[SOLVED] cant connect to wifi even after providing a .8021x file

maxeboy991 · 2025-06-20 19:53:44

I am able to connect to networks with psk security,no issues there.

When I try to connect to my campus wifi, iwctl says not configure.

iwctl station wlan0 show

Station: wlan0
--------------------------------------------------------------------------------
Settable Property Value
--------------------------------------------------------------------------------
Scanning no
State disconnected

and I can see the network(CAMPUS_SECURED)

station wlan0 get-networks
Available networks *
--------------------------------------------------------------------------------
Network name Security Signal
--------------------------------------------------------------------------------
CAMPUS_SECURED 8021x ****
STUDENT_SECURED 8021x ****
GUEST_SECURED 8021x ****
POC-PSK-MAC psk ****

here is the CAMPUS_SECURED.8021x file at /var/lib/iwd/CAMPUS_SECURED.8021x

[Security]
EAP-Method=PEAP
EAP-PEAP-CACert=None
EAP-PEAP-Phase2-Method=MSCHAPV2
EAP-PEAP-Phase2-Identity=<user name>
EAP-PEAP-Phase2-Password=<password>
[Settings]
AutoConnect=true"

My institution doesn't use CA certificates that's why its set to None

here is the output to journalctl -u iwd.service :

Mar 04 23:24:08 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:24:08 archlinux iwd[27113]: Could not register frame watch type 00d0: -114
Mar 04 23:24:08 archlinux iwd[27113]: Could not register frame watch type 00d0: -114
Mar 04 23:24:08 archlinux iwd[27113]: Could not register frame watch type 00d0: -114
Mar 04 23:24:08 archlinux iwd[27113]: udev interface=wlan0 ifindex=3
Mar 04 23:24:08 archlinux iwd[27113]: Could not register frame watch type 00d0: -114
Mar 04 23:24:08 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:30:57 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:37:50 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:41:51 archlinux iwd[27113]: event: connect-info, ssid: CAMPUS_SECURED, bss: e8:10:98:61:bc:91, signal: -60, load: 46/255
Mar 04 23:41:51 archlinux iwd[27113]: event: state, old: autoconnect_full, new: connecting
Mar 04 23:41:53 archlinux iwd[27113]: EAP completed with eapFail
Mar 04 23:41:53 archlinux iwd[27113]: EAP negotiation stopped after the Identity exchange, this can happen when the EAP-Identity value
is not what the authenticator expects
Mar 04 23:41:53 archlinux iwd[27113]: 4-Way handshake failed for ifindex: 3, reason: 23
Mar 04 23:41:53 archlinux iwd[27113]: event: connect-failed, reason: 23
Mar 04 23:41:53 archlinux iwd[27113]: event: state, old: connecting, new: disconnected
Mar 04 23:41:53 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:41:53 archlinux iwd[27113]: event: connect-info, ssid: CAMPUS_SECURED, bss: e8:10:98:61:bc:91, signal: -60, load: 47/255
Mar 04 23:41:53 archlinux iwd[27113]: event: state, old: autoconnect_quick, new: connecting (auto)
Mar 04 23:41:55 archlinux iwd[27113]: EAP completed with eapFail
Mar 04 23:41:55 archlinux iwd[27113]: EAP negotiation stopped after the Identity exchange, this can happen when the EAP-Identity value
is not what the authenticator expects

It might be something minor that I am missing but idk new to arch.

The output in journalctl -u iwd.service says that my identity might be wrong but on plasma desktop it works flawlessly with with the same credentials

Last edited by maxeboy991 (2025-06-24 09:53:02)

ntb314 · 2025-06-23 07:05:26

Hey maxeboy991!
I had almost the exact same issue on my campus Wi-Fi (eduroam in my case) and spent way too much time trying to figure it out, so maybe this helps…

For me, it turned out to be a conflict between iwd and NetworkManager, they were both kind of trying to manage the interface, causing timeouts and broken authentication. Plasma was using NetworkManager under the hood, so it worked there, but not with iwctl.

I fixed it by picking just one, in my case, I fully disabled iwd and stuck with NetworkManager. But you could also go the other way and use iwd!

You can check if NetworkManager or iwd is still running with:

systemctl status NetworkManager

systemctl status iwd

and if so, maybe try to disable the one you dont want to use and stick with the other.

Sorry if that’s not it or you already tried this, but the symptoms really reminded me of my setup I had then.
Hopefully it helps a bit!

Cheers!

maxeboy991 · 2025-06-23 10:24:29

Hey ntb314,

Yes, you are absolutely right in that regards so I tried it either way, i.e. disabling NetworkManager and using iwd...but it still showed Not Configured despite there being a config file and when I disabled iwd for Network Manager, and scanned for wifi, no networks were visible, I tried googling and found a few fixes but nothing worked.

Despite all this ethernet works absolutely fine and I am making it work somehow, but i really need that wifi.

Thanks for your response btw.

mithrial · 2025-06-23 10:46:53

There is the error message in the log:

Mar 04 23:41:53 archlinux iwd[27113]: EAP negotiation stopped after the Identity exchange, this can happen when the EAP-Identity value
is not what the authenticator expects

Does your university provide some level of support? From experience, at least they have some information on how to connect with Apple devices. Sometimes, the options can be set correctly.

maxeboy991 · 2025-06-23 10:55:24

Hey mithrial

No, my uni is such that they would recommend me to stick to windows.

ntb314 · 2025-06-23 11:36:27

Hey maxeboy991,

I just noticed something that might be the culprit, in your .8021x config, there's an extra quote at the end of AutoConnect=true". Maybe this is just an issue that happened as you copied the config into the comment, but if not this could be an issue.

That line should be:

AutoConnect=true

No quotes at the end , iwd is strict about formatting, so even a small syntax error can cause the network to show as Not Configured or be ignored entirely.

Try fixing that, then restart the service. And try connecting again:

iwctl
> station wlan0 connect CAMPUS_SECURED

Hopefully it was just this minor issue and that does the trick!

maxeboy991 · 2025-06-23 12:11:32

Hey ntb314,

I took your suggestion and checked, turns out while pasting it that quotation symbol got added there isn't one in the config file.

on another note: I created and edited the CAMPUS_SECURED.8021x file like this: sudo vim /var/lib/iwd/CAMPUS_SECURED.8021x, but say when i check the same path without sudo then his file doesn't exist.

The reason I used sudo was because of permissions. Hopefully I didn't do anything wrong there.

mithrial · 2025-06-23 12:35:52

By default, your plain password in stored in that file, so it's only readable by root. This is intended.

How do they recommend setting it up in Windows? Is there really no one at your university using Macs?

maxeboy991 · 2025-06-23 12:40:43

Hey Mithrial,

No people do use macs here, but not anyone i know would not know about this sort of thing. In windows setting up any kind of config file is not required, rather you just put in your credentials i.e. your username and password and select CA certificate as none, that's all.

seth · 2025-06-23 12:45:07

Mar 04 23:41:53 archlinux iwd[27113]: 4-Way handshake failed for ifindex: 3, reason: 23
Mar 04 23:41:53 archlinux iwd[27113]: event: connect-failed, reason: 23

reason=23 "IEEE 802.1X authentication failed"

My institution doesn't use CA certificates that's why its set to None

https://wiki.archlinux.org/title/Iwd#EAP-PWD ?
I do not think that PEAP w/o a certificate is a thing (but could be wrong on this)

maxeboy991 · 2025-06-23 13:02:20

Hey seth,

I checked on the wiki and you are absolutely right, in all the examples they mention a CA cert file. But in plasma desktop as well, CA certificates are set to None and I am able to connect there. I removed the line EAP-PEAP-Phase2-Certificate=None and in iwd it shows

iwctl
NetworkConfigurationEnabled: enabled
StateDirectory: /var/lib/iwd
Version: 3.9
[iwd]# station wlan0 connect CAMPUS_SECURED
Operation failed

checking journalctl -u iwd.service again:

Mar 04 23:24:08 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:24:08 archlinux iwd[27113]: Could not register frame watch type 00d0: -114
Mar 04 23:24:08 archlinux iwd[27113]: Could not register frame watch type 00d0: -114
Mar 04 23:24:08 archlinux iwd[27113]: Could not register frame watch type 00d0: -114
Mar 04 23:24:08 archlinux iwd[27113]: udev interface=wlan0 ifindex=3
Mar 04 23:24:08 archlinux iwd[27113]: Could not register frame watch type 00d0: -114
Mar 04 23:24:08 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:30:57 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:37:50 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:41:51 archlinux iwd[27113]: event: connect-info, ssid: CAMPUS_SECURED, bss: e8:10:98:61:bc:91, signal: -60, load: 46/255
Mar 04 23:41:51 archlinux iwd[27113]: event: state, old: autoconnect_full, new: connecting
Mar 04 23:41:53 archlinux iwd[27113]: EAP completed with eapFail
Mar 04 23:41:53 archlinux iwd[27113]: EAP negotiation stopped after the Identity exchange, this can happen when the EAP-Identity value is not what the authenticator expects
Mar 04 23:41:53 archlinux iwd[27113]: 4-Way handshake failed for ifindex: 3, reason: 23
Mar 04 23:41:53 archlinux iwd[27113]: event: connect-failed, reason: 23
Mar 04 23:41:53 archlinux iwd[27113]: event: state, old: connecting, new: disconnected
Mar 04 23:41:53 archlinux iwd[27113]: event: state, old: disconnected, new: autoconnect_quick
Mar 04 23:41:53 archlinux iwd[27113]: event: connect-info, ssid: CAMPUS_SECURED, bss: e8:10:98:61:bc:91, signal: -60, load: 47/255
Mar 04 23:41:53 archlinux iwd[27113]: event: state, old: autoconnect_quick, new: connecting (auto)
Mar 04 23:41:55 archlinux iwd[27113]: EAP completed with eapFail
Mar 04 23:41:55 archlinux iwd[27113]: EAP negotiation stopped after the Identity exchange, this can happen when the EAP-Identity value is not what the authenticator expects
Mar 04 23:41:55 archlinux iwd[27113]: 4-Way handshake failed for ifindex: 3, reason: 23
Mar 04 23:41:55 archlinux iwd[27113]: event: connect-failed, reason: 23

The reason I removed the CA cert line is from the example in 3.2.5 of the wiki link you provided.

mithrial · 2025-06-23 13:16:29

You don't have the variable EAP-Identity set.

This is my config (for eduroam, however):

[Setting]
AutoConnect=true

[Security]
EAP-PEAP-Phase2-Password=<password>
EAP-PEAP-Phase2-Identity=<username>
EAP-PEAP-Phase2-Method=MSCHAPV2
EAP-PEAP-ServerDomainMask=<domains>
EAP-PEAP-CACert=/var/lib/iwd/eduroam.pem
EAP-Identity=<username>
EAP-Method=PEAP

You can see in your log, that the certificate is not the error here (could maybe later, but not now). It is the missing EAP-Identity.

seth · 2025-06-23 13:20:00

nb that I linked EAP-PWD, not EAP-PEAP - suspecting your institution uses the former if they don't issue certificates for this.

But in plasma desktop as well, CA certificates are set to

What plasma desktop, what does this have to do with this? Are you configuring the EAP directly for iwd or indirectly (because you're actually using NM)?
Do not try to use two network config systems at the same time.
Do you https://wiki.archlinux.org/title/Networ … Fi_backend ?
Does it otherwise work w/ the NM configuration and wpa_supplicant as backend?

Sanity check:
Please post the output of

find /etc/systemd -type l -exec test -f {} \; -print | awk -F'/' '{ printf ("%-40s | %s\n", $(NF-0), $(NF-1)) }' | sort -f

maxeboy991 · 2025-06-23 13:21:18

Hey mithrial,

It worked, I just set the EAP-Identity to my username as suggested by you and CA certificates set to None and now I am able to connect using

iwctl station wlan0 connect CAMPUS_SECURED

Thanks a lot everyone!!!

maxeboy991 · 2025-06-23 13:29:27

Sorry for the silly question but how do i close the thread.

maxeboy991 · 2025-06-23 13:32:48

seth wrote:

nb that I linked EAP-PWD, not EAP-PEAP - suspecting your institution uses the former if they don't issue certificates for this.
But in plasma desktop as well, CA certificates are set to
What plasma desktop, what does this have to do with this? Are you configuring the EAP directly for iwd or indirectly (because you're actually using NM)?
Do not try to use two network config systems at the same time.
Do you https://wiki.archlinux.org/title/Networ … Fi_backend ?
Does it otherwise work w/ the NM configuration and wpa_supplicant as backend?
Sanity check:
Please post the output of
find /etc/systemd -type l -exec test -f {} \; -print | awk -F'/' '{ printf ("%-40s | %s\n", $(NF-0), $(NF-1)) }' | sort -f

The output is

dbus-fi.w1.wpa_supplicant1.service | system
dbus-org.freedesktop.resolve1.service | system
dbus-org.freedesktop.timesync1.service | system
dhcpcd.service | multi-user.target.wants
display-manager.service | system
fstrim.timer | timers.target.wants
getty@tty1.service | getty.target.wants
iwd.service | multi-user.target.wants
p11-kit-server.socket | sockets.target.wants
pipewire-pulse.socket | sockets.target.wants
pipewire-session-manager.service | user
pipewire.socket | sockets.target.wants
remote-fs.target | multi-user.target.wants
systemd-resolved.service | sysinit.target.wants
systemd-timesyncd.service | sysinit.target.wants
systemd-userdbd.socket | sockets.target.wants
wireplumber.service | pipewire.service.wants
wpa_supplicant.service | multi-user.target.wants
xdg-user-dirs-update.service | default.target.wants

No I am using hyprland alongside KDE(rarely use it) thats why the reference. Also from an earlier answer by ntb314, i disabled NM and am using only iwd.

seth · 2025-06-23 16:08:01

Disable the wpa_supplicant.service

You can mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

Arch Linux

#1 2025-06-20 19:53:44

[SOLVED] cant connect to wifi even after providing a .8021x file

#2 2025-06-23 07:05:26

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#3 2025-06-23 10:24:29

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#4 2025-06-23 10:46:53

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#5 2025-06-23 10:55:24

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#6 2025-06-23 11:36:27

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#7 2025-06-23 12:11:32

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#8 2025-06-23 12:35:52

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#9 2025-06-23 12:40:43

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#10 2025-06-23 12:45:07

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#11 2025-06-23 13:02:20

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#12 2025-06-23 13:16:29

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#13 2025-06-23 13:20:00

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#14 2025-06-23 13:21:18

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#15 2025-06-23 13:29:27

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#16 2025-06-23 13:32:48

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

#17 2025-06-23 16:08:01

Re: [SOLVED] cant connect to wifi even after providing a .8021x file

Board footer