Quiet Period

Contents

This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.

Test Quiet Period In 802.1X Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1x authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode only-802.1x
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1+poyAj0JJUh+VlUUukR4z3I9JTGLr2NHkoRSfaUXFe8eioA7cnPeDzn+uDaBuQgVdys8autWrO/w==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.344 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.344/0.344/0.344/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19DPLMSlgb7eUtkKteAsVoPFJWYCQCCM4o=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Authentication failed, enforcing quiet period

Show output

Dec 11 14:01:51.386506 osdx hostapd[64720]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Dec 11 14:01:51.386527 osdx hostapd[64720]: eth2: RADIUS Authentication server 10.215.168.1:1812
Dec 11 14:01:51.386852 osdx hostapd[64720]: connect[radius]: Network is unreachable
Dec 11 14:01:51.386580 osdx hostapd[64720]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2
Dec 11 14:01:51.386584 osdx hostapd[64720]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Dec 11 14:01:51.402326 osdx hostapd[64720]: Discovery mode enabled on eth2
Dec 11 14:01:51.402406 osdx hostapd[64720]: eth2: interface state UNINITIALIZED->ENABLED
Dec 11 14:01:51.402406 osdx hostapd[64720]: eth2: AP-ENABLED
Dec 11 14:01:53.189818 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:01:55.026596 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added
Dec 11 14:01:55.026612 osdx hostapd[64721]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Dec 11 14:01:55.038335 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication
Dec 11 14:01:55.038359 osdx hostapd[64721]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Dec 11 14:01:55.038377 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA
Dec 11 14:01:55.038386 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port
Dec 11 14:01:55.038393 osdx hostapd[64721]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Dec 11 14:01:55.038415 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 78)
Dec 11 14:01:55.038695 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=78 len=10) from STA: EAP Response-Identity (1)
Dec 11 14:01:55.038705 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong'
Dec 11 14:01:55.038723 osdx hostapd[64721]: eth2: RADIUS Authentication server 10.215.168.1:1812
Dec 11 14:01:55.040463 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.040489 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.040739 osdx hostapd[64721]: eth2: RADIUS Received 80 bytes from RADIUS server
Dec 11 14:01:55.040744 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:55.040749 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:55.040766 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=79 len=22) from RADIUS server: EAP-Request-MD5 (4)
Dec 11 14:01:55.040772 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 79)
Dec 11 14:01:55.040932 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=79 len=6) from STA: EAP Response-unknown (3)
Dec 11 14:01:55.040966 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.040978 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.041142 osdx hostapd[64721]: eth2: RADIUS Received 64 bytes from RADIUS server
Dec 11 14:01:55.041151 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:55.041155 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:55.041176 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=80 len=6) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:01:55.041183 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 80)
Dec 11 14:01:55.041463 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=80 len=194) from STA: EAP Response-PEAP (25)
Dec 11 14:01:55.041504 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.041517 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.042434 osdx hostapd[64721]: eth2: RADIUS Received 1068 bytes from RADIUS server
Dec 11 14:01:55.042439 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:55.042442 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:55.042459 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=81 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:01:55.042464 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 81)
Dec 11 14:01:55.042644 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=81 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:01:55.042697 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.042710 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.042836 osdx hostapd[64721]: eth2: RADIUS Received 229 bytes from RADIUS server
Dec 11 14:01:55.042842 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:55.042846 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:55.042872 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=82 len=171) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:01:55.042880 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 82)
Dec 11 14:01:55.044200 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=82 len=103) from STA: EAP Response-PEAP (25)
Dec 11 14:01:55.044249 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.044261 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.044560 osdx hostapd[64721]: eth2: RADIUS Received 115 bytes from RADIUS server
Dec 11 14:01:55.044564 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:55.044567 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:55.044581 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=83 len=57) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:01:55.044586 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 83)
Dec 11 14:01:55.044771 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=83 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:01:55.044799 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.044807 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.044923 osdx hostapd[64721]: eth2: RADIUS Received 98 bytes from RADIUS server
Dec 11 14:01:55.044928 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:55.044931 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:55.044944 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=84 len=40) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:01:55.044949 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 84)
Dec 11 14:01:55.045086 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=84 len=41) from STA: EAP Response-PEAP (25)
Dec 11 14:01:55.045113 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.045122 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.045238 osdx hostapd[64721]: eth2: RADIUS Received 131 bytes from RADIUS server
Dec 11 14:01:55.045244 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:55.045247 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:55.045259 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=85 len=73) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:01:55.045263 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 85)
Dec 11 14:01:55.045468 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=85 len=95) from STA: EAP Response-PEAP (25)
Dec 11 14:01:55.045494 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.045501 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.045626 osdx hostapd[64721]: eth2: RADIUS Received 104 bytes from RADIUS server
Dec 11 14:01:55.045631 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:55.045634 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:55.045644 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=86 len=46) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:01:55.045649 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 86)
Dec 11 14:01:55.045824 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=86 len=46) from STA: EAP Response-PEAP (25)
Dec 11 14:01:55.045860 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:01:55.045871 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:01:55.329166 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:01:56.045974 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8)
Dec 11 14:01:56.046019 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:01:56.046171 osdx hostapd[64721]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:01:56.046176 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:56.046181 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:01:56.046246 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=86 len=4) from RADIUS server: EAP Failure
Dec 11 14:01:56.046274 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 86)
Dec 11 14:01:56.046288 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port
Dec 11 14:01:56.046293 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Dec 11 14:01:56.046296 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Dec 11 14:01:56.046301 osdx hostapd[64721]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:01:56.046305 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:01:56.046308 osdx hostapd[64721]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Dec 11 14:01:57.833659 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:01:59.927341 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:02.007783 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:04.135184 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:06.222598 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:08.309600 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:10.390516 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:12.478244 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:14.606729 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:16.057107 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Dec 11 14:02:16.057122 osdx hostapd[64721]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Dec 11 14:02:16.057162 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 138)
Dec 11 14:02:16.057763 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=138 len=10) from STA: EAP Response-Identity (1)
Dec 11 14:02:16.057779 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong'
Dec 11 14:02:16.057853 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.058316 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:16.058443 osdx hostapd[64721]: eth2: RADIUS Received 80 bytes from RADIUS server
Dec 11 14:02:16.058449 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:16.058454 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:16.058486 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=139 len=22) from RADIUS server: EAP-Request-MD5 (4)
Dec 11 14:02:16.058493 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 139)
Dec 11 14:02:16.058777 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=139 len=6) from STA: EAP Response-unknown (3)
Dec 11 14:02:16.058826 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.059049 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:16.059122 osdx hostapd[64721]: eth2: RADIUS Received 64 bytes from RADIUS server
Dec 11 14:02:16.059125 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:16.059129 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:16.059150 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=140 len=6) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:02:16.059157 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 140)
Dec 11 14:02:16.059577 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=140 len=194) from STA: EAP Response-PEAP (25)
Dec 11 14:02:16.059626 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.060548 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:16.060910 osdx hostapd[64721]: eth2: RADIUS Received 1068 bytes from RADIUS server
Dec 11 14:02:16.060918 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:16.060923 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:16.060950 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=141 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:02:16.060958 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 141)
Dec 11 14:02:16.061202 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=141 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:02:16.061251 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.061522 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:16.061608 osdx hostapd[64721]: eth2: RADIUS Received 229 bytes from RADIUS server
Dec 11 14:02:16.061615 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:16.061619 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:16.061640 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=142 len=171) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:02:16.061647 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 142)
Dec 11 14:02:16.063148 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=142 len=103) from STA: EAP Response-PEAP (25)
Dec 11 14:02:16.063209 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.063234 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:16.063625 osdx hostapd[64721]: eth2: RADIUS Received 115 bytes from RADIUS server
Dec 11 14:02:16.063632 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:16.063636 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:16.063656 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=143 len=57) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:02:16.063670 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 143)
Dec 11 14:02:16.064093 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=143 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:02:16.064145 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.064161 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:16.064336 osdx hostapd[64721]: eth2: RADIUS Received 98 bytes from RADIUS server
Dec 11 14:02:16.064347 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:16.064351 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:16.064376 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=144 len=40) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:02:16.064383 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 144)
Dec 11 14:02:16.064615 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=144 len=41) from STA: EAP Response-PEAP (25)
Dec 11 14:02:16.064663 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.064724 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:16.064885 osdx hostapd[64721]: eth2: RADIUS Received 131 bytes from RADIUS server
Dec 11 14:02:16.064891 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:16.064895 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:16.064915 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=145 len=73) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:02:16.064922 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 145)
Dec 11 14:02:16.065214 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=145 len=95) from STA: EAP Response-PEAP (25)
Dec 11 14:02:16.065273 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.065289 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:16.065505 osdx hostapd[64721]: eth2: RADIUS Received 104 bytes from RADIUS server
Dec 11 14:02:16.065513 osdx hostapd[64721]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:16.065517 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:16.065537 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=146 len=46) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:02:16.065545 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 146)
Dec 11 14:02:16.065835 osdx hostapd[64721]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=146 len=46) from STA: EAP Response-PEAP (25)
Dec 11 14:02:16.065885 osdx hostapd[64721]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:16.065900 osdx hostapd[64721]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds

---

Test Quiet Period In MAB Mode

Description

This scenario shows how to configure the quiet period in a device with MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode only-MAB
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19JHJg4Pxlpicjb08dTG6BdGcAdqN0fiuFb6PNNFZRQ5IPRs0a7rjMCsP/v9diMQQmLfGbJcnRgSA==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.380 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.380/0.380/0.380/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

MAB: Authentication failed, entering held state

Show output

Dec 11 14:02:27.552255 osdx hostapd[65294]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Dec 11 14:02:27.552274 osdx hostapd[65294]: eth2: RADIUS Authentication server 10.215.168.1:1812
Dec 11 14:02:27.552529 osdx hostapd[65294]: connect[radius]: Network is unreachable
Dec 11 14:02:27.552324 osdx hostapd[65294]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5
Dec 11 14:02:27.552327 osdx hostapd[65294]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Dec 11 14:02:27.572107 osdx hostapd[65294]: Discovery mode enabled on eth2
Dec 11 14:02:27.572237 osdx hostapd[65294]: eth2: interface state UNINITIALIZED->ENABLED
Dec 11 14:02:27.572237 osdx hostapd[65294]: eth2: AP-ENABLED
Dec 11 14:02:32.574888 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication
Dec 11 14:02:32.574932 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Dec 11 14:02:32.574942 osdx hostapd[65295]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Dec 11 14:02:32.596282 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication
Dec 11 14:02:32.596319 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Dec 11 14:02:32.596338 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Dec 11 14:02:32.598876 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Dec 11 14:02:32.598893 osdx hostapd[65295]: eth2: RADIUS Authentication server 10.215.168.1:1812
Dec 11 14:02:32.599012 osdx hostapd[65295]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:32.599048 osdx hostapd[65295]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:32.599553 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:33.599156 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Dec 11 14:02:33.599199 osdx hostapd[65295]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:02:33.599857 osdx hostapd[65295]: eth2: RADIUS Received 20 bytes from RADIUS server
Dec 11 14:02:33.599865 osdx hostapd[65295]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:33.599870 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:33.599875 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Dec 11 14:02:33.599925 osdx hostapd[65295]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:02:33.599928 osdx hostapd[65295]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:02:33.599932 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Dec 11 14:02:33.599935 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Dec 11 14:02:38.845920 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:43.080086 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:47.293053 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:51.470820 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:02:53.600867 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Dec 11 14:02:53.600881 osdx hostapd[65295]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:02:53.600885 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB
Dec 11 14:02:53.600889 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Dec 11 14:02:53.600950 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Dec 11 14:02:53.600984 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Dec 11 14:02:53.601011 osdx hostapd[65295]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:02:53.601047 osdx hostapd[65295]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:02:54.601849 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=129)
Dec 11 14:02:54.601893 osdx hostapd[65295]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:02:54.602031 osdx hostapd[65295]: eth2: RADIUS Received 20 bytes from RADIUS server
Dec 11 14:02:54.602036 osdx hostapd[65295]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:54.602040 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:02:54.602044 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Dec 11 14:02:54.602091 osdx hostapd[65295]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:02:54.602095 osdx hostapd[65295]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:02:54.602098 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Dec 11 14:02:54.602102 osdx hostapd[65295]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Dec 11 14:02:54.602114 osdx hostapd[65295]: eth2: RADIUS Received 20 bytes from RADIUS server
Dec 11 14:02:54.602117 osdx hostapd[65295]: eth2: RADIUS Received RADIUS message
Dec 11 14:02:54.602119 osdx hostapd[65295]: eth2: RADIUS No matching RADIUS request found (type=0 id=129) - dropping packet

---

Test Quiet Period In MAB-Fallback Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1X-MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode 802.1x-MAB
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX18Ta54aXjMWrGuR3X++kotMtgQ9q8qHUPOE4HWfkUXYpsGe4tw1J3Hl8AP8pvOcdQ3tTry7fG/Q8A==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.313 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.313/0.313/0.313/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19cvQQr0HMEUuD5WvElVP3lFOrMSQZ8/kA=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

MAB: Authentication failed, entering held state

Show output

Dec 11 14:03:05.224584 osdx hostapd[65838]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Dec 11 14:03:05.224597 osdx hostapd[65838]: eth2: RADIUS Authentication server 10.215.168.1:1812
Dec 11 14:03:05.224833 osdx hostapd[65838]: connect[radius]: Network is unreachable
Dec 11 14:03:05.224634 osdx hostapd[65838]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Dec 11 14:03:05.224637 osdx hostapd[65838]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Dec 11 14:03:05.248444 osdx hostapd[65838]: Discovery mode enabled on eth2
Dec 11 14:03:05.248521 osdx hostapd[65838]: eth2: interface state UNINITIALIZED->ENABLED
Dec 11 14:03:05.248521 osdx hostapd[65838]: eth2: AP-ENABLED
Dec 11 14:03:10.251272 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication
Dec 11 14:03:10.251320 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Dec 11 14:03:10.251330 osdx hostapd[65839]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Dec 11 14:03:10.272537 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication
Dec 11 14:03:10.272576 osdx hostapd[65839]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Dec 11 14:03:10.272581 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response
Dec 11 14:03:10.272585 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response
Dec 11 14:03:10.272610 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Dec 11 14:03:10.272618 osdx hostapd[65839]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Dec 11 14:03:10.272654 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 244)
Dec 11 14:03:10.273145 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response
Dec 11 14:03:10.273154 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=244 len=10) from STA: EAP Response-Identity (1)
Dec 11 14:03:10.273172 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Dec 11 14:03:10.273222 osdx hostapd[65839]: eth2: RADIUS Authentication server 10.215.168.1:1812
Dec 11 14:03:10.275942 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.276073 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:10.276318 osdx hostapd[65839]: eth2: RADIUS Received 80 bytes from RADIUS server
Dec 11 14:03:10.276326 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:10.276332 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:10.276361 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=245 len=22) from RADIUS server: EAP-Request-MD5 (4)
Dec 11 14:03:10.276371 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 245)
Dec 11 14:03:10.276733 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=245 len=6) from STA: EAP Response-unknown (3)
Dec 11 14:03:10.276795 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.276886 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:10.277084 osdx hostapd[65839]: eth2: RADIUS Received 64 bytes from RADIUS server
Dec 11 14:03:10.277090 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:10.277095 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:10.277118 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=246 len=6) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:10.277127 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 246)
Dec 11 14:03:10.277585 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=246 len=194) from STA: EAP Response-PEAP (25)
Dec 11 14:03:10.277638 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.277738 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:10.279157 osdx hostapd[65839]: eth2: RADIUS Received 1068 bytes from RADIUS server
Dec 11 14:03:10.279180 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:10.279185 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:10.279334 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=247 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:10.279347 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 247)
Dec 11 14:03:10.279662 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=247 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:03:10.279724 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.279805 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:10.279957 osdx hostapd[65839]: eth2: RADIUS Received 229 bytes from RADIUS server
Dec 11 14:03:10.279963 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:10.279968 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:10.279987 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=248 len=171) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:10.279995 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 248)
Dec 11 14:03:10.281934 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=248 len=103) from STA: EAP Response-PEAP (25)
Dec 11 14:03:10.281999 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.282062 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:10.282478 osdx hostapd[65839]: eth2: RADIUS Received 115 bytes from RADIUS server
Dec 11 14:03:10.282484 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:10.282488 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:10.282509 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=249 len=57) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:10.282514 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 249)
Dec 11 14:03:10.282810 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=249 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:03:10.282848 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.282861 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:10.283037 osdx hostapd[65839]: eth2: RADIUS Received 98 bytes from RADIUS server
Dec 11 14:03:10.283046 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:10.283051 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:10.283077 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=250 len=40) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:10.283086 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 250)
Dec 11 14:03:10.283302 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=250 len=41) from STA: EAP Response-PEAP (25)
Dec 11 14:03:10.283349 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.283364 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:10.283573 osdx hostapd[65839]: eth2: RADIUS Received 131 bytes from RADIUS server
Dec 11 14:03:10.283579 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:10.283583 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:10.283603 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=251 len=73) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:10.283610 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 251)
Dec 11 14:03:10.283932 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=251 len=95) from STA: EAP Response-PEAP (25)
Dec 11 14:03:10.283974 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.283987 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:10.284193 osdx hostapd[65839]: eth2: RADIUS Received 104 bytes from RADIUS server
Dec 11 14:03:10.284200 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:10.284205 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:10.284226 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=252 len=46) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:10.284233 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 252)
Dec 11 14:03:10.284928 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=252 len=46) from STA: EAP Response-PEAP (25)
Dec 11 14:03:10.284983 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:10.285032 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:11.285121 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Dec 11 14:03:11.285158 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:03:11.285329 osdx hostapd[65839]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:03:11.285333 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:11.285337 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:11.285391 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=252 len=4) from RADIUS server: EAP Failure
Dec 11 14:03:11.285417 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 252)
Dec 11 14:03:11.285431 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Dec 11 14:03:11.285435 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Dec 11 14:03:11.285439 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Dec 11 14:03:11.285444 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Dec 11 14:03:11.285469 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Dec 11 14:03:11.285477 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Dec 11 14:03:11.285494 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:11.285585 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:11.285602 osdx hostapd[65839]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:03:11.285606 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:11.285609 osdx hostapd[65839]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Dec 11 14:03:12.285699 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Dec 11 14:03:12.285828 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:03:12.285916 osdx hostapd[65839]: eth2: RADIUS Received 20 bytes from RADIUS server
Dec 11 14:03:12.285922 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:12.285926 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:12.285931 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Dec 11 14:03:12.285987 osdx hostapd[65839]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:03:12.285990 osdx hostapd[65839]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:03:12.285993 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Dec 11 14:03:12.285996 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Dec 11 14:03:12.286005 osdx hostapd[65839]: eth2: RADIUS Received 20 bytes from RADIUS server
Dec 11 14:03:12.286009 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:12.286012 osdx hostapd[65839]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Dec 11 14:03:14.423548 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:03:18.617194 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:03:22.906941 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:03:27.235153 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:03:31.516697 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:03:32.286212 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Dec 11 14:03:32.286223 osdx hostapd[65839]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:03:32.286227 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X
Dec 11 14:03:32.286231 osdx hostapd[65839]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Dec 11 14:03:32.286240 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Dec 11 14:03:32.286246 osdx hostapd[65839]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Dec 11 14:03:32.286282 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 23)
Dec 11 14:03:32.286739 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=23 len=10) from STA: EAP Response-Identity (1)
Dec 11 14:03:32.286752 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Dec 11 14:03:32.286813 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.286836 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:32.287079 osdx hostapd[65839]: eth2: RADIUS Received 80 bytes from RADIUS server
Dec 11 14:03:32.287083 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:32.287086 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:32.287102 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=24 len=22) from RADIUS server: EAP-Request-MD5 (4)
Dec 11 14:03:32.287107 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 24)
Dec 11 14:03:32.287346 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=24 len=6) from STA: EAP Response-unknown (3)
Dec 11 14:03:32.287414 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.287434 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:32.287631 osdx hostapd[65839]: eth2: RADIUS Received 64 bytes from RADIUS server
Dec 11 14:03:32.287637 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:32.287642 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:32.287662 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=25 len=6) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:32.287670 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 25)
Dec 11 14:03:32.287959 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=25 len=194) from STA: EAP Response-PEAP (25)
Dec 11 14:03:32.288005 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.288024 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:32.289390 osdx hostapd[65839]: eth2: RADIUS Received 1068 bytes from RADIUS server
Dec 11 14:03:32.289396 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:32.289400 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:32.289420 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=26 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:32.289427 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 26)
Dec 11 14:03:32.289612 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=26 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:03:32.289650 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.289662 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:32.289758 osdx hostapd[65839]: eth2: RADIUS Received 229 bytes from RADIUS server
Dec 11 14:03:32.289763 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:32.289766 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:32.289779 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=27 len=171) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:32.289785 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 27)
Dec 11 14:03:32.290765 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=27 len=103) from STA: EAP Response-PEAP (25)
Dec 11 14:03:32.290830 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.290850 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:32.291223 osdx hostapd[65839]: eth2: RADIUS Received 115 bytes from RADIUS server
Dec 11 14:03:32.291235 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:32.291241 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:32.291263 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=28 len=57) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:32.291272 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 28)
Dec 11 14:03:32.291587 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=28 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:03:32.291636 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.291650 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:32.291824 osdx hostapd[65839]: eth2: RADIUS Received 98 bytes from RADIUS server
Dec 11 14:03:32.291832 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:32.291837 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:32.291856 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=29 len=40) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:32.291864 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 29)
Dec 11 14:03:32.292103 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=29 len=41) from STA: EAP Response-PEAP (25)
Dec 11 14:03:32.292153 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.292174 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:32.292356 osdx hostapd[65839]: eth2: RADIUS Received 131 bytes from RADIUS server
Dec 11 14:03:32.292367 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:32.292374 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:32.292423 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=30 len=73) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:32.292433 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 30)
Dec 11 14:03:32.292754 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=30 len=95) from STA: EAP Response-PEAP (25)
Dec 11 14:03:32.292801 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.292816 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:32.293072 osdx hostapd[65839]: eth2: RADIUS Received 104 bytes from RADIUS server
Dec 11 14:03:32.293081 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:32.293087 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:32.293111 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=31 len=46) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:32.293120 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 31)
Dec 11 14:03:32.293367 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=31 len=46) from STA: EAP Response-PEAP (25)
Dec 11 14:03:32.293426 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:32.293447 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:33.293535 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Dec 11 14:03:33.293572 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:03:33.293730 osdx hostapd[65839]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:03:33.293734 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:33.293738 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:33.293791 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=31 len=4) from RADIUS server: EAP Failure
Dec 11 14:03:33.293819 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 31)
Dec 11 14:03:33.293837 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Dec 11 14:03:33.293841 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Dec 11 14:03:33.293845 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Dec 11 14:03:33.293850 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Dec 11 14:03:33.293881 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Dec 11 14:03:33.293890 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Dec 11 14:03:33.293905 osdx hostapd[65839]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:33.293919 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:33.293932 osdx hostapd[65839]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:03:33.293936 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:33.293939 osdx hostapd[65839]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Dec 11 14:03:34.294015 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=129)
Dec 11 14:03:34.294056 osdx hostapd[65839]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:03:34.294274 osdx hostapd[65839]: eth2: RADIUS Received 20 bytes from RADIUS server
Dec 11 14:03:34.294279 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:34.294284 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:34.294289 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Dec 11 14:03:34.294342 osdx hostapd[65839]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:03:34.294346 osdx hostapd[65839]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:03:34.294349 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Dec 11 14:03:34.294353 osdx hostapd[65839]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Dec 11 14:03:34.294361 osdx hostapd[65839]: eth2: RADIUS Received 20 bytes from RADIUS server
Dec 11 14:03:34.294364 osdx hostapd[65839]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:34.294368 osdx hostapd[65839]: eth2: RADIUS No matching RADIUS request found (type=0 id=129) - dropping packet

---

Test Quiet Period In MAB-First Mode

Description

This scenario shows how to configure the quiet period in a device with MAB-802.1X authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode MAB-802.1x
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1/iusu5jwKxygoyb3y+DitZHzENybhq5Ln4wG6hEY0seocPZlw22/DPbT6w+dKw5+DymcAmgK61bg==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.236 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.236/0.236/0.236/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19v4Hrfd+VgsT325+65buN5MKT0Kg/7Ri8=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Authentication failed, enforcing quiet period

Show output

Dec 11 14:03:44.986118 osdx hostapd[66386]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Dec 11 14:03:44.986143 osdx hostapd[66386]: eth2: RADIUS Authentication server 10.215.168.1:1812
Dec 11 14:03:44.986538 osdx hostapd[66386]: connect[radius]: Network is unreachable
Dec 11 14:03:44.986201 osdx hostapd[66386]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Dec 11 14:03:44.986207 osdx hostapd[66386]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Dec 11 14:03:45.005871 osdx hostapd[66386]: Discovery mode enabled on eth2
Dec 11 14:03:45.005916 osdx hostapd[66386]: eth2: interface state UNINITIALIZED->ENABLED
Dec 11 14:03:45.005916 osdx hostapd[66386]: eth2: AP-ENABLED
Dec 11 14:03:48.525236 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Dec 11 14:03:48.525249 osdx hostapd[66387]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Dec 11 14:03:48.546012 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication
Dec 11 14:03:48.546074 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Dec 11 14:03:48.546112 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Dec 11 14:03:48.550602 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Dec 11 14:03:48.550641 osdx hostapd[66387]: eth2: RADIUS Authentication server 10.215.168.1:1812
Dec 11 14:03:48.550832 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:48.550894 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:48.550961 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Dec 11 14:03:48.946332 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:03:49.550987 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Dec 11 14:03:49.551027 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:03:49.551371 osdx hostapd[66387]: eth2: RADIUS Received 20 bytes from RADIUS server
Dec 11 14:03:49.551379 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.551384 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.551389 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Dec 11 14:03:49.551440 osdx hostapd[66387]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Dec 11 14:03:49.551443 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X
Dec 11 14:03:49.551448 osdx hostapd[66387]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Dec 11 14:03:49.551451 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started
Dec 11 14:03:49.551459 osdx hostapd[66387]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Dec 11 14:03:49.551483 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 71)
Dec 11 14:03:49.551817 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=71 len=10) from STA: EAP Response-Identity (1)
Dec 11 14:03:49.551830 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Dec 11 14:03:49.551894 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.551908 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:49.552140 osdx hostapd[66387]: eth2: RADIUS Received 80 bytes from RADIUS server
Dec 11 14:03:49.552146 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.552150 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.552168 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=72 len=22) from RADIUS server: EAP-Request-MD5 (4)
Dec 11 14:03:49.552175 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 72)
Dec 11 14:03:49.552357 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=72 len=6) from STA: EAP Response-unknown (3)
Dec 11 14:03:49.552397 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.552409 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:49.552596 osdx hostapd[66387]: eth2: RADIUS Received 64 bytes from RADIUS server
Dec 11 14:03:49.552603 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.552608 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.552632 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=73 len=6) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:49.552639 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 73)
Dec 11 14:03:49.552972 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=73 len=194) from STA: EAP Response-PEAP (25)
Dec 11 14:03:49.553012 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.553025 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:49.554046 osdx hostapd[66387]: eth2: RADIUS Received 1068 bytes from RADIUS server
Dec 11 14:03:49.554054 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.554057 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.554084 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=74 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:49.554091 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 74)
Dec 11 14:03:49.554280 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=74 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:03:49.554323 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.554337 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:49.554463 osdx hostapd[66387]: eth2: RADIUS Received 229 bytes from RADIUS server
Dec 11 14:03:49.554468 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.554473 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.554489 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=75 len=171) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:49.554495 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 75)
Dec 11 14:03:49.555941 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=75 len=103) from STA: EAP Response-PEAP (25)
Dec 11 14:03:49.555990 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.556004 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:49.556345 osdx hostapd[66387]: eth2: RADIUS Received 115 bytes from RADIUS server
Dec 11 14:03:49.556350 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.556356 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.556378 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=76 len=57) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:49.556385 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 76)
Dec 11 14:03:49.556634 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=76 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:03:49.556673 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.556685 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:49.556822 osdx hostapd[66387]: eth2: RADIUS Received 98 bytes from RADIUS server
Dec 11 14:03:49.556831 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.556834 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.556851 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=77 len=40) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:49.556856 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 77)
Dec 11 14:03:49.557022 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=77 len=41) from STA: EAP Response-PEAP (25)
Dec 11 14:03:49.557064 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.557077 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:49.557207 osdx hostapd[66387]: eth2: RADIUS Received 131 bytes from RADIUS server
Dec 11 14:03:49.557212 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.557215 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.557229 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=78 len=73) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:49.557234 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 78)
Dec 11 14:03:49.557466 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=78 len=95) from STA: EAP Response-PEAP (25)
Dec 11 14:03:49.557501 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.557514 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:49.557696 osdx hostapd[66387]: eth2: RADIUS Received 104 bytes from RADIUS server
Dec 11 14:03:49.557701 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:49.557705 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:49.557719 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=79 len=46) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:03:49.557725 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 79)
Dec 11 14:03:49.557921 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=79 len=46) from STA: EAP Response-PEAP (25)
Dec 11 14:03:49.557966 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:03:49.557980 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:03:50.558086 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Dec 11 14:03:50.558139 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:03:50.558397 osdx hostapd[66387]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:03:50.558406 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:50.558414 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:03:50.558487 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=79 len=4) from RADIUS server: EAP Failure
Dec 11 14:03:50.558530 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 79)
Dec 11 14:03:50.558550 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Dec 11 14:03:50.558567 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Dec 11 14:03:50.558572 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Dec 11 14:03:50.558581 osdx hostapd[66387]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:03:50.558586 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:03:50.558590 osdx hostapd[66387]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Dec 11 14:03:55.257791 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:03:59.515253 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:04:03.789718 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:04:08.058004 osdx OSDxCLI[48660]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Dec 11 14:04:10.569679 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Dec 11 14:04:10.569696 osdx hostapd[66387]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Dec 11 14:04:10.569739 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 98)
Dec 11 14:04:10.574898 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=98 len=10) from STA: EAP Response-Identity (1)
Dec 11 14:04:10.574911 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Dec 11 14:04:10.574986 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.575071 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:10.575521 osdx hostapd[66387]: eth2: RADIUS Received 80 bytes from RADIUS server
Dec 11 14:04:10.575529 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:10.575535 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:10.575569 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=99 len=22) from RADIUS server: EAP-Request-MD5 (4)
Dec 11 14:04:10.575577 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 99)
Dec 11 14:04:10.575887 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=99 len=6) from STA: EAP Response-unknown (3)
Dec 11 14:04:10.575934 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.575949 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:10.576322 osdx hostapd[66387]: eth2: RADIUS Received 64 bytes from RADIUS server
Dec 11 14:04:10.576329 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:10.576333 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:10.576351 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=100 len=6) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:04:10.576357 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 100)
Dec 11 14:04:10.576725 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=100 len=194) from STA: EAP Response-PEAP (25)
Dec 11 14:04:10.576772 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.576815 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:10.578054 osdx hostapd[66387]: eth2: RADIUS Received 1068 bytes from RADIUS server
Dec 11 14:04:10.578062 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:10.578066 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:10.578090 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=101 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:04:10.578098 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 101)
Dec 11 14:04:10.578378 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=101 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:04:10.578423 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.578465 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:10.578650 osdx hostapd[66387]: eth2: RADIUS Received 229 bytes from RADIUS server
Dec 11 14:04:10.578660 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:10.578664 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:10.578681 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=102 len=171) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:04:10.578688 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 102)
Dec 11 14:04:10.580913 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=102 len=103) from STA: EAP Response-PEAP (25)
Dec 11 14:04:10.580968 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.580983 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:10.581411 osdx hostapd[66387]: eth2: RADIUS Received 115 bytes from RADIUS server
Dec 11 14:04:10.581418 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:10.581422 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:10.581441 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=103 len=57) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:04:10.581448 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 103)
Dec 11 14:04:10.581803 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=103 len=6) from STA: EAP Response-PEAP (25)
Dec 11 14:04:10.581917 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.581930 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:10.582168 osdx hostapd[66387]: eth2: RADIUS Received 98 bytes from RADIUS server
Dec 11 14:04:10.582175 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:10.582179 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:10.582197 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=104 len=40) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:04:10.582204 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 104)
Dec 11 14:04:10.582498 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=104 len=41) from STA: EAP Response-PEAP (25)
Dec 11 14:04:10.582539 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.582550 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:10.582826 osdx hostapd[66387]: eth2: RADIUS Received 131 bytes from RADIUS server
Dec 11 14:04:10.582833 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:10.582866 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:10.582884 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=105 len=73) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:04:10.582892 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 105)
Dec 11 14:04:10.583206 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=105 len=95) from STA: EAP Response-PEAP (25)
Dec 11 14:04:10.583247 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.583258 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:10.583499 osdx hostapd[66387]: eth2: RADIUS Received 104 bytes from RADIUS server
Dec 11 14:04:10.583503 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:10.583507 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:10.583525 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=106 len=46) from RADIUS server: EAP-Request-PEAP (25)
Dec 11 14:04:10.583531 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 106)
Dec 11 14:04:10.583873 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=106 len=46) from STA: EAP Response-PEAP (25)
Dec 11 14:04:10.583911 osdx hostapd[66387]: eth2: RADIUS Sending RADIUS message to authentication server
Dec 11 14:04:10.583921 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Dec 11 14:04:11.584024 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Dec 11 14:04:11.584070 osdx hostapd[66387]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Dec 11 14:04:11.584270 osdx hostapd[66387]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:04:11.584275 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:11.584279 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Dec 11 14:04:11.584334 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=106 len=4) from RADIUS server: EAP Failure
Dec 11 14:04:11.584899 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 106)
Dec 11 14:04:11.584920 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Dec 11 14:04:11.584925 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Dec 11 14:04:11.584932 osdx hostapd[66387]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Dec 11 14:04:11.584939 osdx hostapd[66387]: eth2: RADIUS Received 44 bytes from RADIUS server
Dec 11 14:04:11.584942 osdx hostapd[66387]: eth2: RADIUS Received RADIUS message
Dec 11 14:04:11.584946 osdx hostapd[66387]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet

---