Disconnecting every 43200 seconds in WPA3+SAE

[jungyu_park]

Ruckus R650, R610 Unleashed 200.12.10.105.129

I posted on reddit, but I also post here in the community.

Reconnection every 43200 seconds : RuckusWiFi (reddit.com)

I have already written an post before, but the related log seems to be classified as spam.

The problem seems to be that WPA3 + SAE revokes client authentication to recreate the PMK cache when it expires.

The relevant commit is on hostapd and I would like Ruckus to take a look at it.

hostap - hostapd/wpa_supplicant (w1.fi)

I have confirmed that the connection is maintained even after 12 hours on WPA2-only.

[jungyu_park]

I wonder if there is any progress.

[Vineet_nejwala]

@jungyu_park 

Due to covid we are still limited with staff in office and are working mostly remotely. This would need some more time but we will update you once tested.

Best Regards

Vineet

[jungyu_park · Accepted solution]

Today I found out that my Galaxy Tab s8 reconnects every 259200 seconds.
It seems that the set value is longer than other devices.

• User[8a:1b:5c:xx:xx:xx] leave WLAN[Ruckus-Wireless-2G] at AP[R650@8c:7a:15:xx:xx:xx] with Session Time[259206.47 sec] RX Bytes[127951510] TX Bytes[22309832226]

The wpa_supplicant.conf I looked at in Samsung's firmware has that option.

update_config=1
eapol_version=1
ap_scan=1
fast_reauth=1
p2p_add_cli_chan=1
oce=1
dot11RSNAConfigPMKLifetime=259200

I still think that this reconnection is an unnecessary process, but the current problem seems to be a normal behavior according to the client's settings.

Edit: I think I misunderstood something.
That commit seem to be for wpa_supplicant, not hostapd.

Samsung uses wpa_supplicant v2.10-devel-11 on Android 11 and wpa_supplicant v2.10-devel-12 on Android 12.

PMK cache expiration postponement must be the client's action.
This problem is considered to be a client issue.

Samsung needs to update the wpa_supplicant version.

Edit2: I confirmed that the lenovo tablet also uses the "wpa_supplicant v2.10-devel-11" version. Device manufacturers will need to update wpa_supplicant to v2.10 stable version including the above commit through firmware update.