Quiet Period
This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.
Test Quiet Period In 802.1X Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth1 address 192.168.100.1/24 set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth1 authenticator aaa authentication list1 set interfaces ethernet eth1 authenticator log-level debug set interfaces ethernet eth1 authenticator mode only-802.1x set interfaces ethernet eth1 authenticator quiet-period 20 set interfaces ethernet eth1 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+JFrKSL1sl0iR+zJxswLwGLRWeonLhrTodLfqlq6Gb0rBBOQbB0UgsXdYNW27waeFHQGDBo1oLGA== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping the IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.498 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.498/0.498/0.498/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth1 address 192.168.100.2/24 set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX1+kn6E+MUjraNLBpSuz/OpFSRSsvm5p8Ic= set interfaces ethernet eth1 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Jun 03 09:13:31.614059 osdx hostapd[79748]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 03 09:13:31.614396 osdx hostapd[79748]: connect[radius]: Network is unreachable Jun 03 09:13:31.614078 osdx hostapd[79748]: eth1: RADIUS Authentication server 10.215.168.1:1812 Jun 03 09:13:31.614120 osdx hostapd[79748]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2 Jun 03 09:13:31.614125 osdx hostapd[79748]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 03 09:13:31.629864 osdx hostapd[79748]: Discovery mode enabled on eth1 Jun 03 09:13:31.629960 osdx hostapd[79748]: eth1: interface state UNINITIALIZED->ENABLED Jun 03 09:13:31.629960 osdx hostapd[79748]: eth1: AP-ENABLED Jun 03 09:13:33.643154 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:35.250550 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: New STA de:ad:be:ef:6c:11 added Jun 03 09:13:35.250564 osdx hostapd[79749]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 03 09:13:35.269899 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: start authentication Jun 03 09:13:35.269929 osdx hostapd[79749]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 03 09:13:35.269950 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAPOL-Start from STA Jun 03 09:13:35.269961 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: unauthorizing port Jun 03 09:13:35.269970 osdx hostapd[79749]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 03 09:13:35.269988 osdx hostapd[79749]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE Jun 03 09:13:35.270003 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 53) Jun 03 09:13:35.270436 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=53 len=10) from STA: EAP Response-Identity (1) Jun 03 09:13:35.270451 osdx hostapd[79749]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH Jun 03 09:13:35.270456 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: STA identity 'wrong' Jun 03 09:13:35.270497 osdx hostapd[79749]: eth1: RADIUS Authentication server 10.215.168.1:1812 Jun 03 09:13:35.272944 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.272999 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.273309 osdx hostapd[79749]: eth1: RADIUS Received 80 bytes from RADIUS server Jun 03 09:13:35.273318 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:35.273323 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:35.273350 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=54 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 03 09:13:35.273358 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 54) Jun 03 09:13:35.273601 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=54 len=6) from STA: EAP Response-unknown (3) Jun 03 09:13:35.273663 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.273729 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.273906 osdx hostapd[79749]: eth1: RADIUS Received 64 bytes from RADIUS server Jun 03 09:13:35.273913 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:35.273917 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:35.273935 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=55 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:35.273942 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 55) Jun 03 09:13:35.274371 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=55 len=194) from STA: EAP Response-PEAP (25) Jun 03 09:13:35.274418 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.274434 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.275533 osdx hostapd[79749]: eth1: RADIUS Received 1068 bytes from RADIUS server Jun 03 09:13:35.275544 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:35.275548 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:35.275577 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=56 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:35.275585 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 56) Jun 03 09:13:35.275808 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=56 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:13:35.275863 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.275878 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.276036 osdx hostapd[79749]: eth1: RADIUS Received 229 bytes from RADIUS server Jun 03 09:13:35.276041 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:35.276048 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:35.276067 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=57 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:35.276074 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 57) Jun 03 09:13:35.277712 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=57 len=103) from STA: EAP Response-PEAP (25) Jun 03 09:13:35.277771 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.277832 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.278198 osdx hostapd[79749]: eth1: RADIUS Received 115 bytes from RADIUS server Jun 03 09:13:35.278205 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:35.278209 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:35.278232 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=58 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:35.278239 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 58) Jun 03 09:13:35.278515 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=58 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:13:35.278558 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.278570 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.278729 osdx hostapd[79749]: eth1: RADIUS Received 98 bytes from RADIUS server Jun 03 09:13:35.278735 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:35.278739 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:35.278753 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=59 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:35.278759 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 59) Jun 03 09:13:35.278943 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=59 len=41) from STA: EAP Response-PEAP (25) Jun 03 09:13:35.278977 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.278985 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.279178 osdx hostapd[79749]: eth1: RADIUS Received 131 bytes from RADIUS server Jun 03 09:13:35.279184 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:35.279187 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:35.279200 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=60 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:35.279206 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 60) Jun 03 09:13:35.279494 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=60 len=95) from STA: EAP Response-PEAP (25) Jun 03 09:13:35.279527 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.279535 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.279774 osdx hostapd[79749]: eth1: RADIUS Received 104 bytes from RADIUS server Jun 03 09:13:35.279779 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:35.279782 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:35.279796 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=61 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:35.279802 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 61) Jun 03 09:13:35.279992 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=61 len=46) from STA: EAP Response-PEAP (25) Jun 03 09:13:35.280031 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:35.280040 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:35.794634 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:36.280151 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Resending RADIUS message (id=8) Jun 03 09:13:36.280192 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds Jun 03 09:13:36.280350 osdx hostapd[79749]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:13:36.280354 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:36.280358 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:36.280408 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=4 id=61 len=4) from RADIUS server: EAP Failure Jun 03 09:13:36.280439 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 61) Jun 03 09:13:36.280453 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: unauthorizing port Jun 03 09:13:36.280458 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 03 09:13:36.280461 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jun 03 09:13:36.280467 osdx hostapd[79749]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:13:36.280470 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:36.280472 osdx hostapd[79749]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Quiet period expiredShow output
Jun 03 09:13:38.219545 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:40.299324 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:42.403325 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:44.489819 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:46.556266 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:48.639569 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:50.729148 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:52.814811 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:54.895904 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:13:56.288078 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Jun 03 09:13:56.288092 osdx hostapd[79749]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 03 09:13:56.288126 osdx hostapd[79749]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE Jun 03 09:13:56.288139 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 230) Jun 03 09:13:56.288635 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=230 len=10) from STA: EAP Response-Identity (1) Jun 03 09:13:56.288649 osdx hostapd[79749]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH Jun 03 09:13:56.288654 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: STA identity 'wrong' Jun 03 09:13:56.288728 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.288754 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:56.289073 osdx hostapd[79749]: eth1: RADIUS Received 80 bytes from RADIUS server Jun 03 09:13:56.289081 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:56.289086 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:56.289118 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=231 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 03 09:13:56.289126 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 231) Jun 03 09:13:56.289457 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=231 len=6) from STA: EAP Response-unknown (3) Jun 03 09:13:56.289516 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.289536 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:56.289752 osdx hostapd[79749]: eth1: RADIUS Received 64 bytes from RADIUS server Jun 03 09:13:56.289759 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:56.289763 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:56.289798 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=232 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:56.289805 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 232) Jun 03 09:13:56.290614 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=232 len=194) from STA: EAP Response-PEAP (25) Jun 03 09:13:56.290666 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.290682 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:56.292053 osdx hostapd[79749]: eth1: RADIUS Received 1068 bytes from RADIUS server Jun 03 09:13:56.292059 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:56.292063 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:56.292090 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=233 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:56.292098 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 233) Jun 03 09:13:56.292389 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=233 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:13:56.292443 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.292460 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:56.292653 osdx hostapd[79749]: eth1: RADIUS Received 229 bytes from RADIUS server Jun 03 09:13:56.292662 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:56.292667 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:56.292693 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=234 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:56.292702 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 234) Jun 03 09:13:56.294251 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=234 len=103) from STA: EAP Response-PEAP (25) Jun 03 09:13:56.294299 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.294314 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:56.294688 osdx hostapd[79749]: eth1: RADIUS Received 115 bytes from RADIUS server Jun 03 09:13:56.294695 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:56.294698 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:56.294722 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=235 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:56.294729 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 235) Jun 03 09:13:56.295030 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=235 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:13:56.295077 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.295090 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:56.295255 osdx hostapd[79749]: eth1: RADIUS Received 98 bytes from RADIUS server Jun 03 09:13:56.295261 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:56.295264 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:56.295284 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=236 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:56.295291 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 236) Jun 03 09:13:56.295498 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=236 len=41) from STA: EAP Response-PEAP (25) Jun 03 09:13:56.295547 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.295561 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:56.295785 osdx hostapd[79749]: eth1: RADIUS Received 131 bytes from RADIUS server Jun 03 09:13:56.295790 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:56.295793 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:56.295807 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=237 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:56.295813 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 237) Jun 03 09:13:56.296081 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=237 len=95) from STA: EAP Response-PEAP (25) Jun 03 09:13:56.296123 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.296139 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:13:56.296341 osdx hostapd[79749]: eth1: RADIUS Received 104 bytes from RADIUS server Jun 03 09:13:56.296347 osdx hostapd[79749]: eth1: RADIUS Received RADIUS message Jun 03 09:13:56.296351 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:13:56.296367 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=238 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:13:56.296373 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 238) Jun 03 09:13:56.296588 osdx hostapd[79749]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=238 len=46) from STA: EAP Response-PEAP (25) Jun 03 09:13:56.296627 osdx hostapd[79749]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:13:56.296641 osdx hostapd[79749]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB Mode
Description
This scenario shows how to configure the quiet period in a device with MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth1 address 192.168.100.1/24 set interfaces ethernet eth1 authenticator aaa authentication list1 set interfaces ethernet eth1 authenticator log-level debug set interfaces ethernet eth1 authenticator mode only-MAB set interfaces ethernet eth1 authenticator quiet-period 20 set interfaces ethernet eth1 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+vU64Tdl0TvZdtdiWpi8ytZc+cnOWecwcRLnCEldz9snYOt1THQUeJSmoVgW15RrAoQcb+8qox5A== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping the IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.271 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.271/0.271/0.271/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth1 address 192.168.100.2/24 set interfaces ethernet eth1 mac '00:11:22:33:44:55' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Jun 03 09:14:04.558059 osdx hostapd[80369]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 03 09:14:04.558075 osdx hostapd[80369]: eth1: RADIUS Authentication server 10.215.168.1:1812 Jun 03 09:14:04.558345 osdx hostapd[80369]: connect[radius]: Network is unreachable Jun 03 09:14:04.558111 osdx hostapd[80369]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5 Jun 03 09:14:04.558115 osdx hostapd[80369]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 03 09:14:04.581872 osdx hostapd[80369]: Discovery mode enabled on eth1 Jun 03 09:14:04.581954 osdx hostapd[80369]: eth1: interface state UNINITIALIZED->ENABLED Jun 03 09:14:04.581954 osdx hostapd[80369]: eth1: AP-ENABLED Jun 03 09:14:08.182153 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:14:09.584147 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication Jun 03 09:14:09.584191 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jun 03 09:14:09.584199 osdx hostapd[80370]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 03 09:14:09.597906 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication Jun 03 09:14:09.597931 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 03 09:14:09.597946 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 03 09:14:09.599671 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 03 09:14:09.599685 osdx hostapd[80370]: eth1: RADIUS Authentication server 10.215.168.1:1812 Jun 03 09:14:09.599752 osdx hostapd[80370]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:09.599779 osdx hostapd[80370]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:10.599869 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jun 03 09:14:10.599909 osdx hostapd[80370]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds Jun 03 09:14:10.600195 osdx hostapd[80370]: eth1: RADIUS Received 20 bytes from RADIUS server Jun 03 09:14:10.600200 osdx hostapd[80370]: eth1: RADIUS Received RADIUS message Jun 03 09:14:10.600205 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:10.600210 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jun 03 09:14:10.600266 osdx hostapd[80370]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 03 09:14:10.600269 osdx hostapd[80370]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 03 09:14:10.600272 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Jun 03 09:14:10.600275 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Jun 03 09:14:10.600284 osdx hostapd[80370]: eth1: RADIUS Received 20 bytes from RADIUS server Jun 03 09:14:10.600287 osdx hostapd[80370]: eth1: RADIUS Received RADIUS message Jun 03 09:14:10.600291 osdx hostapd[80370]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Quiet period expiredShow output
Jun 03 09:14:14.436655 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:14:18.667330 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:14:22.832186 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:14:27.043626 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:14:30.601117 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Jun 03 09:14:30.601128 osdx hostapd[80370]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 03 09:14:30.601132 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB Jun 03 09:14:30.601135 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 03 09:14:30.601194 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 03 09:14:30.601228 osdx hostapd[80370]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 03 09:14:30.601254 osdx hostapd[80370]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:30.601289 osdx hostapd[80370]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB-Fallback Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth1 address 192.168.100.1/24 set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth1 authenticator aaa authentication list1 set interfaces ethernet eth1 authenticator log-level debug set interfaces ethernet eth1 authenticator mode 802.1x-MAB set interfaces ethernet eth1 authenticator quiet-period 20 set interfaces ethernet eth1 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/aZwfmPpQP5Xe8FjDCOD/HRsucmVbUxh3mamhgNWwEtdV7yCLm+hVTs9Q64rG2sFNDTI2Wdvu/gQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping the IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.392 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.392/0.392/0.392/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth1 address 192.168.100.2/24 set interfaces ethernet eth1 mac '00:11:22:33:44:55' set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX18bJIYstPvRZ3ONl9JetjuC788WmQXVTnA= set interfaces ethernet eth1 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Jun 03 09:14:39.402154 osdx hostapd[80961]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 03 09:14:39.402176 osdx hostapd[80961]: eth1: RADIUS Authentication server 10.215.168.1:1812 Jun 03 09:14:39.402426 osdx hostapd[80961]: connect[radius]: Network is unreachable Jun 03 09:14:39.402217 osdx hostapd[80961]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Jun 03 09:14:39.402221 osdx hostapd[80961]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 03 09:14:39.418467 osdx hostapd[80961]: Discovery mode enabled on eth1 Jun 03 09:14:39.418467 osdx hostapd[80961]: eth1: interface state UNINITIALIZED->ENABLED Jun 03 09:14:39.418467 osdx hostapd[80961]: eth1: AP-ENABLED Jun 03 09:14:42.828759 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jun 03 09:14:42.828777 osdx hostapd[80962]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 03 09:14:42.846038 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication Jun 03 09:14:42.846065 osdx hostapd[80962]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 03 09:14:42.846068 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response Jun 03 09:14:42.846071 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response Jun 03 09:14:42.846088 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response Jun 03 09:14:42.846091 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Jun 03 09:14:42.846106 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 03 09:14:42.846115 osdx hostapd[80962]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 03 09:14:42.846130 osdx hostapd[80962]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE Jun 03 09:14:42.846154 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 55) Jun 03 09:14:42.846603 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=55 len=10) from STA: EAP Response-Identity (1) Jun 03 09:14:42.846616 osdx hostapd[80962]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH Jun 03 09:14:42.846622 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jun 03 09:14:42.846653 osdx hostapd[80962]: eth1: RADIUS Authentication server 10.215.168.1:1812 Jun 03 09:14:42.848911 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.848949 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:42.849255 osdx hostapd[80962]: eth1: RADIUS Received 80 bytes from RADIUS server Jun 03 09:14:42.849262 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:42.849267 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:42.849290 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=56 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 03 09:14:42.849299 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 56) Jun 03 09:14:42.849649 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=56 len=6) from STA: EAP Response-unknown (3) Jun 03 09:14:42.849709 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.849724 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:42.849944 osdx hostapd[80962]: eth1: RADIUS Received 64 bytes from RADIUS server Jun 03 09:14:42.849950 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:42.849954 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:42.849975 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=57 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:14:42.849983 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 57) Jun 03 09:14:42.850360 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=57 len=194) from STA: EAP Response-PEAP (25) Jun 03 09:14:42.850399 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.850412 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:42.851459 osdx hostapd[80962]: eth1: RADIUS Received 1068 bytes from RADIUS server Jun 03 09:14:42.851466 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:42.851470 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:42.851502 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=58 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:14:42.851509 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 58) Jun 03 09:14:42.851749 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=58 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:14:42.851797 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.851813 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:42.851957 osdx hostapd[80962]: eth1: RADIUS Received 229 bytes from RADIUS server Jun 03 09:14:42.851966 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:42.851970 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:42.851989 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=59 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:14:42.851995 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 59) Jun 03 09:14:42.853408 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=59 len=103) from STA: EAP Response-PEAP (25) Jun 03 09:14:42.853467 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.853485 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:42.853835 osdx hostapd[80962]: eth1: RADIUS Received 115 bytes from RADIUS server Jun 03 09:14:42.853840 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:42.853843 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:42.853858 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=60 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:14:42.853863 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 60) Jun 03 09:14:42.854139 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=60 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:14:42.854195 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.854211 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:42.854343 osdx hostapd[80962]: eth1: RADIUS Received 98 bytes from RADIUS server Jun 03 09:14:42.854349 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:42.854353 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:42.854373 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=61 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:14:42.854380 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 61) Jun 03 09:14:42.854583 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=61 len=41) from STA: EAP Response-PEAP (25) Jun 03 09:14:42.854618 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.854629 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:42.854768 osdx hostapd[80962]: eth1: RADIUS Received 131 bytes from RADIUS server Jun 03 09:14:42.854773 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:42.854777 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:42.854791 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=62 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:14:42.854797 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 62) Jun 03 09:14:42.855047 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=62 len=95) from STA: EAP Response-PEAP (25) Jun 03 09:14:42.855082 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.855092 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:42.855255 osdx hostapd[80962]: eth1: RADIUS Received 104 bytes from RADIUS server Jun 03 09:14:42.855261 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:42.855264 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:42.855279 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=63 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:14:42.855285 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 63) Jun 03 09:14:42.855452 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=63 len=46) from STA: EAP Response-PEAP (25) Jun 03 09:14:42.855490 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:42.855500 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:43.315058 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:14:43.855603 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Jun 03 09:14:43.855653 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds Jun 03 09:14:43.855828 osdx hostapd[80962]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:14:43.855832 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:43.855836 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:43.855887 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=63 len=4) from RADIUS server: EAP Failure Jun 03 09:14:43.855917 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 63) Jun 03 09:14:43.855931 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 03 09:14:43.855935 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 03 09:14:43.855937 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Jun 03 09:14:43.855941 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 03 09:14:43.855973 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 03 09:14:43.855983 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 03 09:14:43.856000 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:14:43.856011 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:14:43.856032 osdx hostapd[80962]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:14:43.856036 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:43.856039 osdx hostapd[80962]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet Jun 03 09:14:44.856118 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jun 03 09:14:44.856161 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds Jun 03 09:14:44.856316 osdx hostapd[80962]: eth1: RADIUS Received 20 bytes from RADIUS server Jun 03 09:14:44.856320 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:44.856325 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:14:44.856330 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jun 03 09:14:44.856386 osdx hostapd[80962]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 03 09:14:44.856389 osdx hostapd[80962]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 03 09:14:44.856392 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Jun 03 09:14:44.856396 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Jun 03 09:14:44.856404 osdx hostapd[80962]: eth1: RADIUS Received 20 bytes from RADIUS server Jun 03 09:14:44.856407 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:14:44.856410 osdx hostapd[80962]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Quiet period expiredShow output
Jun 03 09:14:49.578375 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:14:53.745927 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:14:57.923749 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:15:02.154873 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:15:04.857200 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Jun 03 09:15:04.857211 osdx hostapd[80962]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 03 09:15:04.857214 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X Jun 03 09:15:04.857217 osdx hostapd[80962]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 03 09:15:04.857226 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 03 09:15:04.857230 osdx hostapd[80962]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 03 09:15:04.857251 osdx hostapd[80962]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE Jun 03 09:15:04.857260 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 217) Jun 03 09:15:04.857718 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=217 len=10) from STA: EAP Response-Identity (1) Jun 03 09:15:04.857729 osdx hostapd[80962]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH Jun 03 09:15:04.857733 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jun 03 09:15:04.857805 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.857828 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:04.858091 osdx hostapd[80962]: eth1: RADIUS Received 80 bytes from RADIUS server Jun 03 09:15:04.858096 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:04.858099 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:04.858119 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=218 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 03 09:15:04.858125 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 218) Jun 03 09:15:04.858332 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=218 len=6) from STA: EAP Response-unknown (3) Jun 03 09:15:04.858368 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.858383 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:04.858588 osdx hostapd[80962]: eth1: RADIUS Received 64 bytes from RADIUS server Jun 03 09:15:04.858593 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:04.858596 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:04.858611 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=219 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:04.858616 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 219) Jun 03 09:15:04.858972 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=219 len=194) from STA: EAP Response-PEAP (25) Jun 03 09:15:04.859028 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.859042 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:04.860351 osdx hostapd[80962]: eth1: RADIUS Received 1068 bytes from RADIUS server Jun 03 09:15:04.860359 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:04.860363 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:04.860386 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=220 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:04.860391 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 220) Jun 03 09:15:04.860605 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=220 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:15:04.860655 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.860668 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:04.860803 osdx hostapd[80962]: eth1: RADIUS Received 229 bytes from RADIUS server Jun 03 09:15:04.860808 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:04.860811 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:04.860826 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=221 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:04.860832 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 221) Jun 03 09:15:04.862288 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=221 len=103) from STA: EAP Response-PEAP (25) Jun 03 09:15:04.862341 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.862357 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:04.862703 osdx hostapd[80962]: eth1: RADIUS Received 115 bytes from RADIUS server Jun 03 09:15:04.862709 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:04.862712 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:04.862733 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=222 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:04.862738 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 222) Jun 03 09:15:04.863060 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=222 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:15:04.863111 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.863128 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:04.863302 osdx hostapd[80962]: eth1: RADIUS Received 98 bytes from RADIUS server Jun 03 09:15:04.863309 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:04.863314 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:04.863340 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=223 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:04.863348 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 223) Jun 03 09:15:04.863574 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=223 len=41) from STA: EAP Response-PEAP (25) Jun 03 09:15:04.863618 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.863633 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:04.863833 osdx hostapd[80962]: eth1: RADIUS Received 131 bytes from RADIUS server Jun 03 09:15:04.863839 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:04.863843 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:04.863860 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=224 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:04.863867 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 224) Jun 03 09:15:04.864129 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=224 len=95) from STA: EAP Response-PEAP (25) Jun 03 09:15:04.864180 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.864195 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:04.864377 osdx hostapd[80962]: eth1: RADIUS Received 104 bytes from RADIUS server Jun 03 09:15:04.864383 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:04.864388 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:04.864405 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=225 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:04.864415 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 225) Jun 03 09:15:04.864657 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=225 len=46) from STA: EAP Response-PEAP (25) Jun 03 09:15:04.864717 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:04.864729 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:05.865220 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Jun 03 09:15:05.865258 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds Jun 03 09:15:05.865455 osdx hostapd[80962]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:15:05.865459 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:05.865464 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:05.865515 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=225 len=4) from RADIUS server: EAP Failure Jun 03 09:15:05.865548 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 225) Jun 03 09:15:05.865563 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 03 09:15:05.865567 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 03 09:15:05.865571 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Jun 03 09:15:05.865577 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 03 09:15:05.865608 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 03 09:15:05.865617 osdx hostapd[80962]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 03 09:15:05.865637 osdx hostapd[80962]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:05.865653 osdx hostapd[80962]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:05.865671 osdx hostapd[80962]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:15:05.865678 osdx hostapd[80962]: eth1: RADIUS Received RADIUS message Jun 03 09:15:05.865681 osdx hostapd[80962]: eth1: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Test Quiet Period In MAB-First Mode
Description
This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth1 address 192.168.100.1/24 set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth1 authenticator aaa authentication list1 set interfaces ethernet eth1 authenticator log-level debug set interfaces ethernet eth1 authenticator mode MAB-802.1x set interfaces ethernet eth1 authenticator quiet-period 20 set interfaces ethernet eth1 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19r9oWTbLQGJXhaVk69eWeCEzgS4SREAT1IIIcSwAJG0gFJqauLEyp+9uRyq8kQlRuDy0w3TKkIZg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping the IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.590 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.590/0.590/0.590/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth1 address 192.168.100.2/24 set interfaces ethernet eth1 mac '00:11:22:33:44:55' set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX19pQ26J+h5hD2ohJB8JD0gqmnqaVcN43sY= set interfaces ethernet eth1 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Jun 03 09:15:14.627291 osdx hostapd[81565]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 03 09:15:14.627309 osdx hostapd[81565]: eth1: RADIUS Authentication server 10.215.168.1:1812 Jun 03 09:15:14.627771 osdx hostapd[81565]: connect[radius]: Network is unreachable Jun 03 09:15:14.627371 osdx hostapd[81565]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Jun 03 09:15:14.627375 osdx hostapd[81565]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 03 09:15:14.655049 osdx hostapd[81565]: Discovery mode enabled on eth1 Jun 03 09:15:14.655135 osdx hostapd[81565]: eth1: interface state UNINITIALIZED->ENABLED Jun 03 09:15:14.655135 osdx hostapd[81565]: eth1: AP-ENABLED Jun 03 09:15:18.176716 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jun 03 09:15:18.176733 osdx hostapd[81566]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 03 09:15:18.191104 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication Jun 03 09:15:18.191144 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 03 09:15:18.191164 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 03 09:15:18.193574 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 03 09:15:18.193589 osdx hostapd[81566]: eth1: RADIUS Authentication server 10.215.168.1:1812 Jun 03 09:15:18.193682 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:18.193717 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:18.193749 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Jun 03 09:15:18.663453 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:15:19.193814 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jun 03 09:15:19.193929 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds Jun 03 09:15:19.194083 osdx hostapd[81566]: eth1: RADIUS Received 20 bytes from RADIUS server Jun 03 09:15:19.194088 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.194093 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.194098 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jun 03 09:15:19.194160 osdx hostapd[81566]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 03 09:15:19.194163 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X Jun 03 09:15:19.194167 osdx hostapd[81566]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 03 09:15:19.194170 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started Jun 03 09:15:19.194186 osdx hostapd[81566]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 03 09:15:19.194196 osdx hostapd[81566]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE Jun 03 09:15:19.194208 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 247) Jun 03 09:15:19.194226 osdx hostapd[81566]: eth1: RADIUS Received 20 bytes from RADIUS server Jun 03 09:15:19.194229 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.194232 osdx hostapd[81566]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet Jun 03 09:15:19.195116 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=247 len=10) from STA: EAP Response-Identity (1) Jun 03 09:15:19.195129 osdx hostapd[81566]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH Jun 03 09:15:19.195134 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jun 03 09:15:19.195210 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.195513 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:19.195813 osdx hostapd[81566]: eth1: RADIUS Received 80 bytes from RADIUS server Jun 03 09:15:19.195820 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.195824 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.195853 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=248 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 03 09:15:19.195861 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 248) Jun 03 09:15:19.196605 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=248 len=6) from STA: EAP Response-unknown (3) Jun 03 09:15:19.196669 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.196800 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:19.196962 osdx hostapd[81566]: eth1: RADIUS Received 64 bytes from RADIUS server Jun 03 09:15:19.196968 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.196973 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.196993 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=249 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:19.197000 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 249) Jun 03 09:15:19.197424 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=249 len=194) from STA: EAP Response-PEAP (25) Jun 03 09:15:19.197472 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.197595 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:19.198850 osdx hostapd[81566]: eth1: RADIUS Received 1068 bytes from RADIUS server Jun 03 09:15:19.198859 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.198863 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.198892 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=250 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:19.198901 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 250) Jun 03 09:15:19.199679 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=250 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:15:19.199737 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.199753 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:19.200023 osdx hostapd[81566]: eth1: RADIUS Received 229 bytes from RADIUS server Jun 03 09:15:19.200031 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.200036 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.200062 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=251 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:19.200070 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 251) Jun 03 09:15:19.202230 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=251 len=103) from STA: EAP Response-PEAP (25) Jun 03 09:15:19.202298 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.202318 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:19.202859 osdx hostapd[81566]: eth1: RADIUS Received 115 bytes from RADIUS server Jun 03 09:15:19.202866 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.202871 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.202896 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=252 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:19.202903 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 252) Jun 03 09:15:19.203317 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=252 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:15:19.203368 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.203471 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:19.203671 osdx hostapd[81566]: eth1: RADIUS Received 98 bytes from RADIUS server Jun 03 09:15:19.203678 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.203683 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.203722 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=253 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:19.203730 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 253) Jun 03 09:15:19.204021 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=253 len=41) from STA: EAP Response-PEAP (25) Jun 03 09:15:19.204069 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.204083 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:19.204288 osdx hostapd[81566]: eth1: RADIUS Received 131 bytes from RADIUS server Jun 03 09:15:19.204294 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.204297 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.204316 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=254 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:19.204323 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 254) Jun 03 09:15:19.204761 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=254 len=95) from STA: EAP Response-PEAP (25) Jun 03 09:15:19.204812 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.204828 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:19.205066 osdx hostapd[81566]: eth1: RADIUS Received 104 bytes from RADIUS server Jun 03 09:15:19.205074 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:19.205078 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:19.205102 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=255 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:19.205111 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 255) Jun 03 09:15:19.205410 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=255 len=46) from STA: EAP Response-PEAP (25) Jun 03 09:15:19.205460 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:19.205473 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:20.205576 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Jun 03 09:15:20.205614 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds Jun 03 09:15:20.205795 osdx hostapd[81566]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:15:20.205799 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:20.205803 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:20.205850 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=255 len=4) from RADIUS server: EAP Failure Jun 03 09:15:20.205884 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 255) Jun 03 09:15:20.205916 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 03 09:15:20.205957 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 03 09:15:20.205960 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jun 03 09:15:20.205967 osdx hostapd[81566]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:15:20.205970 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:20.205973 osdx hostapd[81566]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:
Quiet period expiredShow output
Jun 03 09:15:24.929056 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:15:29.136168 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:15:33.346016 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:15:37.519083 osdx OSDxCLI[5794]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 03 09:15:40.210248 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Jun 03 09:15:40.210260 osdx hostapd[81566]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 03 09:15:40.210290 osdx hostapd[81566]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE Jun 03 09:15:40.210299 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 75) Jun 03 09:15:40.210798 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=75 len=10) from STA: EAP Response-Identity (1) Jun 03 09:15:40.210811 osdx hostapd[81566]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH Jun 03 09:15:40.210815 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jun 03 09:15:40.210894 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.210917 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:40.211195 osdx hostapd[81566]: eth1: RADIUS Received 80 bytes from RADIUS server Jun 03 09:15:40.211201 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:40.211204 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:40.211228 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=76 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 03 09:15:40.211234 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 76) Jun 03 09:15:40.211454 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=76 len=6) from STA: EAP Response-unknown (3) Jun 03 09:15:40.211516 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.211536 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:40.211766 osdx hostapd[81566]: eth1: RADIUS Received 64 bytes from RADIUS server Jun 03 09:15:40.211772 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:40.211776 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:40.211794 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=77 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:40.211801 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 77) Jun 03 09:15:40.212152 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=77 len=194) from STA: EAP Response-PEAP (25) Jun 03 09:15:40.212213 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.212227 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:40.213527 osdx hostapd[81566]: eth1: RADIUS Received 1068 bytes from RADIUS server Jun 03 09:15:40.213534 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:40.213539 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:40.213564 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=78 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:40.213572 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 78) Jun 03 09:15:40.213764 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=78 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:15:40.213810 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.213823 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:40.213962 osdx hostapd[81566]: eth1: RADIUS Received 229 bytes from RADIUS server Jun 03 09:15:40.213967 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:40.213971 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:40.213995 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=79 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:40.214003 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 79) Jun 03 09:15:40.215316 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=79 len=103) from STA: EAP Response-PEAP (25) Jun 03 09:15:40.215366 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.215378 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:40.215723 osdx hostapd[81566]: eth1: RADIUS Received 115 bytes from RADIUS server Jun 03 09:15:40.215729 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:40.215732 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:40.215752 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=80 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:40.215759 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 80) Jun 03 09:15:40.216014 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=80 len=6) from STA: EAP Response-PEAP (25) Jun 03 09:15:40.216057 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.216071 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:40.216225 osdx hostapd[81566]: eth1: RADIUS Received 98 bytes from RADIUS server Jun 03 09:15:40.216230 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:40.216233 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:40.216248 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=81 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:40.216254 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 81) Jun 03 09:15:40.216458 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=81 len=41) from STA: EAP Response-PEAP (25) Jun 03 09:15:40.216498 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.216536 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:40.216684 osdx hostapd[81566]: eth1: RADIUS Received 131 bytes from RADIUS server Jun 03 09:15:40.216692 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:40.216695 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:40.216730 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=82 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:40.216736 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 82) Jun 03 09:15:40.216989 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=82 len=95) from STA: EAP Response-PEAP (25) Jun 03 09:15:40.217029 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.217039 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:40.217263 osdx hostapd[81566]: eth1: RADIUS Received 104 bytes from RADIUS server Jun 03 09:15:40.217268 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:40.217271 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:40.217287 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=83 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 03 09:15:40.217294 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 83) Jun 03 09:15:40.217534 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=83 len=46) from STA: EAP Response-PEAP (25) Jun 03 09:15:40.217581 osdx hostapd[81566]: eth1: RADIUS Sending RADIUS message to authentication server Jun 03 09:15:40.217594 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds Jun 03 09:15:41.217718 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Jun 03 09:15:41.217863 osdx hostapd[81566]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds Jun 03 09:15:41.217988 osdx hostapd[81566]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:15:41.217994 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:41.217999 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 03 09:15:41.218059 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=83 len=4) from RADIUS server: EAP Failure Jun 03 09:15:41.218094 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 83) Jun 03 09:15:41.218109 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 03 09:15:41.218114 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 03 09:15:41.218117 osdx hostapd[81566]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jun 03 09:15:41.218128 osdx hostapd[81566]: eth1: RADIUS Received 44 bytes from RADIUS server Jun 03 09:15:41.218131 osdx hostapd[81566]: eth1: RADIUS Received RADIUS message Jun 03 09:15:41.218166 osdx hostapd[81566]: eth1: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet