brcmfmac and WPA3-SAE

[rg66]

Hi,

I did a build from gargoyle master current commit 8e90714. "allow independent encryption and password for each AP band" is not working properly.

Win10/11
2.4Ghz > WPA2 > works properly
5Ghz > WPA3 > "this wifi network uses an older security standard that might not protect you." > "the network key isn't correct"
5Ghz > mixed WPA2/WPA3 > "the network key isn't correct"

Linux Mint Debian Edition
2.4Ghz > WPA2 > works properly
5Ghz > WPA3 > "authentication required" loop
5Ghz > mixed WPA2/WPA3 > "authentication required" loop

Set both 2.4/5Ghz as WPA2 and everything works properly as well as different passwords for each AP.

The only thing I could see in the logs was:
Wed Jul 8 16:06:33 2026 daemon.info hostapd: phy2-ap0: STA xx:xx:xx:xx:xx:xx IEEE 802.11: associated
Wed Jul 8 16:06:33 2026 daemon.info hostapd: phy2-ap0: STA xx:xx:xx:xx:xx:xx IEEE 802.11: disassociated

Cheers

[Lantis]

Can you check your /etc/config/wireless looks ok?
Expecting to see “sae” or “sae-mixed” for encryption and the “key” you set.

Has wpa3 worked on previous builds for you before this change?

Are you using the same SSID for both 2.4 and 5GHz?
Might be worth forgetting the network as well if the auth method has changed.

[rg66]

I had removed all known networks and did a network reset as well.

Both AP's have different SSID's

/etc/config/wireless looks fine: option encryption 'sae'

I tried a few things recommended for Openwrt with no luck. It looks like it's a brcmfmac issue, I'll just live with WPA2 on both AP's.

Thanks

[Lantis]

Ah, Broadcom. Unfortunately most likely the case yes.