Quiet Period
This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.
Test Quiet Period In 802.1X Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth1 address 192.168.100.1/24 set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth1 authenticator aaa authentication list1 set interfaces ethernet eth1 authenticator log-level debug set interfaces ethernet eth1 authenticator mode only-802.1x set interfaces ethernet eth1 authenticator quiet-period 20 set interfaces ethernet eth1 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/a2K9cC/JdEbBlLOJ5GytoLX/cvQ7s7iKl9zc2YoTWfOjsNr5wWSg3iHXGzuEue2bDVK+u8e79DQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping the IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.443 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.443/0.443/0.443/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth1 address 192.168.100.2/24 set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX18XOTZQHgtp8kcAqZVSNqRVlTpjsKBxwQ0= set interfaces ethernet eth1 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
May 19 21:06:04.998146 osdx hostapd[121095]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported. May 19 21:06:04.998181 osdx hostapd[121095]: eth1: RADIUS Authentication server 10.215.168.1:1812 May 19 21:06:04.998645 osdx hostapd[121095]: connect[radius]: Network is unreachable May 19 21:06:04.998256 osdx hostapd[121095]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2 May 19 21:06:04.998264 osdx hostapd[121095]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode May 19 21:06:05.013894 osdx hostapd[121095]: Discovery mode enabled on eth1 May 19 21:06:05.014061 osdx hostapd[121095]: eth1: interface state UNINITIALIZED->ENABLED May 19 21:06:05.014061 osdx hostapd[121095]: eth1: AP-ENABLED May 19 21:06:06.663007 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:08.357441 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: New STA de:ad:be:ef:6c:11 added May 19 21:06:08.357466 osdx hostapd[121096]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode May 19 21:06:08.373918 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: start authentication May 19 21:06:08.373953 osdx hostapd[121096]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames May 19 21:06:08.373970 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAPOL-Start from STA May 19 21:06:08.373980 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: unauthorizing port May 19 21:06:08.373990 osdx hostapd[121096]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 19 21:06:08.374011 osdx hostapd[121096]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE May 19 21:06:08.374027 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 45) May 19 21:06:08.374441 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=45 len=10) from STA: EAP Response-Identity (1) May 19 21:06:08.374455 osdx hostapd[121096]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH May 19 21:06:08.374461 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: STA identity 'wrong' May 19 21:06:08.374495 osdx hostapd[121096]: eth1: RADIUS Authentication server 10.215.168.1:1812 May 19 21:06:08.377583 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.377627 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.378015 osdx hostapd[121096]: eth1: RADIUS Received 80 bytes from RADIUS server May 19 21:06:08.378030 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:08.378037 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:08.378089 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=46 len=22) from RADIUS server: EAP-Request-MD5 (4) May 19 21:06:08.378103 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 46) May 19 21:06:08.378530 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=46 len=6) from STA: EAP Response-unknown (3) May 19 21:06:08.378638 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.378671 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.378939 osdx hostapd[121096]: eth1: RADIUS Received 64 bytes from RADIUS server May 19 21:06:08.378950 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:08.378956 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:08.378984 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=47 len=6) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:08.378995 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 47) May 19 21:06:08.379539 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=47 len=194) from STA: EAP Response-PEAP (25) May 19 21:06:08.379607 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.379632 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.381651 osdx hostapd[121096]: eth1: RADIUS Received 1068 bytes from RADIUS server May 19 21:06:08.381663 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:08.381670 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:08.381702 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=48 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:08.381719 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 48) May 19 21:06:08.382021 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=48 len=6) from STA: EAP Response-PEAP (25) May 19 21:06:08.382102 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.382140 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.382438 osdx hostapd[121096]: eth1: RADIUS Received 229 bytes from RADIUS server May 19 21:06:08.382450 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:08.382457 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:08.382486 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=49 len=171) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:08.382498 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 49) May 19 21:06:08.385796 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=49 len=103) from STA: EAP Response-PEAP (25) May 19 21:06:08.385925 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.385949 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.386737 osdx hostapd[121096]: eth1: RADIUS Received 115 bytes from RADIUS server May 19 21:06:08.386757 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:08.386768 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:08.386834 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=57) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:08.386853 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 50) May 19 21:06:08.387400 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=50 len=6) from STA: EAP Response-PEAP (25) May 19 21:06:08.387505 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.387541 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.387888 osdx hostapd[121096]: eth1: RADIUS Received 98 bytes from RADIUS server May 19 21:06:08.387902 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:08.387911 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:08.387949 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=40) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:08.387963 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 51) May 19 21:06:08.388308 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=51 len=41) from STA: EAP Response-PEAP (25) May 19 21:06:08.388398 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.388428 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.388743 osdx hostapd[121096]: eth1: RADIUS Received 131 bytes from RADIUS server May 19 21:06:08.388755 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:08.388764 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:08.388799 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=52 len=73) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:08.388813 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 52) May 19 21:06:08.389349 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=52 len=95) from STA: EAP Response-PEAP (25) May 19 21:06:08.389438 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.389469 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.389825 osdx hostapd[121096]: eth1: RADIUS Received 104 bytes from RADIUS server May 19 21:06:08.389882 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:08.389891 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:08.389932 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=46) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:08.389947 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 53) May 19 21:06:08.390344 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=53 len=46) from STA: EAP Response-PEAP (25) May 19 21:06:08.390458 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:08.390493 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:08.778247 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:09.390601 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Resending RADIUS message (id=8) May 19 21:06:09.390662 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds May 19 21:06:09.390981 osdx hostapd[121096]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:06:09.390990 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:09.391000 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:09.391092 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=4 id=53 len=4) from RADIUS server: EAP Failure May 19 21:06:09.391160 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 53) May 19 21:06:09.391186 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: unauthorizing port May 19 21:06:09.391195 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 19 21:06:09.391202 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) May 19 21:06:09.391213 osdx hostapd[121096]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:06:09.391222 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:09.391229 osdx hostapd[121096]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Quiet period expiredShow output
May 19 21:06:11.112666 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:13.219352 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:15.284873 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:17.353298 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:19.421574 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:21.484108 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:23.549313 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:25.617247 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:27.682373 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:29.392245 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication May 19 21:06:29.392274 osdx hostapd[121096]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 19 21:06:29.392334 osdx hostapd[121096]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE May 19 21:06:29.392357 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 218) May 19 21:06:29.393179 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=218 len=10) from STA: EAP Response-Identity (1) May 19 21:06:29.393199 osdx hostapd[121096]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH May 19 21:06:29.393208 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: STA identity 'wrong' May 19 21:06:29.393322 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.393366 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:29.393865 osdx hostapd[121096]: eth1: RADIUS Received 80 bytes from RADIUS server May 19 21:06:29.393878 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:29.393887 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:29.393929 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=219 len=22) from RADIUS server: EAP-Request-MD5 (4) May 19 21:06:29.393945 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 219) May 19 21:06:29.394471 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=219 len=6) from STA: EAP Response-unknown (3) May 19 21:06:29.394635 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.394681 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:29.395019 osdx hostapd[121096]: eth1: RADIUS Received 64 bytes from RADIUS server May 19 21:06:29.395034 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:29.395045 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:29.395092 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=220 len=6) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:29.395110 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 220) May 19 21:06:29.395714 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=220 len=194) from STA: EAP Response-PEAP (25) May 19 21:06:29.395808 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.395839 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:29.397587 osdx hostapd[121096]: eth1: RADIUS Received 1068 bytes from RADIUS server May 19 21:06:29.397598 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:29.397605 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:29.397636 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=221 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:29.397648 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 221) May 19 21:06:29.397866 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=221 len=6) from STA: EAP Response-PEAP (25) May 19 21:06:29.397934 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.397954 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:29.398086 osdx hostapd[121096]: eth1: RADIUS Received 229 bytes from RADIUS server May 19 21:06:29.398095 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:29.398100 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:29.398131 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=222 len=171) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:29.398143 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 222) May 19 21:06:29.400027 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=222 len=103) from STA: EAP Response-PEAP (25) May 19 21:06:29.400074 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.400086 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:29.400493 osdx hostapd[121096]: eth1: RADIUS Received 115 bytes from RADIUS server May 19 21:06:29.400501 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:29.400506 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:29.400526 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=223 len=57) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:29.400534 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 223) May 19 21:06:29.400771 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=223 len=6) from STA: EAP Response-PEAP (25) May 19 21:06:29.400816 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.400830 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:29.400942 osdx hostapd[121096]: eth1: RADIUS Received 98 bytes from RADIUS server May 19 21:06:29.400950 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:29.400954 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:29.400972 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=224 len=40) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:29.400980 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 224) May 19 21:06:29.401143 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=224 len=41) from STA: EAP Response-PEAP (25) May 19 21:06:29.401182 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.401195 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:29.401312 osdx hostapd[121096]: eth1: RADIUS Received 131 bytes from RADIUS server May 19 21:06:29.401318 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:29.401323 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:29.401340 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=225 len=73) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:29.401347 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 225) May 19 21:06:29.401576 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=225 len=95) from STA: EAP Response-PEAP (25) May 19 21:06:29.401615 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.401627 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:29.401756 osdx hostapd[121096]: eth1: RADIUS Received 104 bytes from RADIUS server May 19 21:06:29.401762 osdx hostapd[121096]: eth1: RADIUS Received RADIUS message May 19 21:06:29.401766 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:29.401782 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=226 len=46) from RADIUS server: EAP-Request-PEAP (25) May 19 21:06:29.401789 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 226) May 19 21:06:29.401930 osdx hostapd[121096]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=226 len=46) from STA: EAP Response-PEAP (25) May 19 21:06:29.401967 osdx hostapd[121096]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:29.401989 osdx hostapd[121096]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB Mode
Description
This scenario shows how to configure the quiet period in a device with MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth1 address 192.168.100.1/24 set interfaces ethernet eth1 authenticator aaa authentication list1 set interfaces ethernet eth1 authenticator log-level debug set interfaces ethernet eth1 authenticator mode only-MAB set interfaces ethernet eth1 authenticator quiet-period 20 set interfaces ethernet eth1 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+q9vVg9a0QDVbGIVq7K8lhw07Ws4hU64Kws6708s+xjMoV2XFweN/GeE/tPnYHzYk98ozB7F2K4Q== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping the IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.210 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.210/0.210/0.210/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth1 address 192.168.100.2/24 set interfaces ethernet eth1 mac '00:11:22:33:44:55' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
May 19 21:06:36.995915 osdx hostapd[121714]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported. May 19 21:06:36.995932 osdx hostapd[121714]: eth1: RADIUS Authentication server 10.215.168.1:1812 May 19 21:06:36.996308 osdx hostapd[121714]: connect[radius]: Network is unreachable May 19 21:06:36.995984 osdx hostapd[121714]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5 May 19 21:06:36.995990 osdx hostapd[121714]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode May 19 21:06:37.027798 osdx hostapd[121714]: Discovery mode enabled on eth1 May 19 21:06:37.027929 osdx hostapd[121714]: eth1: interface state UNINITIALIZED->ENABLED May 19 21:06:37.027929 osdx hostapd[121714]: eth1: AP-ENABLED May 19 21:06:40.525975 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:42.030116 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication May 19 21:06:42.030154 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added May 19 21:06:42.030162 osdx hostapd[121715]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode May 19 21:06:42.043856 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication May 19 21:06:42.043914 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 19 21:06:42.043953 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 19 21:06:42.048496 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 19 21:06:42.048522 osdx hostapd[121715]: eth1: RADIUS Authentication server 10.215.168.1:1812 May 19 21:06:42.048696 osdx hostapd[121715]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:06:42.048758 osdx hostapd[121715]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:06:43.048829 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) May 19 21:06:43.048861 osdx hostapd[121715]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds May 19 21:06:43.049292 osdx hostapd[121715]: eth1: RADIUS Received 20 bytes from RADIUS server May 19 21:06:43.049297 osdx hostapd[121715]: eth1: RADIUS Received RADIUS message May 19 21:06:43.049301 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:06:43.049305 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response May 19 21:06:43.049348 osdx hostapd[121715]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 19 21:06:43.049351 osdx hostapd[121715]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 19 21:06:43.049354 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) May 19 21:06:43.049356 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Quiet period expiredShow output
May 19 21:06:46.753184 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:50.914918 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:55.069037 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:06:59.235542 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:07:03.050112 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry May 19 21:07:03.050144 osdx hostapd[121715]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 19 21:07:03.050151 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB May 19 21:07:03.050157 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 19 21:07:03.050266 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 19 21:07:03.050320 osdx hostapd[121715]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 19 21:07:03.050362 osdx hostapd[121715]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:03.050410 osdx hostapd[121715]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB-Fallback Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth1 address 192.168.100.1/24 set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth1 authenticator aaa authentication list1 set interfaces ethernet eth1 authenticator log-level debug set interfaces ethernet eth1 authenticator mode 802.1x-MAB set interfaces ethernet eth1 authenticator quiet-period 20 set interfaces ethernet eth1 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+HRt1XRqnF5IHl6HwSVhud6OuKFr66IXtELcy5Sopy0X6V4IstesDx42+IXJGxBFoP1kuU4DdtvA== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping the IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.225 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.225/0.225/0.225/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth1 address 192.168.100.2/24 set interfaces ethernet eth1 mac '00:11:22:33:44:55' set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX19Aqp5xP1QXevwXl06brOS3seOFnuQ6Pac= set interfaces ethernet eth1 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
May 19 21:07:10.068346 osdx hostapd[122304]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported. May 19 21:07:10.068363 osdx hostapd[122304]: eth1: RADIUS Authentication server 10.215.168.1:1812 May 19 21:07:10.068657 osdx hostapd[122304]: connect[radius]: Network is unreachable May 19 21:07:10.068407 osdx hostapd[122304]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 May 19 21:07:10.068412 osdx hostapd[122304]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode May 19 21:07:10.084190 osdx hostapd[122304]: Discovery mode enabled on eth1 May 19 21:07:10.084264 osdx hostapd[122304]: eth1: interface state UNINITIALIZED->ENABLED May 19 21:07:10.084264 osdx hostapd[122304]: eth1: AP-ENABLED May 19 21:07:13.315633 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added May 19 21:07:13.315645 osdx hostapd[122305]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode May 19 21:07:13.332219 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication May 19 21:07:13.332245 osdx hostapd[122305]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames May 19 21:07:13.332248 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response May 19 21:07:13.332250 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response May 19 21:07:13.332260 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response May 19 21:07:13.332263 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA May 19 21:07:13.332273 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 19 21:07:13.332280 osdx hostapd[122305]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 19 21:07:13.332291 osdx hostapd[122305]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE May 19 21:07:13.332302 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 142) May 19 21:07:13.332520 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=142 len=10) from STA: EAP Response-Identity (1) May 19 21:07:13.332528 osdx hostapd[122305]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH May 19 21:07:13.332531 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' May 19 21:07:13.332549 osdx hostapd[122305]: eth1: RADIUS Authentication server 10.215.168.1:1812 May 19 21:07:13.334230 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.334253 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.334478 osdx hostapd[122305]: eth1: RADIUS Received 80 bytes from RADIUS server May 19 21:07:13.334483 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:13.334486 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:13.334501 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=143 len=22) from RADIUS server: EAP-Request-MD5 (4) May 19 21:07:13.334507 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 143) May 19 21:07:13.334650 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=143 len=6) from STA: EAP Response-unknown (3) May 19 21:07:13.334682 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.334692 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.334820 osdx hostapd[122305]: eth1: RADIUS Received 64 bytes from RADIUS server May 19 21:07:13.334824 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:13.334827 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:13.334838 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=144 len=6) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:13.334842 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 144) May 19 21:07:13.335131 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=144 len=194) from STA: EAP Response-PEAP (25) May 19 21:07:13.335177 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.335191 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.336095 osdx hostapd[122305]: eth1: RADIUS Received 1068 bytes from RADIUS server May 19 21:07:13.336100 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:13.336103 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:13.336119 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=145 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:13.336124 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 145) May 19 21:07:13.336266 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=145 len=6) from STA: EAP Response-PEAP (25) May 19 21:07:13.336309 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.336320 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.336436 osdx hostapd[122305]: eth1: RADIUS Received 229 bytes from RADIUS server May 19 21:07:13.336441 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:13.336444 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:13.336462 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=146 len=171) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:13.336467 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 146) May 19 21:07:13.337671 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=146 len=103) from STA: EAP Response-PEAP (25) May 19 21:07:13.337700 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.337707 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.337960 osdx hostapd[122305]: eth1: RADIUS Received 115 bytes from RADIUS server May 19 21:07:13.337965 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:13.337968 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:13.337983 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=147 len=57) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:13.337988 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 147) May 19 21:07:13.338149 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=147 len=6) from STA: EAP Response-PEAP (25) May 19 21:07:13.338178 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.338188 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.338301 osdx hostapd[122305]: eth1: RADIUS Received 98 bytes from RADIUS server May 19 21:07:13.338305 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:13.338307 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:13.338318 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=148 len=40) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:13.338323 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 148) May 19 21:07:13.338433 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=148 len=41) from STA: EAP Response-PEAP (25) May 19 21:07:13.338463 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.338472 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.338571 osdx hostapd[122305]: eth1: RADIUS Received 131 bytes from RADIUS server May 19 21:07:13.338575 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:13.338578 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:13.338588 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=149 len=73) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:13.338592 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 149) May 19 21:07:13.338782 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=149 len=95) from STA: EAP Response-PEAP (25) May 19 21:07:13.338807 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.338813 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.338943 osdx hostapd[122305]: eth1: RADIUS Received 104 bytes from RADIUS server May 19 21:07:13.338948 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:13.338950 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:13.338960 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=150 len=46) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:13.338965 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 150) May 19 21:07:13.339072 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=150 len=46) from STA: EAP Response-PEAP (25) May 19 21:07:13.339095 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:13.339101 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:13.749317 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:07:14.339174 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) May 19 21:07:14.339201 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds May 19 21:07:14.339339 osdx hostapd[122305]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:07:14.339342 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:14.339345 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:14.339394 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=150 len=4) from RADIUS server: EAP Failure May 19 21:07:14.339416 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 150) May 19 21:07:14.339427 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 19 21:07:14.339431 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 19 21:07:14.339434 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately May 19 21:07:14.339438 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 19 21:07:14.339488 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 19 21:07:14.339495 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 19 21:07:14.339505 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:14.339516 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:14.339526 osdx hostapd[122305]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:07:14.339529 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:14.339531 osdx hostapd[122305]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet May 19 21:07:15.339613 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) May 19 21:07:15.339662 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds May 19 21:07:15.339944 osdx hostapd[122305]: eth1: RADIUS Received 20 bytes from RADIUS server May 19 21:07:15.339951 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:15.339957 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:15.339964 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response May 19 21:07:15.340046 osdx hostapd[122305]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 19 21:07:15.340051 osdx hostapd[122305]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 19 21:07:15.340057 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) May 19 21:07:15.340062 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds May 19 21:07:15.340075 osdx hostapd[122305]: eth1: RADIUS Received 20 bytes from RADIUS server May 19 21:07:15.340080 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:15.340085 osdx hostapd[122305]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Quiet period expiredShow output
May 19 21:07:19.992485 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:07:24.164008 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:07:28.304820 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:07:32.465200 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:07:35.340542 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry May 19 21:07:35.340553 osdx hostapd[122305]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 19 21:07:35.340555 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X May 19 21:07:35.340558 osdx hostapd[122305]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames May 19 21:07:35.340567 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 19 21:07:35.340572 osdx hostapd[122305]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 19 21:07:35.340599 osdx hostapd[122305]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE May 19 21:07:35.340608 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 110) May 19 21:07:35.341060 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=110 len=10) from STA: EAP Response-Identity (1) May 19 21:07:35.341068 osdx hostapd[122305]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH May 19 21:07:35.341072 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' May 19 21:07:35.341142 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.341166 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:35.341402 osdx hostapd[122305]: eth1: RADIUS Received 80 bytes from RADIUS server May 19 21:07:35.341407 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:35.341410 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:35.341426 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=111 len=22) from RADIUS server: EAP-Request-MD5 (4) May 19 21:07:35.341433 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 111) May 19 21:07:35.341560 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=111 len=6) from STA: EAP Response-unknown (3) May 19 21:07:35.341588 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.341595 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:35.341715 osdx hostapd[122305]: eth1: RADIUS Received 64 bytes from RADIUS server May 19 21:07:35.341720 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:35.341723 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:35.341738 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=112 len=6) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:35.341743 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 112) May 19 21:07:35.341985 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=112 len=194) from STA: EAP Response-PEAP (25) May 19 21:07:35.342014 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.342023 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:35.342959 osdx hostapd[122305]: eth1: RADIUS Received 1068 bytes from RADIUS server May 19 21:07:35.342964 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:35.342967 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:35.342984 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=113 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:35.342991 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 113) May 19 21:07:35.343104 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=113 len=6) from STA: EAP Response-PEAP (25) May 19 21:07:35.343139 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.343148 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:35.343248 osdx hostapd[122305]: eth1: RADIUS Received 229 bytes from RADIUS server May 19 21:07:35.343252 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:35.343254 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:35.343267 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=114 len=171) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:35.343273 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 114) May 19 21:07:35.344174 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=114 len=103) from STA: EAP Response-PEAP (25) May 19 21:07:35.344204 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.344216 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:35.344475 osdx hostapd[122305]: eth1: RADIUS Received 115 bytes from RADIUS server May 19 21:07:35.344480 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:35.344483 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:35.344496 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=115 len=57) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:35.344501 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 115) May 19 21:07:35.344665 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=115 len=6) from STA: EAP Response-PEAP (25) May 19 21:07:35.344693 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.344701 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:35.344787 osdx hostapd[122305]: eth1: RADIUS Received 98 bytes from RADIUS server May 19 21:07:35.344791 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:35.344793 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:35.344805 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=116 len=40) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:35.344811 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 116) May 19 21:07:35.344919 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=116 len=41) from STA: EAP Response-PEAP (25) May 19 21:07:35.344946 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.344955 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:35.345060 osdx hostapd[122305]: eth1: RADIUS Received 131 bytes from RADIUS server May 19 21:07:35.345065 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:35.345067 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:35.345079 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=117 len=73) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:35.345084 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 117) May 19 21:07:35.345246 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=117 len=95) from STA: EAP Response-PEAP (25) May 19 21:07:35.345274 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.345283 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:35.345437 osdx hostapd[122305]: eth1: RADIUS Received 104 bytes from RADIUS server May 19 21:07:35.345442 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:35.345445 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:35.345460 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=118 len=46) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:35.345466 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 118) May 19 21:07:35.345600 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=118 len=46) from STA: EAP Response-PEAP (25) May 19 21:07:35.345628 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:35.345637 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:36.346505 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) May 19 21:07:36.346541 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds May 19 21:07:36.346557 osdx hostapd[122305]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:07:36.346562 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:36.346568 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:36.346620 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=118 len=4) from RADIUS server: EAP Failure May 19 21:07:36.346654 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 118) May 19 21:07:36.346675 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 19 21:07:36.346680 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 19 21:07:36.346684 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately May 19 21:07:36.346689 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 19 21:07:36.346761 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 19 21:07:36.346771 osdx hostapd[122305]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 19 21:07:36.346789 osdx hostapd[122305]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:36.346803 osdx hostapd[122305]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:36.346818 osdx hostapd[122305]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:07:36.346822 osdx hostapd[122305]: eth1: RADIUS Received RADIUS message May 19 21:07:36.346825 osdx hostapd[122305]: eth1: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Test Quiet Period In MAB-First Mode
Description
This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth1 address 192.168.100.1/24 set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth1 authenticator aaa authentication list1 set interfaces ethernet eth1 authenticator log-level debug set interfaces ethernet eth1 authenticator mode MAB-802.1x set interfaces ethernet eth1 authenticator quiet-period 20 set interfaces ethernet eth1 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/aNxiXPYlUIocyYyjS6cZyM62VTsu7Mrs8s3e70XxuMhvx8zu/z7wOFs/5/kI8nF+5ITLaZoopOg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping the IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.339 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.339/0.339/0.339/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth1 address 192.168.100.2/24 set interfaces ethernet eth1 mac '00:11:22:33:44:55' set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX18CBgu6pUfPwzNdLHrMrXEqJhnozE+3GwY= set interfaces ethernet eth1 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
May 19 21:07:43.064350 osdx hostapd[122907]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported. May 19 21:07:43.064364 osdx hostapd[122907]: eth1: RADIUS Authentication server 10.215.168.1:1812 May 19 21:07:43.064574 osdx hostapd[122907]: connect[radius]: Network is unreachable May 19 21:07:43.064400 osdx hostapd[122907]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 May 19 21:07:43.064403 osdx hostapd[122907]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode May 19 21:07:43.080182 osdx hostapd[122907]: Discovery mode enabled on eth1 May 19 21:07:43.080269 osdx hostapd[122907]: eth1: interface state UNINITIALIZED->ENABLED May 19 21:07:43.080269 osdx hostapd[122907]: eth1: AP-ENABLED May 19 21:07:46.315879 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added May 19 21:07:46.315907 osdx hostapd[122908]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode May 19 21:07:46.336266 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication May 19 21:07:46.336325 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 19 21:07:46.336381 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 19 21:07:46.340815 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 19 21:07:46.340839 osdx hostapd[122908]: eth1: RADIUS Authentication server 10.215.168.1:1812 May 19 21:07:46.341013 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:46.341069 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:46.341128 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA May 19 21:07:46.746109 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:07:47.341151 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) May 19 21:07:47.341182 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds May 19 21:07:47.341522 osdx hostapd[122908]: eth1: RADIUS Received 20 bytes from RADIUS server May 19 21:07:47.341528 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.341531 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.341535 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response May 19 21:07:47.341579 osdx hostapd[122908]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 19 21:07:47.341581 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X May 19 21:07:47.341584 osdx hostapd[122908]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames May 19 21:07:47.341587 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started May 19 21:07:47.341592 osdx hostapd[122908]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 19 21:07:47.341600 osdx hostapd[122908]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE May 19 21:07:47.341608 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 138) May 19 21:07:47.341966 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=138 len=10) from STA: EAP Response-Identity (1) May 19 21:07:47.341974 osdx hostapd[122908]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH May 19 21:07:47.341978 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' May 19 21:07:47.342026 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.342036 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:47.342219 osdx hostapd[122908]: eth1: RADIUS Received 80 bytes from RADIUS server May 19 21:07:47.342224 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.342227 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.342244 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=139 len=22) from RADIUS server: EAP-Request-MD5 (4) May 19 21:07:47.342249 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 139) May 19 21:07:47.342412 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=139 len=6) from STA: EAP Response-unknown (3) May 19 21:07:47.342453 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.342463 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:47.342672 osdx hostapd[122908]: eth1: RADIUS Received 64 bytes from RADIUS server May 19 21:07:47.342677 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.342679 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.342690 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=140 len=6) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:47.342695 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 140) May 19 21:07:47.342949 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=140 len=194) from STA: EAP Response-PEAP (25) May 19 21:07:47.342977 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.342984 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:47.344199 osdx hostapd[122908]: eth1: RADIUS Received 1068 bytes from RADIUS server May 19 21:07:47.344204 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.344207 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.344220 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=141 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:47.344226 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 141) May 19 21:07:47.344350 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=141 len=6) from STA: EAP Response-PEAP (25) May 19 21:07:47.344378 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.344385 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:47.344509 osdx hostapd[122908]: eth1: RADIUS Received 229 bytes from RADIUS server May 19 21:07:47.344515 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.344519 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.344554 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=142 len=171) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:47.344563 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 142) May 19 21:07:47.345900 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=142 len=103) from STA: EAP Response-PEAP (25) May 19 21:07:47.345945 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.345957 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:47.346269 osdx hostapd[122908]: eth1: RADIUS Received 115 bytes from RADIUS server May 19 21:07:47.346274 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.346277 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.346291 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=143 len=57) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:47.346296 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 143) May 19 21:07:47.346484 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=143 len=6) from STA: EAP Response-PEAP (25) May 19 21:07:47.346524 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.346535 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:47.346650 osdx hostapd[122908]: eth1: RADIUS Received 98 bytes from RADIUS server May 19 21:07:47.346655 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.346659 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.346678 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=144 len=40) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:47.346684 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 144) May 19 21:07:47.346803 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=144 len=41) from STA: EAP Response-PEAP (25) May 19 21:07:47.346834 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.346846 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:47.347000 osdx hostapd[122908]: eth1: RADIUS Received 131 bytes from RADIUS server May 19 21:07:47.347005 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.347008 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.347019 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=145 len=73) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:47.347023 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 145) May 19 21:07:47.347194 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=145 len=95) from STA: EAP Response-PEAP (25) May 19 21:07:47.347219 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.347227 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:47.347376 osdx hostapd[122908]: eth1: RADIUS Received 104 bytes from RADIUS server May 19 21:07:47.347381 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:47.347383 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:47.347394 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=146 len=46) from RADIUS server: EAP-Request-PEAP (25) May 19 21:07:47.347398 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 146) May 19 21:07:47.347504 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=146 len=46) from STA: EAP Response-PEAP (25) May 19 21:07:47.347541 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:07:47.347550 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:07:48.347633 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) May 19 21:07:48.347664 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds May 19 21:07:48.347952 osdx hostapd[122908]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:07:48.347957 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:48.347960 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:07:48.348006 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=146 len=4) from RADIUS server: EAP Failure May 19 21:07:48.348033 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 146) May 19 21:07:48.348047 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 19 21:07:48.348058 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 19 21:07:48.348062 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) May 19 21:07:48.348066 osdx hostapd[122908]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:07:48.348069 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:07:48.348072 osdx hostapd[122908]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Quiet period expiredShow output
May 19 21:07:52.962286 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:07:57.131400 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:08:01.302220 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:08:05.452713 osdx OSDxCLI[103550]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 19 21:08:08.355479 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication May 19 21:08:08.355490 osdx hostapd[122908]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 19 21:08:08.355520 osdx hostapd[122908]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE May 19 21:08:08.355539 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 127) May 19 21:08:08.356002 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=127 len=10) from STA: EAP Response-Identity (1) May 19 21:08:08.356013 osdx hostapd[122908]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH May 19 21:08:08.356018 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' May 19 21:08:08.356087 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.356113 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:08.356344 osdx hostapd[122908]: eth1: RADIUS Received 80 bytes from RADIUS server May 19 21:08:08.356349 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:08.356352 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:08.356371 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=128 len=22) from RADIUS server: EAP-Request-MD5 (4) May 19 21:08:08.356378 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 128) May 19 21:08:08.356543 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=128 len=6) from STA: EAP Response-unknown (3) May 19 21:08:08.356578 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.356589 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:08.356769 osdx hostapd[122908]: eth1: RADIUS Received 64 bytes from RADIUS server May 19 21:08:08.356773 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:08.356776 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:08.356787 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=129 len=6) from RADIUS server: EAP-Request-PEAP (25) May 19 21:08:08.356792 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 129) May 19 21:08:08.357003 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=129 len=194) from STA: EAP Response-PEAP (25) May 19 21:08:08.357033 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.357043 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:08.357999 osdx hostapd[122908]: eth1: RADIUS Received 1068 bytes from RADIUS server May 19 21:08:08.358004 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:08.358006 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:08.358020 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=130 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 19 21:08:08.358025 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 130) May 19 21:08:08.358127 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=130 len=6) from STA: EAP Response-PEAP (25) May 19 21:08:08.358162 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.358171 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:08.358257 osdx hostapd[122908]: eth1: RADIUS Received 229 bytes from RADIUS server May 19 21:08:08.358261 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:08.358263 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:08.358273 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=131 len=171) from RADIUS server: EAP-Request-PEAP (25) May 19 21:08:08.358279 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 131) May 19 21:08:08.359183 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=131 len=103) from STA: EAP Response-PEAP (25) May 19 21:08:08.359212 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.359222 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:08.359492 osdx hostapd[122908]: eth1: RADIUS Received 115 bytes from RADIUS server May 19 21:08:08.359500 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:08.359503 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:08.359528 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=132 len=57) from RADIUS server: EAP-Request-PEAP (25) May 19 21:08:08.359536 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 132) May 19 21:08:08.359683 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=132 len=6) from STA: EAP Response-PEAP (25) May 19 21:08:08.359721 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.359734 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:08.359864 osdx hostapd[122908]: eth1: RADIUS Received 98 bytes from RADIUS server May 19 21:08:08.359870 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:08.359873 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:08.359891 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=133 len=40) from RADIUS server: EAP-Request-PEAP (25) May 19 21:08:08.359898 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 133) May 19 21:08:08.360039 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=133 len=41) from STA: EAP Response-PEAP (25) May 19 21:08:08.360074 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.360086 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:08.360218 osdx hostapd[122908]: eth1: RADIUS Received 131 bytes from RADIUS server May 19 21:08:08.360223 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:08.360226 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:08.360238 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=134 len=73) from RADIUS server: EAP-Request-PEAP (25) May 19 21:08:08.360244 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 134) May 19 21:08:08.360434 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=134 len=95) from STA: EAP Response-PEAP (25) May 19 21:08:08.360463 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.360472 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:08.360632 osdx hostapd[122908]: eth1: RADIUS Received 104 bytes from RADIUS server May 19 21:08:08.360637 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:08.360640 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:08.360651 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=135 len=46) from RADIUS server: EAP-Request-PEAP (25) May 19 21:08:08.360656 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 135) May 19 21:08:08.360763 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=135 len=46) from STA: EAP Response-PEAP (25) May 19 21:08:08.360790 osdx hostapd[122908]: eth1: RADIUS Sending RADIUS message to authentication server May 19 21:08:08.360799 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds May 19 21:08:09.360950 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) May 19 21:08:09.361018 osdx hostapd[122908]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds May 19 21:08:09.361382 osdx hostapd[122908]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:08:09.361392 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:09.361402 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 19 21:08:09.361499 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=135 len=4) from RADIUS server: EAP Failure May 19 21:08:09.361560 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 135) May 19 21:08:09.361587 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 19 21:08:09.361596 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 19 21:08:09.361603 osdx hostapd[122908]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) May 19 21:08:09.361614 osdx hostapd[122908]: eth1: RADIUS Received 44 bytes from RADIUS server May 19 21:08:09.361621 osdx hostapd[122908]: eth1: RADIUS Received RADIUS message May 19 21:08:09.361629 osdx hostapd[122908]: eth1: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet