[lime-users] How to configure an encrypted mesh based on ieee80211s - lime

9 Aug 2017

hello there,

we try to setup different customized lime installations for a camp.

our routers:  tplink 4300.

1) the following configuration is working for ap encryption but not for
the mesh:

* cooking in branch stable (we also tried develop with the latest
working commit):

 V=s J=1 ./cooker -c ar71xx/generic --flavor=lime_camp
--profile=tl-wdr4300-v1 --community=camp/commoniee80211s

* flavors.config

lime_camp="lime-full -dnsmasq -wpad-mini wpad authsae"

* etc/config/lime_defaults:

config lime system
    option hostname 'CA-%M4%M5%M6'
    option domain 'mesh.camp.local'
    option keep_on_upgrade 'libremesh base-files-essential
/etc/sysupgrade.conf'

config lime network
    option primary_interface eth0
    option main_ipv4_address '10.5.0.0/21'
    option main_ipv6_address '2801:01e8:2::/64'
    option bmx6_mtu '1500'
    list protocols ieee80211s
    list protocols lan
    list protocols anygw
    list protocols batadv:%N1
    list protocols bmx6:13
    list protocols olsr:14
    list protocols olsr6:15
    list protocols olsr2:16
    list resolvers 4.2.2.2   # b.resolvers.Level3.net
    list resolvers 141.1.1.1 # cns1.cw.net
    list resolvers 2001:470:20::2 # ordns.he.net
    option bmx6_over_batman false
    option bmx6_pref_gw none
    option bmx7_over_batman false
    option anygw_mac "aa:aa:aa:%N1:%N2:aa"

config lime wifi
    option channel_2ghz '11'
    option channel_5ghz '48'
    option htmode_5ghz 'HT40'
    list modes 'ap'
    list modes 'apname'
    list modes 'ieee80211s'
    option ap_ssid 'Unsecure'
    option apname_ssid 'Unsecure | %H'
    option adhoc_ssid 'Mesh | Camp'
    option adhoc_bssid '16:27:F6:27:57:14'
    option adhoc_mcast_rate_2ghz '24000'
    option adhoc_mcast_rate_5ghz '6000'
    option ieee80211s_mesh_fwding '0'
    option ieee80211s_mesh_id 'Mesh_Camp'
    option ap_encryption 'psk2+ccmp'
    option ap_key 'somepassword'
    option apname_encryption 'psk2+ccmp'
    option apname_key 'somepassword'

2) if we add to the "config lime wifi"

   option ieee80211s_encryption 'psk2+ccmp'
   option ieee80211s_key 'someotherpassword'

the mesh disappears.

are there other packages we still need to get it working besides "wpad"
& "authsae" or is there anything else we are missing?

thank you!