auto-t: block auth frames for FT-over-DS test

The FT-over-DS test was allowed to fail as it stood. If FT-over-DS
failed it would just do a normal over-Air transition which satisfied
all the checks. To prevent this Authenticate frames are blocked after
the initial connection so if FT-over-DS fails there is no other way
to roam.

autotests/testPSK-roam/connection_test.py

@@ -59,6 +59,9 @@ class Test(unittest.TestCase):
         self.assertRaises(Exception, testutil.test_ifaces_connected,
                           (self.bss_hostapd[1].ifname, device.name, True, True))
 
+        if over_ds:
+            self.rule0.enabled = True
+
         device.roam(self.bss_hostapd[1].bssid)
 
         condition = 'obj.state == DeviceState.roaming'
@@ -150,12 +153,24 @@ class Test(unittest.TestCase):
         os.system('ifconfig "' + self.bss_hostapd[0].ifname + '" up')
         os.system('ifconfig "' + self.bss_hostapd[1].ifname + '" up')
 
+        self.rule0.enabled = False
+
     @classmethod
     def setUpClass(cls):
+        hwsim = Hwsim()
+
         IWD.copy_to_storage('TestFT.psk')
 
         cls.bss_hostapd = [ HostapdCLI(config='ft-psk-ccmp-1.conf'),
                             HostapdCLI(config='ft-psk-ccmp-2.conf') ]
+        rad2 = hwsim.get_radio('rad2')
+
+        cls.rule0 = hwsim.rules.create()
+        cls.rule0.source = rad2.addresses[0]
+        cls.rule0.bidirectional = True
+        cls.rule0.signal = -2000
+        cls.rule0.prefix = 'b0'
+        cls.rule0.drop = True
 
         # Set interface addresses to those expected by hostapd config files
         os.system('ifconfig "' + cls.bss_hostapd[0].ifname +