Can one suggest a wireless adapter for an AmigaOne?

[garyg]

I'm still waiting to hear from the IT people to see if there's a way to around
the 802.1x restriction. Presumably the security protocols have been set
by corporate but perhaps there's some local leeway.

Thanks for the input, though

[ncafferkey]

Connecting the Amiga directly to the wifi is no-go since the wifi is set up with 802.1x authentication, something the Amiga supplicants never supported.

Are you sure of this? On the one hand I've never tested 802.1x, but on the other I can't recall disabling it in WirelessManager. If it's complied in, maybe it will work with the right config file?

Considering the error message when trying to connect via the mac, it seems that policy is set to not allow "tethering" wired devices behind an authenticated device. Depending on where this policy is implemented it may or may not be possible to use a wifi/ethernet "bridge" capable of 802.1x authentication.

So the Mac connects to the "central/upstream" router, but won't connect to the local travel router? What's the purpose of the travel router then if no connected clients are allowed to use the network?

@garyg You haven't confirmed if the travel router has Ethernet ports or its exact model, which may be useful in solving the problem :-)

[kolla]

Are you sure of this?

Quite, as the person responsible to have eduroam operational at national level through two decades, it was like the first thing I tested (and I used to have a lab for testing out equipment that claimed to 802.1x support).

When doing 802.1x, the supplicant needs to validate the x509 certificate it receives from the radius server to establish the TLS connection over wpa+radius (over which the real authentication takes place, for example with EAP-PEAP, with MS-ChapV2), and in case of EAP-TLS, also the client certificate it sends to the server for authentication. From what I recall, enabling 802.1x support in old wpa_supplicant was a matter of having "configure" detect openssl includes when creating the Makefile. Was WirelessManager ever "linked" against AmiSSL?

EDIT: I just quickly checked the WirelessManager for 68k with vim (are the sources somewhere?), and it does indeed have a lot of strings in it related to EAP and certificate validation, but no reference to any ssl libraries.

On the one hand I've never tested 802.1x, but on the other I can't recall disabling it in WirelessManager. If it's complied in, maybe it will work with the right config file?

Sure, and yes, however... I suspect it predates AmiSSL v5? I would love to see 802.1x support added for both OS4 and OS3, so if you feel like digging deeper and add support, that would be superb!

So the Mac connects to the "central/upstream" router, but won't connect to the local travel router? What's the purpose of the travel router then if no connected clients are allowed to use the network?

Most wifi networks targeting random public users, such as hotel guests etc, are not using 802.1x and rely on PSK - I suspect the "travel router" also doesn't do 802.1x authentication and isn't connected to "upstream".

Without going into details, but such tiny "embedded" systems face several challenges when it comes to 802.1x and SSL/TLS, challenges for which work-arounds exists, but the most obvious solution is either just not support it, or to not do any validation and just accept whichever certificate is presented... which is not at all ideal. (imagine a system without RTC booting into 2015, and being presented certificate only valid from September 2024... for example)

@garyg You haven't confirmed if the travel router has Ethernet ports or its exact model, which may be useful in solving the problem :-)

He kinda did, I'm quite confident it is this one - https://www.gl-inet.com/products/gl-sft1200/

[garyg]

Yes, the Opal wireless travel router has Wan, Lan, USB 2.0, and Ethernet connectors.

[ncafferkey]

@kolla Thanks for the detailed info. I haven't done any development involving AmiSSL, so it's very likely you're correct that there's no 802.1x support. The WirelessManager sources are available within the AROS sources under "workbench/network/WirelessManager".

I'm still not sure what's happening in the OP's environment. This page from the device docs only talks about regular WPA2-PSK: https://docs.gl-inet.com/router/en/4/interface_guide/wireless/

@garyg so you've tried connecting from the router's Ethernet port to your AmigaOne's built-in Ethernet port?

[garyg]

>
@garyg so you've tried connecting from the router's Ethernet port to your AmigaOne's built-in Ethernet port?

Yes, that's the reason for my starting this thread. Neither I nor a friend nor the local IT people
know how to configure OS 4.1's internet software to access the Internet.

If I could only SEE the available networks I could select the one in which I have an account and connect
to the local wi-fi network

[garyg]

I had another (probably the last) visit from the IT department today
and he said that the Opal "travel adapter" or a wireless adapter
won't work unless they were physically connected to the network (which isn't possible because
the routers and their booster are buried in the ceilings around here).

What does an Airport Extreme do that other devices don't, yet will search
for available wi-fi networks for me to log into and display them?

I've e-mailed Amedia asking if they can sell or recommend any wi-fi network
cards since the X5040 doesn't have a built-in wi-fi capability.

For that matter, IS the X5040 internally expandable?

[kolla]

What does an Airport Extreme do that other devices don't

As mentioned - 802.1X, aka "WPA Enterprise"
And it is not just Airport Extreme, ofcourse there are others too, I just happend to know about Airport Extreme since I have a few.

yet will search for available wi-fi networks for me to log into and display them?

Yes, precicely - networks that are announced as requiring _log ins_ will be selectable, not just networks that just require a pre-shared key (PSK).

Rememeber, wifi client devices that don't support 802.1x like your Opal, will not be able to connect to 802.1x protected networks anyways, and hence may chose to not list them.

I've e-mailed Amedia asking if they can sell or recommend any wi-fi network
cards since the X5040 doesn't have a built-in wi-fi capability.

But it will not help - the supplicant of OS4 is still an old port of wpa_supplicant that lacks 802.1x support!

Really though - why don't you just create PSK "hotspot" on your phone and let the Opal connect to that instead?

[kolla]

Geh… Airport express that is!!

https://support.apple.com/112421

[garyg]

Neither Airport Express nor Extreme is made any more, but I found this on Apple Discussions:

Apple engineers designed the "extend" function on the AirPort Express to only work with other Apple routers.

Sorry, but the Express will not be able to wirelessly extend a 3rd party network.

If.....you can leave the Express permanently connected to your EX400 router with an Ethernet cable connection.....the Express can likely be configured to provide more wireless signal coverage that way, although it may not be a good match for the EX400 wireless.

[AmigaOldskooler]

@kolla

Really though - why don't you just create PSK "hotspot" on your phone and let the Opal connect to that instead?

That is a great idea, kolla! Maybe that is worth trying, garyg? Connect your phone to the network, then make a hotspot the computer can connect to? :-)

[kolla]

Neither Airport Express nor Extreme is made any more, but I found this on Apple Discussions:

Apple engineers designed the "extend" function on the AirPort Express to only work with other Apple routers.

Sorry, but the Express will not be able to wirelessly extend a 3rd party network.

If.....you can leave the Express permanently connected to your EX400 router with an Ethernet cable connection.....the Express can likely be configured to provide more wireless signal coverage that way, although it may not be a good match for the EX400 wireless.

Exteding the wireless network was never the “case” here though, the point was to use it as wireless _client_, bridging to ethernet - I know this works because I’m doing it here my home, and my router and access point is the one from my provider and certainly not an apple product (if it didn’t work, we’d not be able to watch TV). Only thing is that this wifi is using PSK now.

[garyg]

I tried, but had no luck.

The instructions are:
On your iPhone, go to Settings  > Personal Hotspot, then tap Allow Others to Join.
Optionally, you can change the Wi-Fi Password. Your Wi-Fi network name is your device name, which you can change in Settings > General > About.

I just get OS4 responses like DNS not found

Whereon OS 4 can I see a network/device to join/connect to? OS4 doesn't seem to
come with much documentation

[ncafferkey]

Assuming the AmigaOne is connected to the Opal router by an Ethernet cable, as a preliminary step to make sure your AmigaOne has a TCP/IP connection to the Opal, you can run this shell command:
ping 192.168.8.1

You'll then need to configure the Opal router through its web interface at http://192.168.8.1 - if this doesn't work on your Amiga browser, connect your Mac to the router and try it there.

From skimming the user guide, it seems you'll need to change the network mode to "Extender". See here: https://docs.gl-inet.com/router/en/4/interface_guide/network_mode/

After that you probably need to go to the Wireless section of the Opal's settings to enter your iPhone's personal hotspot details: https://docs.gl-inet.com/router/en/4/interface_guide/wireless/

[OldAmigan]

@garyg

I used to use a vonets 33N wifi bridge (http://www.vonets.com/ProductViews.asp?D_ID=23) to connect my AmigaOneXE to my wifi signal. I now use a more recent version to connect my AmigaOne A1222+ to the wifi. This uses USB to power the devie and an ethernet cable to connect it to the A1's ethernet port.

However, I can't, for some reason, set it up from the A1. I use a PC (but the Mac should manage this OK) to set it up to connect it to the wifi as a bridge, then transfer it to the A1 and use Roadshow to set up the ethernet (LAN) connection

[garyg]

When I try it on the Amiga "could not add route from DEVS:Internet/routes, line 6 (network is unreachable)
When I try it from the Mac it becomes http://0.0.0.192/168.8.1 and stalls