Quiet Period
This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.
Test Quiet Period In 802.1X Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19R1Oc4JzD6Vb4WhfdzACyyIoZjFzDOiHHlQPWqs7nWIV/CblJFV3ynRb+NqVFg1xie5kWK+LjdKg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.203 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.203/0.203/0.203/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+gdgSgzPGxFBJ5LKQ/YPXI78/ZR+cSxBU= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Jan 27 15:13:31.818167 osdx hostapd[609618]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jan 27 15:13:31.818501 osdx hostapd[609618]: connect[radius]: Network is unreachable Jan 27 15:13:31.818185 osdx hostapd[609618]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jan 27 15:13:31.818233 osdx hostapd[609618]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2 Jan 27 15:13:31.818237 osdx hostapd[609618]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jan 27 15:13:31.833988 osdx hostapd[609618]: Discovery mode enabled on eth2 Jan 27 15:13:31.834078 osdx hostapd[609618]: eth2: interface state UNINITIALIZED->ENABLED Jan 27 15:13:31.834078 osdx hostapd[609618]: eth2: AP-ENABLED Jan 27 15:13:33.249886 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:35.081127 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Jan 27 15:13:35.081140 osdx hostapd[609619]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jan 27 15:13:35.090115 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Jan 27 15:13:35.090139 osdx hostapd[609619]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jan 27 15:13:35.090153 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Jan 27 15:13:35.090162 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Jan 27 15:13:35.090173 osdx hostapd[609619]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jan 27 15:13:35.090192 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 72) Jan 27 15:13:35.090511 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=72 len=10) from STA: EAP Response-Identity (1) Jan 27 15:13:35.090522 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Jan 27 15:13:35.090542 osdx hostapd[609619]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jan 27 15:13:35.092445 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.092472 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.092716 osdx hostapd[609619]: eth2: RADIUS Received 80 bytes from RADIUS server Jan 27 15:13:35.092722 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:35.092735 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:35.092755 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=73 len=22) from RADIUS server: EAP-Request-MD5 (4) Jan 27 15:13:35.092762 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 73) Jan 27 15:13:35.092970 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=73 len=6) from STA: EAP Response-unknown (3) Jan 27 15:13:35.093012 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.093024 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.093192 osdx hostapd[609619]: eth2: RADIUS Received 64 bytes from RADIUS server Jan 27 15:13:35.093197 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:35.093201 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:35.093216 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=74 len=6) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:35.093222 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 74) Jan 27 15:13:35.093535 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=74 len=194) from STA: EAP Response-PEAP (25) Jan 27 15:13:35.093570 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.093579 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.094540 osdx hostapd[609619]: eth2: RADIUS Received 1068 bytes from RADIUS server Jan 27 15:13:35.094547 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:35.094551 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:35.094578 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=75 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:35.094585 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 75) Jan 27 15:13:35.094747 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=75 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:13:35.094789 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.094806 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.094903 osdx hostapd[609619]: eth2: RADIUS Received 229 bytes from RADIUS server Jan 27 15:13:35.094908 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:35.094912 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:35.094932 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=76 len=171) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:35.094938 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 76) Jan 27 15:13:35.096269 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=76 len=103) from STA: EAP Response-PEAP (25) Jan 27 15:13:35.096305 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.096316 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.096604 osdx hostapd[609619]: eth2: RADIUS Received 115 bytes from RADIUS server Jan 27 15:13:35.096609 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:35.096612 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:35.096629 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=77 len=57) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:35.096635 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 77) Jan 27 15:13:35.096855 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=77 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:13:35.096896 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.096907 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.097046 osdx hostapd[609619]: eth2: RADIUS Received 98 bytes from RADIUS server Jan 27 15:13:35.097051 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:35.097055 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:35.097071 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=78 len=40) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:35.097077 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 78) Jan 27 15:13:35.097226 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=78 len=41) from STA: EAP Response-PEAP (25) Jan 27 15:13:35.097258 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.097268 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.097409 osdx hostapd[609619]: eth2: RADIUS Received 131 bytes from RADIUS server Jan 27 15:13:35.097414 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:35.097417 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:35.097429 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=79 len=73) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:35.097435 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 79) Jan 27 15:13:35.097640 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=79 len=95) from STA: EAP Response-PEAP (25) Jan 27 15:13:35.097672 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.097681 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.097860 osdx hostapd[609619]: eth2: RADIUS Received 104 bytes from RADIUS server Jan 27 15:13:35.097865 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:35.097868 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:35.097882 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=80 len=46) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:35.097888 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 80) Jan 27 15:13:35.098069 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=80 len=46) from STA: EAP Response-PEAP (25) Jan 27 15:13:35.098101 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:35.098111 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:35.384236 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:36.098194 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) Jan 27 15:13:36.098227 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jan 27 15:13:36.098388 osdx hostapd[609619]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:13:36.098393 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:36.098397 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:36.098448 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=80 len=4) from RADIUS server: EAP Failure Jan 27 15:13:36.098471 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 80) Jan 27 15:13:36.098486 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Jan 27 15:13:36.098491 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jan 27 15:13:36.098494 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jan 27 15:13:36.098499 osdx hostapd[609619]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:13:36.098503 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:36.098506 osdx hostapd[609619]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Jan 27 15:13:37.825870 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:39.928528 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:42.003147 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:44.071015 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:46.159577 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:48.238033 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:50.319559 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:52.392946 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:54.509048 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:13:56.108975 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Jan 27 15:13:56.108989 osdx hostapd[609619]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jan 27 15:13:56.109029 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 239) Jan 27 15:13:56.109470 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=239 len=10) from STA: EAP Response-Identity (1) Jan 27 15:13:56.109482 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Jan 27 15:13:56.109559 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.109583 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:56.109867 osdx hostapd[609619]: eth2: RADIUS Received 80 bytes from RADIUS server Jan 27 15:13:56.109873 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:56.109877 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:56.109897 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=240 len=22) from RADIUS server: EAP-Request-MD5 (4) Jan 27 15:13:56.109903 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 240) Jan 27 15:13:56.110171 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=240 len=6) from STA: EAP Response-unknown (3) Jan 27 15:13:56.110226 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.110240 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:56.110443 osdx hostapd[609619]: eth2: RADIUS Received 64 bytes from RADIUS server Jan 27 15:13:56.110448 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:56.110451 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:56.110467 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=241 len=6) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:56.110474 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 241) Jan 27 15:13:56.110770 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=241 len=194) from STA: EAP Response-PEAP (25) Jan 27 15:13:56.110805 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.110814 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:56.111812 osdx hostapd[609619]: eth2: RADIUS Received 1068 bytes from RADIUS server Jan 27 15:13:56.111820 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:56.111824 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:56.111851 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=242 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:56.111858 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 242) Jan 27 15:13:56.112056 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=242 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:13:56.112104 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.112119 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:56.112260 osdx hostapd[609619]: eth2: RADIUS Received 229 bytes from RADIUS server Jan 27 15:13:56.112265 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:56.112268 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:56.112282 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=243 len=171) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:56.112290 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 243) Jan 27 15:13:56.113780 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=243 len=103) from STA: EAP Response-PEAP (25) Jan 27 15:13:56.113832 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.113853 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:56.114174 osdx hostapd[609619]: eth2: RADIUS Received 115 bytes from RADIUS server Jan 27 15:13:56.114180 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:56.114183 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:56.114200 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=244 len=57) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:56.114206 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 244) Jan 27 15:13:56.114448 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=244 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:13:56.114487 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.114503 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:56.114674 osdx hostapd[609619]: eth2: RADIUS Received 98 bytes from RADIUS server Jan 27 15:13:56.114680 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:56.114685 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:56.114700 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=245 len=40) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:56.114707 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 245) Jan 27 15:13:56.114960 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=245 len=41) from STA: EAP Response-PEAP (25) Jan 27 15:13:56.115018 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.115038 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:56.115220 osdx hostapd[609619]: eth2: RADIUS Received 131 bytes from RADIUS server Jan 27 15:13:56.115226 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:56.115231 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:56.115248 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=246 len=73) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:56.115255 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 246) Jan 27 15:13:56.115536 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=246 len=95) from STA: EAP Response-PEAP (25) Jan 27 15:13:56.115574 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.115584 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:13:56.115788 osdx hostapd[609619]: eth2: RADIUS Received 104 bytes from RADIUS server Jan 27 15:13:56.115795 osdx hostapd[609619]: eth2: RADIUS Received RADIUS message Jan 27 15:13:56.115800 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:13:56.115817 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=247 len=46) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:13:56.115824 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 247) Jan 27 15:13:56.116026 osdx hostapd[609619]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=247 len=46) from STA: EAP Response-PEAP (25) Jan 27 15:13:56.116076 osdx hostapd[609619]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:13:56.116092 osdx hostapd[609619]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB Mode
Description
This scenario shows how to configure the quiet period in a device with MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+Co0EBX8sS2nqF9NnbqhyFxskfYwk/D+C7VHl/OMh1CDgPGDVD9So51K3hmgr/JEovN1UpSd/wcQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.196 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.196/0.196/0.196/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Jan 27 15:14:04.309735 osdx hostapd[610186]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jan 27 15:14:04.309749 osdx hostapd[610186]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jan 27 15:14:04.309968 osdx hostapd[610186]: connect[radius]: Network is unreachable Jan 27 15:14:04.309788 osdx hostapd[610186]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5 Jan 27 15:14:04.309791 osdx hostapd[610186]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jan 27 15:14:04.325606 osdx hostapd[610186]: Discovery mode enabled on eth2 Jan 27 15:14:04.325655 osdx hostapd[610186]: eth2: interface state UNINITIALIZED->ENABLED Jan 27 15:14:04.325678 osdx hostapd[610186]: eth2: AP-ENABLED Jan 27 15:14:07.574666 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:14:09.328659 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication Jan 27 15:14:09.328704 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jan 27 15:14:09.328714 osdx hostapd[610187]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jan 27 15:14:09.341667 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication Jan 27 15:14:09.341701 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jan 27 15:14:09.341725 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jan 27 15:14:09.343930 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jan 27 15:14:09.343942 osdx hostapd[610187]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jan 27 15:14:09.344023 osdx hostapd[610187]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:09.344054 osdx hostapd[610187]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:10.344156 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jan 27 15:14:10.344193 osdx hostapd[610187]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jan 27 15:14:10.344384 osdx hostapd[610187]: eth2: RADIUS Received 20 bytes from RADIUS server Jan 27 15:14:10.344388 osdx hostapd[610187]: eth2: RADIUS Received RADIUS message Jan 27 15:14:10.344392 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:10.344397 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jan 27 15:14:10.344450 osdx hostapd[610187]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jan 27 15:14:10.344453 osdx hostapd[610187]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jan 27 15:14:10.344457 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Jan 27 15:14:10.344464 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Jan 27 15:14:10.344472 osdx hostapd[610187]: eth2: RADIUS Received 20 bytes from RADIUS server Jan 27 15:14:10.344475 osdx hostapd[610187]: eth2: RADIUS Received RADIUS message Jan 27 15:14:10.344479 osdx hostapd[610187]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Jan 27 15:14:13.822212 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:14:17.985797 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:14:22.165134 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:14:26.319505 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:14:30.344595 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Jan 27 15:14:30.344608 osdx hostapd[610187]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jan 27 15:14:30.344611 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB Jan 27 15:14:30.344615 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jan 27 15:14:30.344677 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jan 27 15:14:30.344710 osdx hostapd[610187]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jan 27 15:14:30.344741 osdx hostapd[610187]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:30.344770 osdx hostapd[610187]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB-Fallback Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1X-MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode 802.1x-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19N1/2fu7C5m6h77LQUmtbOJJCq25VODuZOVTh2I6XK9krms0kqtORdjaw87E9LVhKJbwZX0Va14Q== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.246 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.246/0.246/0.246/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX18tvcd/SOdLeRabIT0LME8SRil4UFxykWY= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Jan 27 15:14:37.560244 osdx hostapd[610724]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jan 27 15:14:37.560256 osdx hostapd[610724]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jan 27 15:14:37.560465 osdx hostapd[610724]: connect[radius]: Network is unreachable Jan 27 15:14:37.560291 osdx hostapd[610724]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Jan 27 15:14:37.560293 osdx hostapd[610724]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jan 27 15:14:37.584118 osdx hostapd[610724]: Discovery mode enabled on eth2 Jan 27 15:14:37.584218 osdx hostapd[610724]: eth2: interface state UNINITIALIZED->ENABLED Jan 27 15:14:37.584218 osdx hostapd[610724]: eth2: AP-ENABLED Jan 27 15:14:40.927248 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jan 27 15:14:40.927260 osdx hostapd[610725]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jan 27 15:14:40.936120 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication Jan 27 15:14:40.936142 osdx hostapd[610725]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jan 27 15:14:40.936146 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response Jan 27 15:14:40.936148 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response Jan 27 15:14:40.936157 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response Jan 27 15:14:40.936160 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Jan 27 15:14:40.936167 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jan 27 15:14:40.936177 osdx hostapd[610725]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jan 27 15:14:40.936198 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 10) Jan 27 15:14:40.936466 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=10 len=10) from STA: EAP Response-Identity (1) Jan 27 15:14:40.936474 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jan 27 15:14:40.936495 osdx hostapd[610725]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jan 27 15:14:40.938195 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.938223 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:40.938470 osdx hostapd[610725]: eth2: RADIUS Received 80 bytes from RADIUS server Jan 27 15:14:40.938475 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:40.938479 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:40.938498 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=11 len=22) from RADIUS server: EAP-Request-MD5 (4) Jan 27 15:14:40.938505 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 11) Jan 27 15:14:40.938666 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=11 len=6) from STA: EAP Response-unknown (3) Jan 27 15:14:40.938705 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.938719 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:40.938882 osdx hostapd[610725]: eth2: RADIUS Received 64 bytes from RADIUS server Jan 27 15:14:40.938887 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:40.938891 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:40.938905 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=12 len=6) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:14:40.938911 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 12) Jan 27 15:14:40.939207 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=12 len=194) from STA: EAP Response-PEAP (25) Jan 27 15:14:40.939243 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.939255 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:40.940221 osdx hostapd[610725]: eth2: RADIUS Received 1068 bytes from RADIUS server Jan 27 15:14:40.940228 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:40.940231 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:40.940254 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=13 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:14:40.940260 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 13) Jan 27 15:14:40.940411 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=13 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:14:40.940446 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.940458 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:40.940566 osdx hostapd[610725]: eth2: RADIUS Received 229 bytes from RADIUS server Jan 27 15:14:40.940571 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:40.940574 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:40.940594 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=14 len=171) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:14:40.940605 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 14) Jan 27 15:14:40.941883 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=14 len=103) from STA: EAP Response-PEAP (25) Jan 27 15:14:40.941917 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.941928 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:40.942229 osdx hostapd[610725]: eth2: RADIUS Received 115 bytes from RADIUS server Jan 27 15:14:40.942235 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:40.942239 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:40.942263 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=15 len=57) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:14:40.942269 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 15) Jan 27 15:14:40.942497 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=15 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:14:40.942533 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.942545 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:40.942655 osdx hostapd[610725]: eth2: RADIUS Received 98 bytes from RADIUS server Jan 27 15:14:40.942660 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:40.942663 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:40.942674 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=16 len=40) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:14:40.942680 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 16) Jan 27 15:14:40.942849 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=16 len=41) from STA: EAP Response-PEAP (25) Jan 27 15:14:40.942888 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.942901 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:40.943064 osdx hostapd[610725]: eth2: RADIUS Received 131 bytes from RADIUS server Jan 27 15:14:40.943070 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:40.943073 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:40.943090 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=17 len=73) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:14:40.943096 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 17) Jan 27 15:14:40.943324 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=17 len=95) from STA: EAP Response-PEAP (25) Jan 27 15:14:40.943356 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.943369 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:40.943542 osdx hostapd[610725]: eth2: RADIUS Received 104 bytes from RADIUS server Jan 27 15:14:40.943547 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:40.943550 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:40.943565 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=18 len=46) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:14:40.943571 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 18) Jan 27 15:14:40.943791 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=18 len=46) from STA: EAP Response-PEAP (25) Jan 27 15:14:40.943832 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:40.943845 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:41.303625 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:14:41.943932 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Jan 27 15:14:41.943962 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jan 27 15:14:41.944140 osdx hostapd[610725]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:14:41.944144 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:41.944149 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:41.944189 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=18 len=4) from RADIUS server: EAP Failure Jan 27 15:14:41.944212 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 18) Jan 27 15:14:41.944224 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jan 27 15:14:41.944227 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jan 27 15:14:41.944230 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Jan 27 15:14:41.944233 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jan 27 15:14:41.944258 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jan 27 15:14:41.944264 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jan 27 15:14:41.944274 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:14:41.944283 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:14:41.944293 osdx hostapd[610725]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:14:41.944296 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:41.944298 osdx hostapd[610725]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet Jan 27 15:14:42.944400 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jan 27 15:14:42.944441 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jan 27 15:14:42.944659 osdx hostapd[610725]: eth2: RADIUS Received 20 bytes from RADIUS server Jan 27 15:14:42.944666 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:42.944671 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:14:42.944676 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jan 27 15:14:42.944740 osdx hostapd[610725]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jan 27 15:14:42.944744 osdx hostapd[610725]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jan 27 15:14:42.944748 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Jan 27 15:14:42.944752 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Jan 27 15:14:42.944763 osdx hostapd[610725]: eth2: RADIUS Received 20 bytes from RADIUS server Jan 27 15:14:42.944766 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:14:42.944769 osdx hostapd[610725]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Jan 27 15:14:47.594002 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:14:51.754326 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:14:55.926608 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:15:00.096282 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:15:02.945077 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Jan 27 15:15:02.945087 osdx hostapd[610725]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jan 27 15:15:02.945090 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X Jan 27 15:15:02.945093 osdx hostapd[610725]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jan 27 15:15:02.945101 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jan 27 15:15:02.945112 osdx hostapd[610725]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jan 27 15:15:02.945157 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 170) Jan 27 15:15:02.945587 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=170 len=10) from STA: EAP Response-Identity (1) Jan 27 15:15:02.945610 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jan 27 15:15:02.945682 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.945708 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:02.945981 osdx hostapd[610725]: eth2: RADIUS Received 80 bytes from RADIUS server Jan 27 15:15:02.945985 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:02.945989 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:02.946011 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=171 len=22) from RADIUS server: EAP-Request-MD5 (4) Jan 27 15:15:02.946031 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 171) Jan 27 15:15:02.946255 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=171 len=6) from STA: EAP Response-unknown (3) Jan 27 15:15:02.946304 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.946351 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:02.946512 osdx hostapd[610725]: eth2: RADIUS Received 64 bytes from RADIUS server Jan 27 15:15:02.946517 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:02.946520 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:02.946536 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=172 len=6) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:02.946542 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 172) Jan 27 15:15:02.946839 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=172 len=194) from STA: EAP Response-PEAP (25) Jan 27 15:15:02.946880 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.946893 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:02.947937 osdx hostapd[610725]: eth2: RADIUS Received 1068 bytes from RADIUS server Jan 27 15:15:02.947944 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:02.947948 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:02.947982 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=173 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:02.947992 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 173) Jan 27 15:15:02.948186 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=173 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:15:02.948248 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.948262 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:02.948420 osdx hostapd[610725]: eth2: RADIUS Received 229 bytes from RADIUS server Jan 27 15:15:02.948426 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:02.948431 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:02.948449 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=174 len=171) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:02.948457 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 174) Jan 27 15:15:02.949856 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=174 len=103) from STA: EAP Response-PEAP (25) Jan 27 15:15:02.949900 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.949914 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:02.950220 osdx hostapd[610725]: eth2: RADIUS Received 115 bytes from RADIUS server Jan 27 15:15:02.950233 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:02.950237 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:02.950254 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=175 len=57) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:02.950260 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 175) Jan 27 15:15:02.950498 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=175 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:15:02.950546 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.950559 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:02.950743 osdx hostapd[610725]: eth2: RADIUS Received 98 bytes from RADIUS server Jan 27 15:15:02.950750 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:02.950755 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:02.950777 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=176 len=40) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:02.950785 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 176) Jan 27 15:15:02.950985 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=176 len=41) from STA: EAP Response-PEAP (25) Jan 27 15:15:02.951031 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.951045 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:02.951243 osdx hostapd[610725]: eth2: RADIUS Received 131 bytes from RADIUS server Jan 27 15:15:02.951250 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:02.951254 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:02.951277 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=177 len=73) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:02.951284 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 177) Jan 27 15:15:02.951517 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=177 len=95) from STA: EAP Response-PEAP (25) Jan 27 15:15:02.951563 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.951576 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:02.951749 osdx hostapd[610725]: eth2: RADIUS Received 104 bytes from RADIUS server Jan 27 15:15:02.951755 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:02.951759 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:02.951775 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=178 len=46) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:02.951782 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 178) Jan 27 15:15:02.951963 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=178 len=46) from STA: EAP Response-PEAP (25) Jan 27 15:15:02.952030 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:02.952053 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:03.953007 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Jan 27 15:15:03.953038 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jan 27 15:15:03.953047 osdx hostapd[610725]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:15:03.953050 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:03.953054 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:03.953103 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=178 len=4) from RADIUS server: EAP Failure Jan 27 15:15:03.953133 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 178) Jan 27 15:15:03.953146 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jan 27 15:15:03.953152 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jan 27 15:15:03.953156 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Jan 27 15:15:03.953162 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jan 27 15:15:03.953187 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jan 27 15:15:03.953194 osdx hostapd[610725]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jan 27 15:15:03.953213 osdx hostapd[610725]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:03.953220 osdx hostapd[610725]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:03.953234 osdx hostapd[610725]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:15:03.953236 osdx hostapd[610725]: eth2: RADIUS Received RADIUS message Jan 27 15:15:03.953239 osdx hostapd[610725]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Test Quiet Period In MAB-First Mode
Description
This scenario shows how to configure the quiet period in a device with MAB-802.1X authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode MAB-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+9qwpSOnvYdPkrJYShRjDYhvdzuRnNsQ7AxSg0q73KOaY6kOfa8qAVqtDaLumIBGBJUJQXqJlMQA== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.192 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.192/0.192/0.192/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1/w1dw9hUBQtLMVSykhwvBej9fupjxJ83c= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Jan 27 15:15:11.273558 osdx hostapd[611275]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jan 27 15:15:11.273573 osdx hostapd[611275]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jan 27 15:15:11.273814 osdx hostapd[611275]: connect[radius]: Network is unreachable Jan 27 15:15:11.273626 osdx hostapd[611275]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Jan 27 15:15:11.273630 osdx hostapd[611275]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jan 27 15:15:11.297333 osdx hostapd[611275]: Discovery mode enabled on eth2 Jan 27 15:15:11.297401 osdx hostapd[611275]: eth2: interface state UNINITIALIZED->ENABLED Jan 27 15:15:11.297401 osdx hostapd[611275]: eth2: AP-ENABLED Jan 27 15:15:14.560519 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jan 27 15:15:14.560533 osdx hostapd[611276]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jan 27 15:15:14.581397 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication Jan 27 15:15:14.581434 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jan 27 15:15:14.581453 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jan 27 15:15:14.583789 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jan 27 15:15:14.583804 osdx hostapd[611276]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jan 27 15:15:14.583893 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:14.583926 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:14.583957 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Jan 27 15:15:14.796234 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:15:15.584006 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jan 27 15:15:15.584035 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jan 27 15:15:15.584211 osdx hostapd[611276]: eth2: RADIUS Received 20 bytes from RADIUS server Jan 27 15:15:15.584214 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.584218 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.584223 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jan 27 15:15:15.584281 osdx hostapd[611276]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jan 27 15:15:15.584284 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X Jan 27 15:15:15.584288 osdx hostapd[611276]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jan 27 15:15:15.584291 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started Jan 27 15:15:15.584298 osdx hostapd[611276]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jan 27 15:15:15.584314 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 24) Jan 27 15:15:15.584328 osdx hostapd[611276]: eth2: RADIUS Received 20 bytes from RADIUS server Jan 27 15:15:15.584331 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.584333 osdx hostapd[611276]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet Jan 27 15:15:15.584624 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=24 len=10) from STA: EAP Response-Identity (1) Jan 27 15:15:15.584637 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jan 27 15:15:15.584694 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.584706 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:15.584904 osdx hostapd[611276]: eth2: RADIUS Received 80 bytes from RADIUS server Jan 27 15:15:15.584910 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.584913 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.584934 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=25 len=22) from RADIUS server: EAP-Request-MD5 (4) Jan 27 15:15:15.584939 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 25) Jan 27 15:15:15.585132 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=25 len=6) from STA: EAP Response-unknown (3) Jan 27 15:15:15.585176 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.585188 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:15.585337 osdx hostapd[611276]: eth2: RADIUS Received 64 bytes from RADIUS server Jan 27 15:15:15.585342 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.585345 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.585358 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=26 len=6) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:15.585363 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 26) Jan 27 15:15:15.585639 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=26 len=194) from STA: EAP Response-PEAP (25) Jan 27 15:15:15.585666 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.585674 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:15.586675 osdx hostapd[611276]: eth2: RADIUS Received 1068 bytes from RADIUS server Jan 27 15:15:15.586682 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.586686 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.586710 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=27 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:15.586717 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 27) Jan 27 15:15:15.586888 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=27 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:15:15.586932 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.586945 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:15.587109 osdx hostapd[611276]: eth2: RADIUS Received 229 bytes from RADIUS server Jan 27 15:15:15.587113 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.587116 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.587129 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=28 len=171) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:15.587134 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 28) Jan 27 15:15:15.588397 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=28 len=103) from STA: EAP Response-PEAP (25) Jan 27 15:15:15.588431 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.588441 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:15.588742 osdx hostapd[611276]: eth2: RADIUS Received 115 bytes from RADIUS server Jan 27 15:15:15.588746 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.588749 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.588761 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=29 len=57) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:15.588766 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 29) Jan 27 15:15:15.588974 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=29 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:15:15.589005 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.589013 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:15.589155 osdx hostapd[611276]: eth2: RADIUS Received 98 bytes from RADIUS server Jan 27 15:15:15.589160 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.589163 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.589177 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=30 len=40) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:15.589183 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 30) Jan 27 15:15:15.589330 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=30 len=41) from STA: EAP Response-PEAP (25) Jan 27 15:15:15.589359 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.589372 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:15.589512 osdx hostapd[611276]: eth2: RADIUS Received 131 bytes from RADIUS server Jan 27 15:15:15.589516 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.589519 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.589530 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=31 len=73) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:15.589535 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 31) Jan 27 15:15:15.589782 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=31 len=95) from STA: EAP Response-PEAP (25) Jan 27 15:15:15.589827 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.589840 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:15.590015 osdx hostapd[611276]: eth2: RADIUS Received 104 bytes from RADIUS server Jan 27 15:15:15.590020 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:15.590023 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:15.590038 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=32 len=46) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:15.590044 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 32) Jan 27 15:15:15.590199 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=32 len=46) from STA: EAP Response-PEAP (25) Jan 27 15:15:15.590242 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:15.590255 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:16.590313 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Jan 27 15:15:16.590354 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jan 27 15:15:16.590537 osdx hostapd[611276]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:15:16.590542 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:16.590547 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:16.590601 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=32 len=4) from RADIUS server: EAP Failure Jan 27 15:15:16.590631 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 32) Jan 27 15:15:16.590645 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jan 27 15:15:16.590660 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jan 27 15:15:16.590664 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jan 27 15:15:16.590670 osdx hostapd[611276]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:15:16.590673 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:16.590676 osdx hostapd[611276]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Jan 27 15:15:21.041437 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:15:25.239522 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:15:29.419178 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:15:33.585900 osdx OSDxCLI[421648]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jan 27 15:15:36.601336 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Jan 27 15:15:36.601351 osdx hostapd[611276]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jan 27 15:15:36.601397 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 97) Jan 27 15:15:36.601791 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=97 len=10) from STA: EAP Response-Identity (1) Jan 27 15:15:36.601804 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jan 27 15:15:36.601897 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.601922 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:36.602166 osdx hostapd[611276]: eth2: RADIUS Received 80 bytes from RADIUS server Jan 27 15:15:36.602173 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:36.602178 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:36.602200 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=98 len=22) from RADIUS server: EAP-Request-MD5 (4) Jan 27 15:15:36.602207 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 98) Jan 27 15:15:36.602419 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=98 len=6) from STA: EAP Response-unknown (3) Jan 27 15:15:36.602469 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.602481 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:36.602644 osdx hostapd[611276]: eth2: RADIUS Received 64 bytes from RADIUS server Jan 27 15:15:36.602649 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:36.602652 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:36.602664 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=99 len=6) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:36.602670 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 99) Jan 27 15:15:36.602940 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=99 len=194) from STA: EAP Response-PEAP (25) Jan 27 15:15:36.602978 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.602987 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:36.603938 osdx hostapd[611276]: eth2: RADIUS Received 1068 bytes from RADIUS server Jan 27 15:15:36.603944 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:36.603947 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:36.603964 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=100 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:36.603969 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 100) Jan 27 15:15:36.604117 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=100 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:15:36.604170 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.604183 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:36.604315 osdx hostapd[611276]: eth2: RADIUS Received 229 bytes from RADIUS server Jan 27 15:15:36.604322 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:36.604326 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:36.604342 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=101 len=171) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:36.604349 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 101) Jan 27 15:15:36.605731 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=101 len=103) from STA: EAP Response-PEAP (25) Jan 27 15:15:36.605786 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.605803 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:36.606222 osdx hostapd[611276]: eth2: RADIUS Received 115 bytes from RADIUS server Jan 27 15:15:36.606229 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:36.606232 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:36.606252 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=102 len=57) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:36.606258 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 102) Jan 27 15:15:36.606533 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=102 len=6) from STA: EAP Response-PEAP (25) Jan 27 15:15:36.606575 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.606589 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:36.606732 osdx hostapd[611276]: eth2: RADIUS Received 98 bytes from RADIUS server Jan 27 15:15:36.606736 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:36.606740 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:36.606756 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=103 len=40) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:36.606763 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 103) Jan 27 15:15:36.606952 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=103 len=41) from STA: EAP Response-PEAP (25) Jan 27 15:15:36.607005 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.607020 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:36.607202 osdx hostapd[611276]: eth2: RADIUS Received 131 bytes from RADIUS server Jan 27 15:15:36.607208 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:36.607213 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:36.607230 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=104 len=73) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:36.607242 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 104) Jan 27 15:15:36.607507 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=104 len=95) from STA: EAP Response-PEAP (25) Jan 27 15:15:36.607543 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.607555 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:36.607758 osdx hostapd[611276]: eth2: RADIUS Received 104 bytes from RADIUS server Jan 27 15:15:36.607765 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:36.607769 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:36.607786 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=105 len=46) from RADIUS server: EAP-Request-PEAP (25) Jan 27 15:15:36.607793 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 105) Jan 27 15:15:36.607961 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=105 len=46) from STA: EAP Response-PEAP (25) Jan 27 15:15:36.608000 osdx hostapd[611276]: eth2: RADIUS Sending RADIUS message to authentication server Jan 27 15:15:36.608013 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jan 27 15:15:37.608103 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Jan 27 15:15:37.608134 osdx hostapd[611276]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jan 27 15:15:37.608313 osdx hostapd[611276]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:15:37.608318 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:37.608322 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jan 27 15:15:37.608365 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=105 len=4) from RADIUS server: EAP Failure Jan 27 15:15:37.608392 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 105) Jan 27 15:15:37.608406 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jan 27 15:15:37.608410 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jan 27 15:15:37.608414 osdx hostapd[611276]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jan 27 15:15:37.608424 osdx hostapd[611276]: eth2: RADIUS Received 44 bytes from RADIUS server Jan 27 15:15:37.608427 osdx hostapd[611276]: eth2: RADIUS Received RADIUS message Jan 27 15:15:37.608430 osdx hostapd[611276]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet