AP"

Problem Faced: Association never happens
Cisco probe response shows "Station does not support the concerned authentication algorithm error = 0x000d"

My Findings and Questions:
1] The same setting works out with WPA Supplicant very well.
2] Key generated by the Atheros Madwifi is of 64 bits and not 128 bits like WPA Supplicant or Cisco. Is there any way we can set the key length to 128 bits in Madwifi-Atheros?
3] What could be the reasons behind the non-association?
4] Any settings missing in Cisco or Atheros?
5] Similar settings between Atheros AP and Atheros STA works fine.
6] Have already tried various madwifi commands and settings same 128 bit key of WPA Supplicant, but no use.

Looking forward to your reply and support ASAP.

Thanks,

================== Extra Information ================

 
Current Cisco configuration : 1799 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname cisco1242
!
enable secret 5 $1$YJqT$vbrA67U4JowQtD6KiHPZ1/
!
no aaa new-model
ip domain name ciscoap
!
!
ip ssh time-out 100
ip ssh rsa keypair-name cisco1242.ciscoap
!
dot11 ssid CISCO_AP
   authentication open
   authentication key-management wpa version 2
   guest-mode
   wpa-psk ascii 7 040A59555B741A1951
   no ids mfp client
!
power inline negotiation prestandard source
!
!
username Cisco password 7 1531021F0725
username ciscoap privilege 15 password 7 106D000A0618131B
!
bridge irb
!
!
interface Dot11Radio0
 ip address 192.168.1.7 255.255.255.0
 no ip route-cache
 !
 encryption mode ciphers aes-ccm
 !
 ssid CISCO_AP
 !
 speed  basic-54.0
 packet speed  54.0 priority 6
 channel 2452
 station-role root access-point
 beacon period 200
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 !
 encryption key 1 size 40bit 7 CB4859701297 transmit-key
 encryption mode wep mandatory
 no dfs band block
 channel dfs
 station-role root access-point
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 ip address 192.168.1.31 255.255.255.0
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface BVI1
 ip address 192.168.1.30 255.255.255.0
 no ip route-cache
!
ip default-gateway 192.168.1.252
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 login local
!
end