wireless mac filtering help

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
Goto page 1, 2  Next
Author Message
drdedus
DD-WRT User


Joined: 31 Dec 2013
Posts: 171
Location: Greece

PostPosted: Fri Dec 08, 2023 19:34    Post subject: wireless mac filtering help Reply with quote
hello i am on the latest 12/07/2023 - r54475 on a tp-link 3600 v1

wlan0 is in station mode and i am getting the internet through a municipality free wifi, from wlan0.1 and wlan1 (5Ghz)

the Ssid is one .... but is transmitted from many Access points around me in the same channel..!

i tried whitelist the one with the better signal but every couple of minutes the router is changing municipality access point and i have disconnections.

is there anything i can do?
can i whitelist one or two Access points somehow maybe through firewall?

Thank you
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14249
Location: Texas, USA

PostPosted: Sat Dec 09, 2023 3:09    Post subject: Reply with quote
There used to be a shell script (AutoAP) that was for this purpose, but it is defunct and only supported older Broadcom routers. It would have to be re-developed and tested for Atheros devices. Your MAC whitelist is for clients connecting, not APs you are connecting to.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
drdedus
DD-WRT User


Joined: 31 Dec 2013
Posts: 171
Location: Greece

PostPosted: Sat Dec 09, 2023 3:58    Post subject: Reply with quote
thank you
I thought the problem with wireless mac filtering was there for many people, so i was expecting to already there a solution for this.

i have some other routers, maybe one of them is Broadcom, so i will try to find the script.


if someone knows about Atheros, how to choose only one mac address and connect (wlan0=station) please post .
ho1Aetoo
DD-WRT Guru


Joined: 19 Feb 2019
Posts: 3006
Location: Germany

PostPosted: Sat Dec 09, 2023 9:01    Post subject: Reply with quote
Atheros routers have the field BSSID in station mode

BSSID = MAC address of the access point

_________________
Quickstart guides:
use Pi-Hole as simple DNS-Server with DD-WRT
VLAN configuration via GUI - 1 CPU port
VLAN configuration via GUI - 2 CPU ports (R7800, EA8500 etc)

Routers
Marvell OCTEON TX2 - QHora-322 - OpenWrt 23.05.3 - Gateway
Qualcomm IPQ8065 - R7800 - DD-WRT - WAP
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14249
Location: Texas, USA

PostPosted: Sat Dec 09, 2023 14:13    Post subject: Reply with quote
Thanks for that. I had forgotten that was added some time ago during the switch from 'client' to 'station' naming.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
drdedus
DD-WRT User


Joined: 31 Dec 2013
Posts: 171
Location: Greece

PostPosted: Sat Dec 09, 2023 16:16    Post subject: Reply with quote
ho1Aetoo wrote:
Atheros routers have the field BSSID in station mode

BSSID = MAC address of the access point


thank you
I've already set it without lack.

Next to the tplink 3600 i have another tplink 841 with an old version of dd-wrt
Even in that device the BSSID option does not do anything.

does this option work for other people?
ho1Aetoo
DD-WRT Guru


Joined: 19 Feb 2019
Posts: 3006
Location: Germany

PostPosted: Sat Dec 09, 2023 17:24    Post subject: Reply with quote
I just tested it, it works perfectly here.

The Options does nothing other than write the BSSID into the wpa_supplicant.conf

By the way, I'm getting tired of all the garbage being posted all the time about this and that wouldn't work without providing any evidence.

I don't know what you mean by "old" either, the option hasn't been around that long

https://svn.dd-wrt.com/changeset/49126

To test, simply enter any bullshit MAC as BSSID and press “apply”.

The WLAN interface should then no longer connect because there is no AP with the MAC.

_________________
Quickstart guides:
use Pi-Hole as simple DNS-Server with DD-WRT
VLAN configuration via GUI - 1 CPU port
VLAN configuration via GUI - 2 CPU ports (R7800, EA8500 etc)

Routers
Marvell OCTEON TX2 - QHora-322 - OpenWrt 23.05.3 - Gateway
Qualcomm IPQ8065 - R7800 - DD-WRT - WAP
drdedus
DD-WRT User


Joined: 31 Dec 2013
Posts: 171
Location: Greece

PostPosted: Sat Dec 09, 2023 18:54    Post subject: Reply with quote
i done it but it is connecting like before.
Clever trick by the way.

i remind you that behind the one Ssid there is more than 10 access points in the same channel but with different mac addresses.
my radio mode is in just "station" mode.
i am explain for any other wants to know.

The other dd-wrt routers i have here is 2 different versions of the TL-WR841N.

The one i have is with old firmware (maybe 3-5 years), suggested by a forum member for low memory routers.

Even with this i have the same problem. it doesn't jump from one access point to other but i have to reboot 1-3 times so i will connect by lack to the one i want.
I don't remember well because it's not plugged in and maybe I have done the same mistake we discussed before with wireless Mac filter...

The second 841 is always with the latest firmware. Same here.
The last time i tried with this device/firmware was a month ago.


Last edited by drdedus on Sat Dec 09, 2023 19:09; edited 1 time in total
ho1Aetoo
DD-WRT Guru


Joined: 19 Feb 2019
Posts: 3006
Location: Germany

PostPosted: Sat Dec 09, 2023 19:08    Post subject: Reply with quote
post screenshots

Wireless_Basic.asp (Station Inferface)
Status_Wireless.asp (Status Station Interface + connected Clients)

and the contents of wpa_supplicant.conf

Code:
cat /tmp/*supplicant.conf


Maybe a bug that only affects the old routers

Edit: I tested it with build r53339

The newer builds are all WIP due to Kernel 6, WLAN-AX, Romaing, band steering and may have errors

_________________
Quickstart guides:
use Pi-Hole as simple DNS-Server with DD-WRT
VLAN configuration via GUI - 1 CPU port
VLAN configuration via GUI - 2 CPU ports (R7800, EA8500 etc)

Routers
Marvell OCTEON TX2 - QHora-322 - OpenWrt 23.05.3 - Gateway
Qualcomm IPQ8065 - R7800 - DD-WRT - WAP
drdedus
DD-WRT User


Joined: 31 Dec 2013
Posts: 171
Location: Greece

PostPosted: Sat Dec 09, 2023 19:40    Post subject: Reply with quote
are these what you asked?

Last edited by drdedus on Sat Dec 09, 2023 19:55; edited 1 time in total
ho1Aetoo
DD-WRT Guru


Joined: 19 Feb 2019
Posts: 3006
Location: Germany

PostPosted: Sat Dec 09, 2023 19:52    Post subject: Reply with quote
.. there is no BSSID in the wpa_supplicant.conf
Did you actually press “apply”?

Can you please test build r53339?

I would be interested to know if this is a current problem or has been broken on your router for a while

_________________
Quickstart guides:
use Pi-Hole as simple DNS-Server with DD-WRT
VLAN configuration via GUI - 1 CPU port
VLAN configuration via GUI - 2 CPU ports (R7800, EA8500 etc)

Routers
Marvell OCTEON TX2 - QHora-322 - OpenWrt 23.05.3 - Gateway
Qualcomm IPQ8065 - R7800 - DD-WRT - WAP
drdedus
DD-WRT User


Joined: 31 Dec 2013
Posts: 171
Location: Greece

PostPosted: Sat Dec 09, 2023 20:06    Post subject: Reply with quote
yes save and apply and reboot and power.

i tested the build you asked (without reset) and it is the same everything.
the command is giving me the same.

if you want more ask me.
if you want reset please tomorrow.
if you want take the aeroplane and come!
ho1Aetoo
DD-WRT Guru


Joined: 19 Feb 2019
Posts: 3006
Location: Germany

PostPosted: Sat Dec 09, 2023 20:26    Post subject: Reply with quote
Yes, thanks, I'll see if I can find the error and ask the developer.

The problem seems to be that your GUI settings are not transferred to the configuration file.

The BSSID would have to be written to wpa_supplicant.conf

Code:
ctrl_interface=/var/run/wpa_supplicant
ap_scan=1
network={
   ssid="test"
   bssid=11:22:33:44:55:66
   scan_ssid=1
   key_mgmt=none
}

_________________
Quickstart guides:
use Pi-Hole as simple DNS-Server with DD-WRT
VLAN configuration via GUI - 1 CPU port
VLAN configuration via GUI - 2 CPU ports (R7800, EA8500 etc)

Routers
Marvell OCTEON TX2 - QHora-322 - OpenWrt 23.05.3 - Gateway
Qualcomm IPQ8065 - R7800 - DD-WRT - WAP
drdedus
DD-WRT User


Joined: 31 Dec 2013
Posts: 171
Location: Greece

PostPosted: Sat Dec 09, 2023 20:44    Post subject: Reply with quote
i will try the reset tomorrow.
Here except the 841 i also have
a RT-N16 asus but with tomato installed
(and some other like mikrotik xiaomi etc and outdoors again tplink mikrotik ubnt etc )
but i want more to work with my lovely tplink 3600 .
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1959

PostPosted: Sun Dec 10, 2023 2:15    Post subject: Reply with quote
I do not have a VAP configured on this device, but this is a straight reconfiguration from AP to Station mode and changing the necessary bits for testing with no reset after upgrading to current release. Posting from a laptop connected wired to the device <wink>
Code:
Router Model TP-Link TL-WR1043ND
Firmware Version DD-WRT v3.0-r54475 std (12/07/23)
Kernel Version Linux 3.10.108-d11 #147438 Thu Dec 7 04:49:16 +06 2023 mips
Current Time Sat, 09 Dec 2023 20:09:30
Uptime 15 min

Code:
root@TL-WR1043ND:/tmp# cat wlan0_wpa_supplicant.conf
ap_scan=1
ctrl_interface=/var/run/wpa_supplicant
fast_reauth=1
eapol_version=1
network={
        disable_ht40=1
        ssid="********"
        bssid=20:6A:94:ED:A2:38
        scan_ssid=1
        key_mgmt=WPA-PSK
        pairwise=CCMP
        group=CCMP TKIP
        proto=RSN
        psk="*************"
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum