Edison tactic - keymap="de", wlans_iwn0="wlan0", ifconfig_wlan0="WPA & WPA2 Enterprise " ...privacy on

Polytropon freebsd at edvax.de
Mon Jan 9 17:09:30 UTC 2017


Allow me to summarize your many "unthreaded" messages.
Honestly: Please learn to use your mailing program (or
web interface) properly. It isn't that hard. Show some
respect for the participants of this mailing list.



On Mon, 09 Jan 2017 10:25:00 +0100, swjatoslaw gerus wrote:
> Re: Edison tactic -
> 1.
> 
>    keymap="de"
>    wlans_iwn0="wlan0"
>   ifconfig_wlan0="WPA & WPA2 Enterprise " 
>  ...privacy on  

I assume you did use the _correct_ setting for infoncif_wlan0,
and what you presented is just a paraphrasing placeholder. :-)



> In University linux notation was  tunneled  TLS 
> and  PAP  ,  if entry was allcorrect    ,but  without PAP
> - not worked 

That is a somewhat strange description.



> ----------------------
> 2.Only mobile application 
> 
>     Need  some equal indicator of wlan network as  Hewlett Paccard  
>     Linux 16.04 

I have no idea what "Hewlett Paccard Linux 16.04" is. The
version number looks like Ubuntu is meant.



>   watch -n1 iwconfig 
> 
>    Can see segnal level   in sec     ... -54 dbm -84 dbm  in 5-10 metr 
> by -84 dbm network crashed , ...browser   ...parsing due worst network
> connectivity  ..
> 
>   Tested mutiple days     -suspect  date/measurement  are relevant
> -------------

I still suspect it's a firmware issue with the specific
wireless network card that you have...



> a.not found equal  "watch"  by FreeBSD 

Have you even tried "man watch"?



> b.found   S  = -76 ,N= -95   by myssid 
> Anna  Ipod     S-61 

You're starting to explore the fun of wireless diagnostics. :-)



On Mon, 09 Jan 2017 10:33:53 +0100, swjatoslaw gerus wrote:
> University Hamburg Notation
> 
>  Authehtication   WPA2
>  Encryption      AES
>  EAP Type  -EAP-TTLS
>  Outer identity  -anonymous at uni-hamburg.de   
>  Authentication method  PAP
>  User ID     myid at uni-hamburg.de
>   passwd      mypassd

Okay, _that_ looks like understandable access information.
You already have the relevant settings for access control
in /etc/wpa_supplicant.conf (hopefully _correct_, as I said,
spaces matter). So basically you need to activate the correct
_mode_ for the wireless network interface.



On Mon, 09 Jan 2017 11:17:37 +0100, swjatoslaw gerus wrote:
>  -space checked ,all was correct by  sony

Excellent.



>  work by linux 16.04 64 bit 

That is _Ubuntu_, right?



> myssid
> WPA & WPA 2 Enterprise 
> Tunneled TLS 
> anonymous at uni-hamburg.de #
> #  that is outer identity equal by 20 000 + students 
> PAP
> myid at uni-hamburg.de 
> mypasswd 
>  Deutsche telecom  RA Zertifikate -avoid 
> Ipv4 -automaticaly 

Good, so you'll get an address via DHCP. Why don't they just
write "DHCP"?



On Mon, 09 Jan 2017 11:24:40 +0100, swjatoslaw gerus wrote:
> Re: Edison tactic  -   Uni Hamburg force all linux advicers out s 4.0ct
> 2016 ,worked as is  ...

I have no idea what this means... sorry...



>  If ask ,answer would - " ... We are not support freebsd ,it is your
>  risk  ,all linux advisers forced out    &"

You don't need OS-specific support, just the correct information
that the wireless network expects you to implement so you will
be able to connect to that network. Even though this information
is reflected in different files and formats across the many
versions of Linux, as well as on FreeBSD or Solaris, it's more
or less the same "idea" behind it.



> https://www.rrz.uni-hamburg.de/services/netz/downloads.html

The relevant information is stated here:

https://www.rrz.uni-hamburg.de/services/netz/daten/manual/wlan-uhh-en.pdf

You also got your individual user information (name and password),
so _after_ you got your network _hardware_ to work properly,
you're good to start.



> If   you   are   using   an   operating   system   we   do   not   offe
> r   a   preconfigured   software   or   profile   for   please
> configure the 802.1X access manually by applying th
> e following parameters:
> Authentication:
> WPA2
> Encryption:
> AES
> EAP type:
> EAP-TTLS
> Outer identity:
> anonymous at uni-hamburg.de
> Certificate:
> "Deutsche Telekom Root CA 2" 
> Authentication method:  PAP
> User id / password:
> Your UHH user id and password
> Domain:
> uni-hamburg.de



> author ssid is eduroam  -that is standart 

Good you know that. Now you can configure /etc/rc.conf according
to that information.



On Mon, 09 Jan 2017 11:26:02 +0100, swjatoslaw gerus wrote:
> Re: Edison tactic - PS. Use "man iwn" for more info.  ...would check 

If you do so, you'll find out that your wireless network card
needs to load a specific firmware.




On Mon, 09 Jan 2017 11:56:55 +0100, swjatoslaw gerus wrote:
> Re: Edison tactic - checked man iwn  ,where is loader.conf file ?

See "man loader.conf", the path is /boot/loader.conf.



>  if  file not exist ,which of another methode suited   ?

Just create it, for example with an editor (because you need
to put some information there anyway):

	# ee /boot/loader.conf
		add line:
			if_iwn_load="YES"
			iwn5000fw_load="YES"
		Esc Enter Enter -> save & exit

Of course you need to know _which_ firmware you must load.
The brand and model of your network card will tell you.
There are several firmwares to choose from:

	iwn1000fw_load="YES"
	iwn100fw_load="YES"
	iwn105fw_load="YES"
	iwn135fw_load="YES"
	iwn2000fw_load="YES"
	iwn2030fw_load="YES"
	iwn4965fw_load="YES"
	iwn5000fw_load="YES"
	iwn5150fw_load="YES"	<=== I assume this one.
	iwn6000fw_load="YES"
	iwn6000g2afw_load="YES"
	iwn6000g2bfw_load="YES"
	iwn6050fw_load="YES"

Use only _the one_ that applies to your actual hardware. Again,
I'm not sure if you need to do this (I don't own that kind of
hardware), or if you've just misconfigured something in a
different place (WLAN connection configuration, not WLAN
hardware configuration).

As soon as this aspect is working, your WLAN connection should
be working (given that the authentication information is valid).



>  If rememmber correctly by installer default was Intel 5010  5010    ,it
>  is not  listed by  man iwn

It should be covered by the 5000 family. And as you said you
already have an entry for iwn0 in "ifconfig -a" output, it
looks like the iwn driver supports your card (or it wouldn't
have been loaded).



>  processor is p8600 2*2.4 ghz 

This has nothing to do with networking.



>    how define  wireless card (receiver-transmitter) and software  by
>    freebsd on sony ?

The card is already supported, it's probably just missing
the firmware. There is nothing you need to "define".



>  Which command ist it ? 

All the required commands have been presented and explained
several times. There is no "one command". The information,
depending on the aspect of the wireless connection, has to
be entered to the appropriate files, which you should have
done by now. I assume only minor configuration tweaks are
needed.

If you want to find out which hardware the wireless card is,
use the following command:

	# pciconf -lv | less

or just

	# pciconf -lv

and use the Scroll Lock key to scroll up if there are more
lines than your display will show. You will then see all the
relevant hardware in your computer. Look for the one that
looks like a wireless network adapter.

Here is an example, look for something similar:

	wpi0 at pci0:3:0:0:        class=0x028000 card=0x10118086
	                        chip=0x42278086 rev=0x02 hdr=0x00
	    vendor     = 'Intel Corporation'
	    device     = 'PRO/Wireless 3945ABG [Golan] Network Connection'
	    class      = network

Note the "vendor" and "device" information. You'll quickly
find it when you look for "network".




On Mon, 09 Jan 2017 12:35:16 +0100, swjatoslaw gerus wrote:
> linux eduroam  UniversityLeibnitz  wpa*  ... suspect  can be relevant
> for Freebsd Hamburg 
> 
> 
> https://www.lrz.de/services/netz/mobil/802_1x/802_1x-linux/

They suggest the wpa_supplicant.conf method as well, followed
by obtaining an IP via DHCP.

	wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf 
	dhcpcd -n wlan0 oder dhclient wlan0

On FreeBSD, this works similar, as I already wrote. There is
also an example for wpa_supplicant.conf (my translation of
the german comments) to connect using PEAP/MSCHAPV2:

	network={
		ssid="eduroam"
		key_mgmt=WPA-EAP
		eap=PEAP
		ca_cert="/etc/ssl/certs/Deutsche_Telekom_Root_CA_2.pem"
		# must match Radius-Real / Radius-Server
		phase2="auth=MSCHAPV2"
		identity="kennung at eduroam.mwn.de"
		# replace eduroam.mwn.de by matching Radius-Realm ersetzen
		domain_suffix_match="radius.lrz.de"
		# this option is only available to newer versions
		# of wpa_supplicant; must match Radius-Realm / Radius-Server 
		subject_match="radius.lrz.de" 
		# only for older versions, is weaker than domain_suffix_match,
		# must match Radius-Realm / Radius-Server
		anonymous_identity="anonymous at mwn.de"
		# or anonymous at heimat-uni-realm
		password="XXXX"
		# alternatively create hash:
		# https://wlan.lrz.de/cgi-bin/nt-password-hash.py 
		# password=hash:XXXX
	}

But that's for Bavaria, not Hamburg, so don't copy 1:1. :-)

To connect via TTLS+PAP, they suggest:

	network={
		ssid="eduroam"
		key_mgmt=WPA-EAP
		eap=TTLS
		identity="kennung at eduroam.mwn.de"
		# eduroam.mwn.de ggf. durch das passende Radius-Realm ersetzen
		domain_suffix_match="radius.lrz.de"
		# die Option ist nur bei neueren wpa_supplicant-Versionen
		# verfügbar, muss zum Radius-Realm bzw. Radius-Server passen 
		subject_match="radius.lrz.de"
		# für ältere Versionen, ist schwächer als domain_suffix_match,
		# muss zum Radius-Realm bzw. Radius-Server passen
		anonymous_identity="anonymous at mwn.de"
		# bzw. anonymous at heimat-uni-realm
		password="XXXX"
		#(wird für PAP im Klartext benötigt)
		ca_cert="/etc/ssl/certs/Deutsche_Telekom_Root_CA_2.pem"
		# muss zum Radius-Real bzw. Radius-Server passen
		phase2="auth=PAP"
	}

I don't need to translate all this, you can see the obvious
difference (last line).



On Mon, 09 Jan 2017 12:37:48 +0100, swjatoslaw gerus wrote:
> Re: linux eduroam  University Hamburg  -sorry only graphics  
> 
> http://wpad.wlan.uni-hamburg.de/wlan-linux-kurz.pdf

I get only timeouts here...



On Mon, 09 Jan 2017 14:37:49 +0100, swjatoslaw gerus wrote:
> 
> 
> Dear Sir  Did Author understand your suggest correctly
>  - Please, do not use top post. And use inline quoting. 

Yes.



> 1.pciconf -vlc|grep -A5 iwn
>    Intel Wi-Fi link 5100

Okay, the model 5100 might be covered by the 5150 firmware,
at least it's worth a try.


> 2. man iwn 
> 
> ...
> device  iwn5000fw
> device  iwn5150fw
> ...
> device iwn6150fw
> 
> 5100  not listed   .Attempt install freebsd false ?

No. You already seem to have the card recognized and the driver
attached, so check that firmware thing.

Additionally, when I look at

https://www.freebsd.org/cgi/man.cgi?query=iwn&apropos=0&sektion=4&manpath=FreeBSD+11.0-RELEASE&arch=default&format=html

I read the following

	DESCRIPTION
	     The iwn driver provides support for:
		[...]
		Intel Centrino Wireless-N 5100
		[...]

I assume that shows the device is supported. It's just a question
now _if_ it needs additional firmware, and if yes, _which_ additional
firmware must be provided.



> 3. man loader.conf 
> the  file /boot/loader.rc must contain folloving two lines 
> 
> include /boot/loader.4th
> start

Do you see the difference between "loader.con" and "loader.rc"?
You need to concentrate. The relevant configuration goes into
loader.conf. The file loader.rc has been created by the
installer. See the "FILES" section at the bottom of the manual:

FILES
     /boot/defaults/loader.conf  default settings -- do not change this file.
     /boot/loader.4th            defines the commands used by loader to read
                                 and process loader.conf.
     /boot/loader.conf           user defined settings.
     /boot/loader.conf.local     machine-specific settings for sites with a
                                 common loader.conf.
     /boot/loader.rc             contains the instructions to automatically
                                 process loader.conf.

You need to create /boot/loader.conf.



> 4. more loader.rc

NB: "more" is "less". :-)

On FreeBSD, "less" is the pager people typically use.



> include /boot/loader.4th
> try_include /boot/loader.rc.local 
> initialize 
> check-passwd
> include /boot/beastie.4th
> beastie-start 

A correct content - but the wrong file.

Check:

	# less /boot/loader.conf

If it isn't there, create and populate it as instructed.

Again:

I do not own a laptop with Intel Wireless WiFi Link 5100, so I
cannot tell you if the 5150 firmware might work with that piece.
But you can quickly try it.

I still think you have some problem in your WLAN configuration.
Compare with the examples again. Concentrate on the details.





-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...


More information about the freebsd-questions mailing list