Quiet Period

This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.

../../../../../_images/topologydut0dut1.svg

Test Quiet Period In 802.1X Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1x authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth1 address 192.168.100.1/24
set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth1 authenticator aaa authentication list1
set interfaces ethernet eth1 authenticator log-level debug
set interfaces ethernet eth1 authenticator mode only-802.1x
set interfaces ethernet eth1 authenticator quiet-period 20
set interfaces ethernet eth1 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1+2BTHhobaDnMbrg8Te+V1iNWpJWv6loP01GIboO6gCSmRU1jjwh81MaZrqeXQQo3zhMke6EY6JMg==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping the IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.344 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.344/0.344/0.344/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth1 address 192.168.100.2/24
set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX19o4VTRNuJwLIH6Bt01+KKcNIWhJnUVtSk=
set interfaces ethernet eth1 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Authentication failed, enforcing quiet period
Show output
Sep 16 14:21:54.566442 osdx hostapd[69761]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported.
Sep 16 14:21:54.566457 osdx hostapd[69761]: eth1: RADIUS Authentication server 10.215.168.1:1812
Sep 16 14:21:54.566851 osdx hostapd[69761]: connect[radius]: Network is unreachable
Sep 16 14:21:54.566511 osdx hostapd[69761]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2
Sep 16 14:21:54.566514 osdx hostapd[69761]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Sep 16 14:21:54.586240 osdx hostapd[69761]: Discovery mode enabled on eth1
Sep 16 14:21:54.586384 osdx hostapd[69761]: eth1: interface state UNINITIALIZED->ENABLED
Sep 16 14:21:54.586384 osdx hostapd[69761]: eth1: AP-ENABLED
Sep 16 14:21:56.373682 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:21:58.060576 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: New STA de:ad:be:ef:6c:11 added
Sep 16 14:21:58.060592 osdx hostapd[69762]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Sep 16 14:21:58.082277 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: start authentication
Sep 16 14:21:58.082308 osdx hostapd[69762]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Sep 16 14:21:58.082325 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAPOL-Start from STA
Sep 16 14:21:58.082338 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: unauthorizing port
Sep 16 14:21:58.082345 osdx hostapd[69762]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Sep 16 14:21:58.082358 osdx hostapd[69762]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Sep 16 14:21:58.082371 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 48)
Sep 16 14:21:58.082671 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=48 len=10) from STA: EAP Response-Identity (1)
Sep 16 14:21:58.082680 osdx hostapd[69762]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Sep 16 14:21:58.082683 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: STA identity 'wrong'
Sep 16 14:21:58.082704 osdx hostapd[69762]: eth1: RADIUS Authentication server 10.215.168.1:1812
Sep 16 14:21:58.084631 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.084657 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.084875 osdx hostapd[69762]: eth1: RADIUS Received 80 bytes from RADIUS server
Sep 16 14:21:58.084880 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:58.084883 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:58.084899 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=49 len=22) from RADIUS server: EAP-Request-MD5 (4)
Sep 16 14:21:58.084905 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 49)
Sep 16 14:21:58.085110 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=49 len=6) from STA: EAP Response-unknown (3)
Sep 16 14:21:58.085151 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.085160 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.085360 osdx hostapd[69762]: eth1: RADIUS Received 64 bytes from RADIUS server
Sep 16 14:21:58.085365 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:58.085368 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:58.085383 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=6) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:21:58.085388 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 50)
Sep 16 14:21:58.085749 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=50 len=194) from STA: EAP Response-PEAP (25)
Sep 16 14:21:58.085783 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.085792 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.086698 osdx hostapd[69762]: eth1: RADIUS Received 1068 bytes from RADIUS server
Sep 16 14:21:58.086705 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:58.086708 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:58.086731 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:21:58.086738 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 51)
Sep 16 14:21:58.086928 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=51 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:21:58.086988 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.087005 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.087164 osdx hostapd[69762]: eth1: RADIUS Received 229 bytes from RADIUS server
Sep 16 14:21:58.087171 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:58.087176 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:58.087195 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=52 len=171) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:21:58.087203 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 52)
Sep 16 14:21:58.089180 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=52 len=103) from STA: EAP Response-PEAP (25)
Sep 16 14:21:58.089260 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.089289 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.089673 osdx hostapd[69762]: eth1: RADIUS Received 115 bytes from RADIUS server
Sep 16 14:21:58.089682 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:58.089687 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:58.089715 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=57) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:21:58.089724 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 53)
Sep 16 14:21:58.090092 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=53 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:21:58.090159 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.090191 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.090384 osdx hostapd[69762]: eth1: RADIUS Received 98 bytes from RADIUS server
Sep 16 14:21:58.090393 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:58.090404 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:58.090433 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=54 len=40) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:21:58.090442 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 54)
Sep 16 14:21:58.090683 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=54 len=41) from STA: EAP Response-PEAP (25)
Sep 16 14:21:58.090736 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.090754 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.091018 osdx hostapd[69762]: eth1: RADIUS Received 131 bytes from RADIUS server
Sep 16 14:21:58.091031 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:58.091038 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:58.091081 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=55 len=73) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:21:58.091092 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 55)
Sep 16 14:21:58.091604 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=55 len=95) from STA: EAP Response-PEAP (25)
Sep 16 14:21:58.091672 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.091700 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.091965 osdx hostapd[69762]: eth1: RADIUS Received 104 bytes from RADIUS server
Sep 16 14:21:58.091973 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:58.091978 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:58.091999 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=56 len=46) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:21:58.092007 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 56)
Sep 16 14:21:58.092354 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=56 len=46) from STA: EAP Response-PEAP (25)
Sep 16 14:21:58.092417 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:21:58.092436 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:21:58.500533 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:21:59.092535 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Resending RADIUS message (id=8)
Sep 16 14:21:59.092566 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Sep 16 14:21:59.092724 osdx hostapd[69762]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:21:59.092727 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:59.092731 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:21:59.092770 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=4 id=56 len=4) from RADIUS server: EAP Failure
Sep 16 14:21:59.092795 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 56)
Sep 16 14:21:59.092806 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: unauthorizing port
Sep 16 14:21:59.092809 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Sep 16 14:21:59.092812 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Sep 16 14:21:59.092818 osdx hostapd[69762]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:21:59.092820 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:21:59.092822 osdx hostapd[69762]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Quiet period expired
Show output
Sep 16 14:22:00.896486 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:03.016624 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:05.093976 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:07.171217 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:09.247182 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:11.325202 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:13.442258 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:15.556758 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:17.644775 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:19.100566 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Sep 16 14:22:19.100579 osdx hostapd[69762]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Sep 16 14:22:19.100605 osdx hostapd[69762]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Sep 16 14:22:19.100617 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 75)
Sep 16 14:22:19.101011 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=75 len=10) from STA: EAP Response-Identity (1)
Sep 16 14:22:19.101023 osdx hostapd[69762]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Sep 16 14:22:19.101028 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: STA identity 'wrong'
Sep 16 14:22:19.101106 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.101136 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:19.101379 osdx hostapd[69762]: eth1: RADIUS Received 80 bytes from RADIUS server
Sep 16 14:22:19.101384 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:19.101387 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:19.101408 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=76 len=22) from RADIUS server: EAP-Request-MD5 (4)
Sep 16 14:22:19.101413 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 76)
Sep 16 14:22:19.101558 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=76 len=6) from STA: EAP Response-unknown (3)
Sep 16 14:22:19.101595 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.101606 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:19.101767 osdx hostapd[69762]: eth1: RADIUS Received 64 bytes from RADIUS server
Sep 16 14:22:19.101771 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:19.101774 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:19.101785 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=77 len=6) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:22:19.101791 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 77)
Sep 16 14:22:19.102015 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=77 len=194) from STA: EAP Response-PEAP (25)
Sep 16 14:22:19.102047 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.102057 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:19.102844 osdx hostapd[69762]: eth1: RADIUS Received 1068 bytes from RADIUS server
Sep 16 14:22:19.102850 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:19.102853 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:19.102872 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=78 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:22:19.102879 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 78)
Sep 16 14:22:19.102989 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=78 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:22:19.103026 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.103036 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:19.103113 osdx hostapd[69762]: eth1: RADIUS Received 229 bytes from RADIUS server
Sep 16 14:22:19.103118 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:19.103122 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:19.103134 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=79 len=171) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:22:19.103139 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 79)
Sep 16 14:22:19.104097 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=79 len=103) from STA: EAP Response-PEAP (25)
Sep 16 14:22:19.104133 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.104142 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:19.104334 osdx hostapd[69762]: eth1: RADIUS Received 115 bytes from RADIUS server
Sep 16 14:22:19.104339 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:19.104342 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:19.104355 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=80 len=57) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:22:19.104361 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 80)
Sep 16 14:22:19.104540 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=80 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:22:19.104574 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.104584 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:19.104664 osdx hostapd[69762]: eth1: RADIUS Received 98 bytes from RADIUS server
Sep 16 14:22:19.104669 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:19.104672 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:19.104685 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=81 len=40) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:22:19.104690 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 81)
Sep 16 14:22:19.104786 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=81 len=41) from STA: EAP Response-PEAP (25)
Sep 16 14:22:19.104815 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.104823 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:19.104994 osdx hostapd[69762]: eth1: RADIUS Received 131 bytes from RADIUS server
Sep 16 14:22:19.104999 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:19.105002 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:19.105023 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=82 len=73) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:22:19.105030 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 82)
Sep 16 14:22:19.105264 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=82 len=95) from STA: EAP Response-PEAP (25)
Sep 16 14:22:19.105296 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.105307 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:19.105458 osdx hostapd[69762]: eth1: RADIUS Received 104 bytes from RADIUS server
Sep 16 14:22:19.105464 osdx hostapd[69762]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:19.105467 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:19.105480 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: decapsulated EAP packet (code=1 id=83 len=46) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:22:19.105490 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: Sending EAP Packet (identifier 83)
Sep 16 14:22:19.105613 osdx hostapd[69762]: eth1: STA de:ad:be:ef:6c:11 IEEE 802.1X: received EAP packet (code=2 id=83 len=46) from STA: EAP Response-PEAP (25)
Sep 16 14:22:19.105639 osdx hostapd[69762]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:19.105646 osdx hostapd[69762]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds

Test Quiet Period In MAB Mode

Description

This scenario shows how to configure the quiet period in a device with MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth1 address 192.168.100.1/24
set interfaces ethernet eth1 authenticator aaa authentication list1
set interfaces ethernet eth1 authenticator log-level debug
set interfaces ethernet eth1 authenticator mode only-MAB
set interfaces ethernet eth1 authenticator quiet-period 20
set interfaces ethernet eth1 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1/EugyTjEgT8derwODrSjqsEHvzUl3Oi9Ijf9XdKNvsonV/xzPe0SNY7mNIZ1nE4XkIgXBPU5641g==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping the IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.231 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.231/0.231/0.231/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth1 address 192.168.100.2/24
set interfaces ethernet eth1 mac '00:11:22:33:44:55'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

MAB: Authentication failed, entering held state
Show output
Sep 16 14:22:27.278211 osdx hostapd[70398]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported.
Sep 16 14:22:27.278229 osdx hostapd[70398]: eth1: RADIUS Authentication server 10.215.168.1:1812
Sep 16 14:22:27.278479 osdx hostapd[70398]: connect[radius]: Network is unreachable
Sep 16 14:22:27.278263 osdx hostapd[70398]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5
Sep 16 14:22:27.278266 osdx hostapd[70398]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Sep 16 14:22:27.302040 osdx hostapd[70398]: Discovery mode enabled on eth1
Sep 16 14:22:27.302136 osdx hostapd[70398]: eth1: interface state UNINITIALIZED->ENABLED
Sep 16 14:22:27.302136 osdx hostapd[70398]: eth1: AP-ENABLED
Sep 16 14:22:30.950184 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:32.304451 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication
Sep 16 14:22:32.304496 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Sep 16 14:22:32.304506 osdx hostapd[70399]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Sep 16 14:22:32.322086 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication
Sep 16 14:22:32.322118 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Sep 16 14:22:32.322140 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Sep 16 14:22:32.323889 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Sep 16 14:22:32.323902 osdx hostapd[70399]: eth1: RADIUS Authentication server 10.215.168.1:1812
Sep 16 14:22:32.323986 osdx hostapd[70399]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:32.324018 osdx hostapd[70399]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:22:33.324112 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Sep 16 14:22:33.324144 osdx hostapd[70399]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Sep 16 14:22:33.324320 osdx hostapd[70399]: eth1: RADIUS Received 20 bytes from RADIUS server
Sep 16 14:22:33.324324 osdx hostapd[70399]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:33.324327 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:22:33.324331 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Sep 16 14:22:33.324387 osdx hostapd[70399]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Sep 16 14:22:33.324390 osdx hostapd[70399]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Sep 16 14:22:33.324394 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Sep 16 14:22:33.324397 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Sep 16 14:22:33.324405 osdx hostapd[70399]: eth1: RADIUS Received 20 bytes from RADIUS server
Sep 16 14:22:33.324407 osdx hostapd[70399]: eth1: RADIUS Received RADIUS message
Sep 16 14:22:33.324410 osdx hostapd[70399]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Quiet period expired
Show output
Sep 16 14:22:37.216463 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:41.419245 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:45.626621 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:49.835421 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:22:53.325421 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Sep 16 14:22:53.325434 osdx hostapd[70399]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Sep 16 14:22:53.325438 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB
Sep 16 14:22:53.325446 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Sep 16 14:22:53.325517 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Sep 16 14:22:53.325549 osdx hostapd[70399]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Sep 16 14:22:53.325574 osdx hostapd[70399]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:22:53.325922 osdx hostapd[70399]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds

Test Quiet Period In MAB-Fallback Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth1 address 192.168.100.1/24
set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth1 authenticator aaa authentication list1
set interfaces ethernet eth1 authenticator log-level debug
set interfaces ethernet eth1 authenticator mode 802.1x-MAB
set interfaces ethernet eth1 authenticator quiet-period 20
set interfaces ethernet eth1 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19CCE+9DtqQmdWcB3HreQek7Qvgyo4nI4vXT4SyigOMTtrpunXhj9nuteMyO7FEoLOB9EyqCMW/8Q==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping the IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.269 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.269/0.269/0.269/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth1 address 192.168.100.2/24
set interfaces ethernet eth1 mac '00:11:22:33:44:55'
set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX1/eHfDjRqzT29iYhNMWpP68ETL0Jx1sLpA=
set interfaces ethernet eth1 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

MAB: Authentication failed, entering held state
Show output
Sep 16 14:23:01.427520 osdx hostapd[71007]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported.
Sep 16 14:23:01.427536 osdx hostapd[71007]: eth1: RADIUS Authentication server 10.215.168.1:1812
Sep 16 14:23:01.427887 osdx hostapd[71007]: connect[radius]: Network is unreachable
Sep 16 14:23:01.427584 osdx hostapd[71007]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Sep 16 14:23:01.427589 osdx hostapd[71007]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Sep 16 14:23:01.443322 osdx hostapd[71007]: Discovery mode enabled on eth1
Sep 16 14:23:01.443411 osdx hostapd[71007]: eth1: interface state UNINITIALIZED->ENABLED
Sep 16 14:23:01.443411 osdx hostapd[71007]: eth1: AP-ENABLED
Sep 16 14:23:05.010561 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Sep 16 14:23:05.010575 osdx hostapd[71008]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Sep 16 14:23:05.031322 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication
Sep 16 14:23:05.031350 osdx hostapd[71008]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Sep 16 14:23:05.031354 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response
Sep 16 14:23:05.031357 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response
Sep 16 14:23:05.031370 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response
Sep 16 14:23:05.031372 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Sep 16 14:23:05.031383 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Sep 16 14:23:05.031391 osdx hostapd[71008]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Sep 16 14:23:05.031406 osdx hostapd[71008]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Sep 16 14:23:05.031417 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 38)
Sep 16 14:23:05.031710 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=38 len=10) from STA: EAP Response-Identity (1)
Sep 16 14:23:05.031718 osdx hostapd[71008]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Sep 16 14:23:05.031722 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Sep 16 14:23:05.031742 osdx hostapd[71008]: eth1: RADIUS Authentication server 10.215.168.1:1812
Sep 16 14:23:05.033494 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.033520 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.033816 osdx hostapd[71008]: eth1: RADIUS Received 80 bytes from RADIUS server
Sep 16 14:23:05.033822 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:05.033826 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:05.033847 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=39 len=22) from RADIUS server: EAP-Request-MD5 (4)
Sep 16 14:23:05.033854 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 39)
Sep 16 14:23:05.034028 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=39 len=6) from STA: EAP Response-unknown (3)
Sep 16 14:23:05.034078 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.034091 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.034311 osdx hostapd[71008]: eth1: RADIUS Received 64 bytes from RADIUS server
Sep 16 14:23:05.034315 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:05.034319 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:05.034334 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=40 len=6) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:05.034340 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 40)
Sep 16 14:23:05.034708 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=40 len=194) from STA: EAP Response-PEAP (25)
Sep 16 14:23:05.034758 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.034773 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.035618 osdx hostapd[71008]: eth1: RADIUS Received 1068 bytes from RADIUS server
Sep 16 14:23:05.035624 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:05.035627 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:05.035652 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=41 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:05.035659 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 41)
Sep 16 14:23:05.035803 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=41 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:23:05.035843 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.035854 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.035963 osdx hostapd[71008]: eth1: RADIUS Received 229 bytes from RADIUS server
Sep 16 14:23:05.035967 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:05.035971 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:05.035985 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=42 len=171) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:05.035990 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 42)
Sep 16 14:23:05.037449 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=42 len=103) from STA: EAP Response-PEAP (25)
Sep 16 14:23:05.037485 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.037495 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.037738 osdx hostapd[71008]: eth1: RADIUS Received 115 bytes from RADIUS server
Sep 16 14:23:05.037743 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:05.037747 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:05.037762 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=43 len=57) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:05.037768 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 43)
Sep 16 14:23:05.037945 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=43 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:23:05.037975 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.037984 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.038092 osdx hostapd[71008]: eth1: RADIUS Received 98 bytes from RADIUS server
Sep 16 14:23:05.038096 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:05.038100 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:05.038112 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=44 len=40) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:05.038117 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 44)
Sep 16 14:23:05.038255 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=44 len=41) from STA: EAP Response-PEAP (25)
Sep 16 14:23:05.038284 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.038295 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.038424 osdx hostapd[71008]: eth1: RADIUS Received 131 bytes from RADIUS server
Sep 16 14:23:05.038428 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:05.038431 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:05.038443 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=45 len=73) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:05.038447 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 45)
Sep 16 14:23:05.038649 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=45 len=95) from STA: EAP Response-PEAP (25)
Sep 16 14:23:05.038683 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.038690 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.038826 osdx hostapd[71008]: eth1: RADIUS Received 104 bytes from RADIUS server
Sep 16 14:23:05.038830 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:05.038833 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:05.038844 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=46 len=46) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:05.038849 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 46)
Sep 16 14:23:05.038967 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=46 len=46) from STA: EAP Response-PEAP (25)
Sep 16 14:23:05.038993 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:05.039000 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:05.447934 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:23:06.039091 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Sep 16 14:23:06.039122 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Sep 16 14:23:06.039279 osdx hostapd[71008]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:23:06.039282 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:06.039285 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:06.039331 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=46 len=4) from RADIUS server: EAP Failure
Sep 16 14:23:06.039359 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 46)
Sep 16 14:23:06.039372 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Sep 16 14:23:06.039377 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Sep 16 14:23:06.039380 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Sep 16 14:23:06.039385 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Sep 16 14:23:06.039414 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Sep 16 14:23:06.039423 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Sep 16 14:23:06.039437 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:06.039449 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:06.039459 osdx hostapd[71008]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:23:06.039461 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:06.039464 osdx hostapd[71008]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Sep 16 14:23:07.039539 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Sep 16 14:23:07.039573 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Sep 16 14:23:07.039730 osdx hostapd[71008]: eth1: RADIUS Received 20 bytes from RADIUS server
Sep 16 14:23:07.039733 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:07.039737 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:07.039740 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Sep 16 14:23:07.039784 osdx hostapd[71008]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Sep 16 14:23:07.039786 osdx hostapd[71008]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Sep 16 14:23:07.039789 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Sep 16 14:23:07.039791 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Sep 16 14:23:07.039798 osdx hostapd[71008]: eth1: RADIUS Received 20 bytes from RADIUS server
Sep 16 14:23:07.039800 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:07.039802 osdx hostapd[71008]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Quiet period expired
Show output
Sep 16 14:23:11.734326 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:23:15.927201 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:23:20.115456 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:23:24.345677 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:23:27.040660 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Sep 16 14:23:27.040669 osdx hostapd[71008]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Sep 16 14:23:27.040672 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X
Sep 16 14:23:27.040675 osdx hostapd[71008]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Sep 16 14:23:27.040688 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Sep 16 14:23:27.040698 osdx hostapd[71008]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Sep 16 14:23:27.040725 osdx hostapd[71008]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Sep 16 14:23:27.040734 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 28)
Sep 16 14:23:27.041254 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=28 len=10) from STA: EAP Response-Identity (1)
Sep 16 14:23:27.041267 osdx hostapd[71008]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Sep 16 14:23:27.041272 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Sep 16 14:23:27.041348 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.041377 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:27.041668 osdx hostapd[71008]: eth1: RADIUS Received 80 bytes from RADIUS server
Sep 16 14:23:27.041674 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:27.041679 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:27.041705 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=29 len=22) from RADIUS server: EAP-Request-MD5 (4)
Sep 16 14:23:27.041712 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 29)
Sep 16 14:23:27.041955 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=29 len=6) from STA: EAP Response-unknown (3)
Sep 16 14:23:27.042002 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.042020 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:27.042258 osdx hostapd[71008]: eth1: RADIUS Received 64 bytes from RADIUS server
Sep 16 14:23:27.042264 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:27.042268 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:27.042300 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=30 len=6) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:27.042308 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 30)
Sep 16 14:23:27.042680 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=30 len=194) from STA: EAP Response-PEAP (25)
Sep 16 14:23:27.042731 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.042747 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:27.043619 osdx hostapd[71008]: eth1: RADIUS Received 1068 bytes from RADIUS server
Sep 16 14:23:27.043625 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:27.043628 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:27.043650 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=31 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:27.043657 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 31)
Sep 16 14:23:27.043840 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=31 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:23:27.043883 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.043895 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:27.044019 osdx hostapd[71008]: eth1: RADIUS Received 229 bytes from RADIUS server
Sep 16 14:23:27.044024 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:27.044028 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:27.044043 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=32 len=171) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:27.044049 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 32)
Sep 16 14:23:27.045211 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=32 len=103) from STA: EAP Response-PEAP (25)
Sep 16 14:23:27.045256 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.045270 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:27.045547 osdx hostapd[71008]: eth1: RADIUS Received 115 bytes from RADIUS server
Sep 16 14:23:27.045551 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:27.045555 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:27.045570 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=33 len=57) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:27.045575 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 33)
Sep 16 14:23:27.045892 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=33 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:23:27.045949 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.045964 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:27.046115 osdx hostapd[71008]: eth1: RADIUS Received 98 bytes from RADIUS server
Sep 16 14:23:27.046121 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:27.046124 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:27.046144 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=34 len=40) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:27.046150 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 34)
Sep 16 14:23:27.046352 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=34 len=41) from STA: EAP Response-PEAP (25)
Sep 16 14:23:27.046398 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.046412 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:27.046577 osdx hostapd[71008]: eth1: RADIUS Received 131 bytes from RADIUS server
Sep 16 14:23:27.046582 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:27.046585 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:27.046606 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=35 len=73) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:27.046612 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 35)
Sep 16 14:23:27.046865 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=35 len=95) from STA: EAP Response-PEAP (25)
Sep 16 14:23:27.046900 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.046912 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:27.047099 osdx hostapd[71008]: eth1: RADIUS Received 104 bytes from RADIUS server
Sep 16 14:23:27.047104 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:27.047107 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:27.047121 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=36 len=46) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:27.047126 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 36)
Sep 16 14:23:27.047335 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=36 len=46) from STA: EAP Response-PEAP (25)
Sep 16 14:23:27.047377 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:27.047389 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:28.047641 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Sep 16 14:23:28.047676 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Sep 16 14:23:28.047848 osdx hostapd[71008]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:23:28.047851 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:28.047854 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:28.047895 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=36 len=4) from RADIUS server: EAP Failure
Sep 16 14:23:28.047920 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 36)
Sep 16 14:23:28.047937 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Sep 16 14:23:28.047941 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Sep 16 14:23:28.047944 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Sep 16 14:23:28.047949 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Sep 16 14:23:28.048005 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Sep 16 14:23:28.048019 osdx hostapd[71008]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Sep 16 14:23:28.048034 osdx hostapd[71008]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:28.048044 osdx hostapd[71008]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:28.048058 osdx hostapd[71008]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:23:28.048061 osdx hostapd[71008]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:28.048066 osdx hostapd[71008]: eth1: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet

Test Quiet Period In MAB-First Mode

Description

This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth1 address 192.168.100.1/24
set interfaces ethernet eth1 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth1 authenticator aaa authentication list1
set interfaces ethernet eth1 authenticator log-level debug
set interfaces ethernet eth1 authenticator mode MAB-802.1x
set interfaces ethernet eth1 authenticator quiet-period 20
set interfaces ethernet eth1 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19Lt0MNx8qG1PEeGA88/gHY6pZFDPXzROfQcwneRDb3NuX2+D2nP1BD4lrE7nrxcks5BuiQkaq8Zw==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping the IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.542 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.542/0.542/0.542/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth1 address 192.168.100.2/24
set interfaces ethernet eth1 mac '00:11:22:33:44:55'
set interfaces ethernet eth1 supplicant encrypted-password U2FsdGVkX19g5QDUEs3YW+4uPG4GMP5CzqnKvMUsjnA=
set interfaces ethernet eth1 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Authentication failed, enforcing quiet period
Show output
Sep 16 14:23:37.527252 osdx hostapd[71624]: eth1: IEEE 802.11 Fetching hardware channel/rate support not supported.
Sep 16 14:23:37.527274 osdx hostapd[71624]: eth1: RADIUS Authentication server 10.215.168.1:1812
Sep 16 14:23:37.527510 osdx hostapd[71624]: connect[radius]: Network is unreachable
Sep 16 14:23:37.527310 osdx hostapd[71624]: eth1: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Sep 16 14:23:37.527313 osdx hostapd[71624]: eth1: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Sep 16 14:23:37.566973 osdx hostapd[71624]: Discovery mode enabled on eth1
Sep 16 14:23:37.567077 osdx hostapd[71624]: eth1: interface state UNINITIALIZED->ENABLED
Sep 16 14:23:37.567077 osdx hostapd[71624]: eth1: AP-ENABLED
Sep 16 14:23:41.099260 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Sep 16 14:23:41.099273 osdx hostapd[71625]: eth1: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Sep 16 14:23:41.115033 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication
Sep 16 14:23:41.115075 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Sep 16 14:23:41.115095 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Sep 16 14:23:41.117498 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Sep 16 14:23:41.117513 osdx hostapd[71625]: eth1: RADIUS Authentication server 10.215.168.1:1812
Sep 16 14:23:41.117609 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:41.117644 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:41.117679 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Sep 16 14:23:41.615216 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:23:42.117748 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Sep 16 14:23:42.117806 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Sep 16 14:23:42.118069 osdx hostapd[71625]: eth1: RADIUS Received 20 bytes from RADIUS server
Sep 16 14:23:42.118075 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.118083 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.118090 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Sep 16 14:23:42.118162 osdx hostapd[71625]: eth1: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Sep 16 14:23:42.118167 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X
Sep 16 14:23:42.118173 osdx hostapd[71625]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Sep 16 14:23:42.118179 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started
Sep 16 14:23:42.118190 osdx hostapd[71625]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Sep 16 14:23:42.118204 osdx hostapd[71625]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Sep 16 14:23:42.118228 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 155)
Sep 16 14:23:42.118252 osdx hostapd[71625]: eth1: RADIUS Received 20 bytes from RADIUS server
Sep 16 14:23:42.118265 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.118271 osdx hostapd[71625]: eth1: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Sep 16 14:23:42.118838 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=155 len=10) from STA: EAP Response-Identity (1)
Sep 16 14:23:42.118867 osdx hostapd[71625]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Sep 16 14:23:42.118876 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Sep 16 14:23:42.118997 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.119025 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:42.119358 osdx hostapd[71625]: eth1: RADIUS Received 80 bytes from RADIUS server
Sep 16 14:23:42.119371 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.119379 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.119432 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=156 len=22) from RADIUS server: EAP-Request-MD5 (4)
Sep 16 14:23:42.119445 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 156)
Sep 16 14:23:42.119738 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=156 len=6) from STA: EAP Response-unknown (3)
Sep 16 14:23:42.119812 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.119833 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:42.120197 osdx hostapd[71625]: eth1: RADIUS Received 64 bytes from RADIUS server
Sep 16 14:23:42.120205 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.120211 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.120238 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=157 len=6) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:42.120245 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 157)
Sep 16 14:23:42.120789 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=157 len=194) from STA: EAP Response-PEAP (25)
Sep 16 14:23:42.120852 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.120880 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:42.122455 osdx hostapd[71625]: eth1: RADIUS Received 1068 bytes from RADIUS server
Sep 16 14:23:42.122461 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.122464 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.122483 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=158 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:42.122489 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 158)
Sep 16 14:23:42.122646 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=158 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:23:42.122693 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.122706 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:42.122817 osdx hostapd[71625]: eth1: RADIUS Received 229 bytes from RADIUS server
Sep 16 14:23:42.122822 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.122826 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.122843 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=159 len=171) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:42.122848 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 159)
Sep 16 14:23:42.124883 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=159 len=103) from STA: EAP Response-PEAP (25)
Sep 16 14:23:42.124922 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.124933 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:42.125202 osdx hostapd[71625]: eth1: RADIUS Received 115 bytes from RADIUS server
Sep 16 14:23:42.125209 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.125212 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.125233 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=160 len=57) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:42.125240 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 160)
Sep 16 14:23:42.125494 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=160 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:23:42.125533 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.125546 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:42.125675 osdx hostapd[71625]: eth1: RADIUS Received 98 bytes from RADIUS server
Sep 16 14:23:42.125681 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.125685 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.125700 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=161 len=40) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:42.125706 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 161)
Sep 16 14:23:42.125878 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=161 len=41) from STA: EAP Response-PEAP (25)
Sep 16 14:23:42.125911 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.125922 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:42.126060 osdx hostapd[71625]: eth1: RADIUS Received 131 bytes from RADIUS server
Sep 16 14:23:42.126065 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.126069 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.126084 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=162 len=73) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:42.126090 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 162)
Sep 16 14:23:42.126292 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=162 len=95) from STA: EAP Response-PEAP (25)
Sep 16 14:23:42.126323 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.126332 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:42.126480 osdx hostapd[71625]: eth1: RADIUS Received 104 bytes from RADIUS server
Sep 16 14:23:42.126485 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:42.126488 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:42.126501 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=163 len=46) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:23:42.126506 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 163)
Sep 16 14:23:42.126617 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=163 len=46) from STA: EAP Response-PEAP (25)
Sep 16 14:23:42.126647 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:23:42.126656 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:23:43.126768 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Sep 16 14:23:43.126810 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Sep 16 14:23:43.127026 osdx hostapd[71625]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:23:43.127031 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:43.127037 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:23:43.127090 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=163 len=4) from RADIUS server: EAP Failure
Sep 16 14:23:43.127123 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 163)
Sep 16 14:23:43.127285 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Sep 16 14:23:43.127298 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Sep 16 14:23:43.127302 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Sep 16 14:23:43.127308 osdx hostapd[71625]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:23:43.127311 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:23:43.127315 osdx hostapd[71625]: eth1: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run the command system journal show | grep "osdx hostapd" on DUT0 and check whether the output contains the following tokens:

Quiet period expired
Show output
Sep 16 14:23:47.946897 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:23:52.115494 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:23:56.279675 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:24:00.483430 osdx OSDxCLI[5354]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Sep 16 14:24:03.134305 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Sep 16 14:24:03.134318 osdx hostapd[71625]: eth1: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Sep 16 14:24:03.134343 osdx hostapd[71625]: IEEE 802.1X: OSDX-EAP: getDecision: no identity known yet -> CONTINUE
Sep 16 14:24:03.134352 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 158)
Sep 16 14:24:03.134757 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=158 len=10) from STA: EAP Response-Identity (1)
Sep 16 14:24:03.134766 osdx hostapd[71625]: IEEE 802.1X: OSDX-EAP: getDecision: -> PASSTHROUGH
Sep 16 14:24:03.134770 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Sep 16 14:24:03.134832 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.134852 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:03.135100 osdx hostapd[71625]: eth1: RADIUS Received 80 bytes from RADIUS server
Sep 16 14:24:03.135108 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:03.135114 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:03.135150 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=159 len=22) from RADIUS server: EAP-Request-MD5 (4)
Sep 16 14:24:03.135159 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 159)
Sep 16 14:24:03.135358 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=159 len=6) from STA: EAP Response-unknown (3)
Sep 16 14:24:03.135400 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.135413 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:03.135602 osdx hostapd[71625]: eth1: RADIUS Received 64 bytes from RADIUS server
Sep 16 14:24:03.135608 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:03.135612 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:03.135625 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=160 len=6) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:24:03.135630 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 160)
Sep 16 14:24:03.135980 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=160 len=194) from STA: EAP Response-PEAP (25)
Sep 16 14:24:03.136022 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.136035 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:03.137148 osdx hostapd[71625]: eth1: RADIUS Received 1068 bytes from RADIUS server
Sep 16 14:24:03.137156 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:03.137161 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:03.137190 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=161 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:24:03.137199 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 161)
Sep 16 14:24:03.137419 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=161 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:24:03.137479 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.137495 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:03.137624 osdx hostapd[71625]: eth1: RADIUS Received 229 bytes from RADIUS server
Sep 16 14:24:03.137631 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:03.137635 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:03.137653 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=162 len=171) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:24:03.137660 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 162)
Sep 16 14:24:03.139133 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=162 len=103) from STA: EAP Response-PEAP (25)
Sep 16 14:24:03.139177 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.139191 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:03.139490 osdx hostapd[71625]: eth1: RADIUS Received 115 bytes from RADIUS server
Sep 16 14:24:03.139496 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:03.139500 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:03.139516 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=163 len=57) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:24:03.139523 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 163)
Sep 16 14:24:03.139747 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=163 len=6) from STA: EAP Response-PEAP (25)
Sep 16 14:24:03.139792 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.139803 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:03.139945 osdx hostapd[71625]: eth1: RADIUS Received 98 bytes from RADIUS server
Sep 16 14:24:03.139951 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:03.139955 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:03.139971 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=164 len=40) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:24:03.139977 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 164)
Sep 16 14:24:03.140185 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=164 len=41) from STA: EAP Response-PEAP (25)
Sep 16 14:24:03.140238 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.140258 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:03.140433 osdx hostapd[71625]: eth1: RADIUS Received 131 bytes from RADIUS server
Sep 16 14:24:03.140440 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:03.140444 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:03.140464 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=165 len=73) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:24:03.140471 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 165)
Sep 16 14:24:03.140788 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=165 len=95) from STA: EAP Response-PEAP (25)
Sep 16 14:24:03.140830 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.140863 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:03.141051 osdx hostapd[71625]: eth1: RADIUS Received 104 bytes from RADIUS server
Sep 16 14:24:03.141059 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:03.141063 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:03.141086 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=166 len=46) from RADIUS server: EAP-Request-PEAP (25)
Sep 16 14:24:03.141094 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 166)
Sep 16 14:24:03.141376 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=166 len=46) from STA: EAP Response-PEAP (25)
Sep 16 14:24:03.141421 osdx hostapd[71625]: eth1: RADIUS Sending RADIUS message to authentication server
Sep 16 14:24:03.141434 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 1 seconds
Sep 16 14:24:04.141520 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Sep 16 14:24:04.141549 osdx hostapd[71625]: eth1: RADIUS Next RADIUS client retransmit in 2 seconds
Sep 16 14:24:04.141684 osdx hostapd[71625]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:24:04.141687 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:04.141690 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Sep 16 14:24:04.141733 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=166 len=4) from RADIUS server: EAP Failure
Sep 16 14:24:04.141759 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 166)
Sep 16 14:24:04.141770 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Sep 16 14:24:04.141773 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Sep 16 14:24:04.141776 osdx hostapd[71625]: eth1: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Sep 16 14:24:04.141780 osdx hostapd[71625]: eth1: RADIUS Received 44 bytes from RADIUS server
Sep 16 14:24:04.141782 osdx hostapd[71625]: eth1: RADIUS Received RADIUS message
Sep 16 14:24:04.141784 osdx hostapd[71625]: eth1: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet