On Fri, 2017-09-15 at 07:50 -0500, Denis Kenzior wrote: > > > E.g. if I CMD_CONNECT to AP1, then pre-authenticate to AP2 and > > > issue a CMD_CONNECT to AP2? > > > > That's not something you can do with full-MAC cards? > > Err, why not? Pre-Authentication runs over a 0x88c7 protocol. So > we should get these just like regular PAE frames. But forget > pre-authentication, one can still force a roam between BSSes within > the same ESS by specifying NL80211_ATTR_PREV_BSSID. At least that's > what the docs say ;) Oh, you meant that kind of pre-authentication :-) I thought you meant sending an 802.11 auth frame to the new AP before breaking the connection to the old AP. > > And even mac80211 doesn't really support pre-authentication (unless > > you mean over-the-DS) > > There's only one kind of preauthentication? Are you confusing this > with FT? No, see above. > We use FT-over-Air just fine on mac80211 and on real hardware. We > even have an autotest for this based on mac80211_hwsim. FT-over-DS > should work as well. > > Full macs don't support FT due to lack of > CMD_ASSOCIATE/CMD_AUTHENTICATE. Can we fix that btw? Well, with full MAC devices you should let the device decide on the BSS? johannes
