Only 802.1X
This scenario shows how to configure the only-802.1x
authentication mode.
Test Successful 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 uses the correct username and password.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/i/8xcoht2dft70ZnB1Vy+DT2RgJIq+g4VBHlIh6yV7MRC8NwusTgCCq/VzI6JrTvKrb0Kg5ZOsQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.223 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.223/0.223/0.223/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+1wJEYhSgRbdcbERHLOF2VcJYB7jqv+9I= set interfaces ethernet eth2 supplicant username testing set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 supplicant show status at DUT1 and check if output contains the following tokens:
AuthorizedShow output
--------------------------------------------------- Field Value --------------------------------------------------- EAP State SUCCESS EAP TLS Cipher ECDHE-RSA-AES256-GCM-SHA384 EAP TLS Version TLSv1.2 PAE State AUTHENTICATED Supplicant Port Status Authorized WPA State COMPLETED
Step 5: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+AuthorizedShow output
------------------------------- Field Value ------------------------------- EAPoL Frames (Rx) 11 EAPoL Frames (Tx) 11 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Authorized Req Frames (Rx) 9 Req ID Frames (Rx) 1 Resp Frames (Tx) 10 Start Frames (Tx) 1
Step 6: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
Authentication Successes\s+1 Authentication Mode\s+802\.1XShow output
--------------------------------------------- Field Value --------------------------------------------- Access Challenges 9 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode 802.1X Authentication Status Authorized (802.1X) Authentication Successes 1 EAPoL frames (Rx) 11 EAPoL frames (Tx) 11 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name testing
Step 7: Ping IP address 192.168.100.1 from DUT1:
admin@DUT1$ ping 192.168.100.1 count 1 size 56 timeout 1Show output
PING 192.168.100.1 (192.168.100.1) 56(84) bytes of data. 64 bytes from 192.168.100.1: icmp_seq=1 ttl=64 time=0.353 ms --- 192.168.100.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.353/0.353/0.353/0.000 ms
Step 8: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: authenticated - EAP type: 25 (PEAP)Show output
Feb 12 20:09:28.540660 osdx hostapd[469367]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 12 20:09:28.540674 osdx hostapd[469367]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:09:28.540957 osdx hostapd[469367]: connect[radius]: Network is unreachable Feb 12 20:09:28.540717 osdx hostapd[469367]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Feb 12 20:09:28.540721 osdx hostapd[469367]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 12 20:09:28.568526 osdx hostapd[469367]: Discovery mode enabled on eth2 Feb 12 20:09:28.568624 osdx hostapd[469367]: eth2: interface state UNINITIALIZED->ENABLED Feb 12 20:09:28.568624 osdx hostapd[469367]: eth2: AP-ENABLED Feb 12 20:09:31.700318 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Feb 12 20:09:31.700337 osdx hostapd[469368]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 12 20:09:31.712544 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Feb 12 20:09:31.712578 osdx hostapd[469368]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 12 20:09:31.712596 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Feb 12 20:09:31.712608 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Feb 12 20:09:31.712617 osdx hostapd[469368]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:09:31.712645 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 192) Feb 12 20:09:31.712982 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=192 len=12) from STA: EAP Response-Identity (1) Feb 12 20:09:31.712995 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'testing' Feb 12 20:09:31.713021 osdx hostapd[469368]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:09:31.715450 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.715483 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.715770 osdx hostapd[469368]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 12 20:09:31.715776 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.715782 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.715804 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=193 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 12 20:09:31.715812 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 193) Feb 12 20:09:31.716093 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=193 len=6) from STA: EAP Response-unknown (3) Feb 12 20:09:31.716161 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.716187 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.716389 osdx hostapd[469368]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 12 20:09:31.716395 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.716400 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.716420 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=194 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:31.716430 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 194) Feb 12 20:09:31.716838 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=194 len=194) from STA: EAP Response-PEAP (25) Feb 12 20:09:31.716894 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.716909 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.717983 osdx hostapd[469368]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 12 20:09:31.717992 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.717997 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.718028 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=195 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:31.718039 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 195) Feb 12 20:09:31.718219 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=195 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:09:31.718278 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.718295 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.718453 osdx hostapd[469368]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 12 20:09:31.718459 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.718463 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.718484 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=196 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:31.718492 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 196) Feb 12 20:09:31.720365 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=196 len=103) from STA: EAP Response-PEAP (25) Feb 12 20:09:31.720408 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.720420 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.720725 osdx hostapd[469368]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 12 20:09:31.720733 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.720737 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.720765 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=197 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:31.720773 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 197) Feb 12 20:09:31.721056 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=197 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:09:31.721100 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.721113 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.721257 osdx hostapd[469368]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 12 20:09:31.721262 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.721266 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.721283 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=198 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:31.721290 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 198) Feb 12 20:09:31.721457 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=198 len=43) from STA: EAP Response-PEAP (25) Feb 12 20:09:31.721493 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.721504 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.721661 osdx hostapd[469368]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 12 20:09:31.721667 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.721671 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.721693 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=199 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:31.721700 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 199) Feb 12 20:09:31.721999 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=199 len=97) from STA: EAP Response-PEAP (25) Feb 12 20:09:31.722039 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.722051 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.722236 osdx hostapd[469368]: eth2: RADIUS Received 140 bytes from RADIUS server Feb 12 20:09:31.722242 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.722246 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.722266 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=200 len=82) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:31.722273 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 200) Feb 12 20:09:31.722489 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=200 len=37) from STA: EAP Response-PEAP (25) Feb 12 20:09:31.722532 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.722546 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.722681 osdx hostapd[469368]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 12 20:09:31.722686 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.722690 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.722707 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=201 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:31.722713 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 201) Feb 12 20:09:31.722938 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=201 len=46) from STA: EAP Response-PEAP (25) Feb 12 20:09:31.722980 osdx hostapd[469368]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:31.722993 osdx hostapd[469368]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:31.723263 osdx hostapd[469368]: eth2: RADIUS Received 175 bytes from RADIUS server Feb 12 20:09:31.723271 osdx hostapd[469368]: eth2: RADIUS Received RADIUS message Feb 12 20:09:31.723275 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:31.723313 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: old identity 'testing' updated with User-Name from Access-Accept 'testing' Feb 12 20:09:31.723317 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=3 id=201 len=4) from RADIUS server: EAP Success Feb 12 20:09:31.723339 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 201) Feb 12 20:09:31.723356 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authorizing port Feb 12 20:09:31.723360 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 RADIUS: starting accounting session 1FFC4189E097B07F Feb 12 20:09:31.723368 osdx hostapd[469368]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authenticated - EAP type: 25 (PEAP)
Test Unsuccessful 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 uses an incorrect username.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+NOV5mymFTEIqtI9l0bcRomqC1eAGwJkQ8nGuI5m+KAXo/9YIMp+xgf1uoskUMEsBYx2X4lPqUTw== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.247 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.247/0.247/0.247/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19YUb4BpnKS7HMhG16futUCxxmxKOusubA= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 0 EAPoL Frames (Tx) 0 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 0 Req ID Frames (Rx) 0 Resp Frames (Tx) 0 Start Frames (Tx) 0
Step 5: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 9 EAPoL Frames (Tx) 10 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 8 Req ID Frames (Rx) 1 Resp Frames (Tx) 9 Start Frames (Tx) 1
Step 6: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 10 EAPoL Frames (Tx) 10 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 8 Req ID Frames (Rx) 1 Resp Frames (Tx) 9 Start Frames (Tx) 1
Step 7: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
Authentication Failures\s+[1-9]\d?Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 8 Authentication Backend RADIUS Authentication Failures 1 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 10 EAPoL frames (Tx) 10 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 8: Expect a failure in the following command:
Ping IP address 192.168.100.1 from DUT1:
admin@DUT1$ ping 192.168.100.1 count 1 size 56 timeout 1Show output
PING 192.168.100.1 (192.168.100.1) 56(84) bytes of data. --- 192.168.100.1 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms
Step 9: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)Show output
Feb 12 20:09:39.606378 osdx hostapd[469891]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 12 20:09:39.606397 osdx hostapd[469891]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:09:39.606697 osdx hostapd[469891]: connect[radius]: Network is unreachable Feb 12 20:09:39.606446 osdx hostapd[469891]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Feb 12 20:09:39.606451 osdx hostapd[469891]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 12 20:09:39.622233 osdx hostapd[469891]: Discovery mode enabled on eth2 Feb 12 20:09:39.622317 osdx hostapd[469891]: eth2: interface state UNINITIALIZED->ENABLED Feb 12 20:09:39.622317 osdx hostapd[469891]: eth2: AP-ENABLED Feb 12 20:09:42.966003 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Feb 12 20:09:42.966018 osdx hostapd[469892]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 12 20:09:42.978254 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Feb 12 20:09:42.978278 osdx hostapd[469892]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 12 20:09:42.978293 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Feb 12 20:09:42.978300 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Feb 12 20:09:42.978307 osdx hostapd[469892]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:09:42.978323 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 1) Feb 12 20:09:42.978806 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=1 len=10) from STA: EAP Response-Identity (1) Feb 12 20:09:42.978824 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Feb 12 20:09:42.978854 osdx hostapd[469892]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:09:42.980705 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.980736 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:42.980992 osdx hostapd[469892]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 12 20:09:42.980997 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:42.981001 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:42.981029 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=2 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 12 20:09:42.981036 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 2) Feb 12 20:09:42.981256 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=2 len=6) from STA: EAP Response-unknown (3) Feb 12 20:09:42.981307 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.981321 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:42.981486 osdx hostapd[469892]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 12 20:09:42.981491 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:42.981494 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:42.981513 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=3 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:42.981518 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 3) Feb 12 20:09:42.981837 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=3 len=194) from STA: EAP Response-PEAP (25) Feb 12 20:09:42.981876 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.981888 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:42.982716 osdx hostapd[469892]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 12 20:09:42.982721 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:42.982725 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:42.982745 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=4 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:42.982751 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 4) Feb 12 20:09:42.982894 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=4 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:09:42.982933 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.982946 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:42.983074 osdx hostapd[469892]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 12 20:09:42.983080 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:42.983084 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:42.983101 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=5 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:42.983107 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 5) Feb 12 20:09:42.984410 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=5 len=103) from STA: EAP Response-PEAP (25) Feb 12 20:09:42.984457 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.984469 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:42.984714 osdx hostapd[469892]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 12 20:09:42.984719 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:42.984723 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:42.984739 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=6 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:42.984745 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 6) Feb 12 20:09:42.984971 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=6 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:09:42.985007 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.985021 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:42.985160 osdx hostapd[469892]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 12 20:09:42.985166 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:42.985169 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:42.985185 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=7 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:42.985191 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 7) Feb 12 20:09:42.985318 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=7 len=41) from STA: EAP Response-PEAP (25) Feb 12 20:09:42.985354 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.985365 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:42.985502 osdx hostapd[469892]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 12 20:09:42.985507 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:42.985510 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:42.985524 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=8 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:42.985529 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 8) Feb 12 20:09:42.985725 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=8 len=95) from STA: EAP Response-PEAP (25) Feb 12 20:09:42.985757 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.985766 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:42.985900 osdx hostapd[469892]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 12 20:09:42.985905 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:42.985908 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:42.985921 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=9 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:09:42.985926 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 9) Feb 12 20:09:42.986092 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=9 len=46) from STA: EAP Response-PEAP (25) Feb 12 20:09:42.986122 osdx hostapd[469892]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:09:42.986132 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:09:43.986219 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) Feb 12 20:09:43.986254 osdx hostapd[469892]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:09:43.986446 osdx hostapd[469892]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:09:43.986453 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:43.986459 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:09:43.986523 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=9 len=4) from RADIUS server: EAP Failure Feb 12 20:09:43.986556 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 9) Feb 12 20:09:43.986572 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Feb 12 20:09:43.986577 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 12 20:09:43.986581 osdx hostapd[469892]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (60 seconds) Feb 12 20:09:43.986586 osdx hostapd[469892]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:09:43.986590 osdx hostapd[469892]: eth2: RADIUS Received RADIUS message Feb 12 20:09:43.986593 osdx hostapd[469892]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Test Unsupported 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 does not support 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19RSwH3e1rSRaHIajFn/+J4+4Tp0iZ5+OSW2dW3lEFAvg72N/K6FNeuB/aRAVSe97q7w4756sQyqg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.209 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.209/0.209/0.209/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 2 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 5: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 3 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 6: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 3 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 7: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: EAP authentication timeoutShow output
Feb 12 20:09:54.801848 osdx hostapd[470416]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 12 20:09:54.801870 osdx hostapd[470416]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:09:54.802180 osdx hostapd[470416]: connect[radius]: Network is unreachable Feb 12 20:09:54.801938 osdx hostapd[470416]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Feb 12 20:09:54.801943 osdx hostapd[470416]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 12 20:09:54.829463 osdx hostapd[470416]: Discovery mode enabled on eth2 Feb 12 20:09:54.829575 osdx hostapd[470416]: eth2: interface state UNINITIALIZED->ENABLED Feb 12 20:09:54.829575 osdx hostapd[470416]: eth2: AP-ENABLED Feb 12 20:09:59.829774 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 DRIVER: Device discovered, triggering MAB authentication Feb 12 20:09:59.829806 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Feb 12 20:09:59.829813 osdx hostapd[470417]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 12 20:09:59.845498 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Feb 12 20:09:59.845529 osdx hostapd[470417]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 12 20:09:59.845547 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Feb 12 20:09:59.845555 osdx hostapd[470417]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:09:59.845582 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 135) Feb 12 20:10:02.847768 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 135) Feb 12 20:10:07.674592 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:10:08.851773 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 135) Feb 12 20:10:16.041942 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:10:20.862770 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: aborting authentication Feb 12 20:10:20.862782 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: EAP authentication timeout - enforcing 60 second quiet period before retrying Feb 12 20:10:20.862792 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 MLME: MLME-DEAUTHENTICATE.indication(de:ad:be:ef:6c:12, 2) Feb 12 20:10:20.862795 osdx hostapd[470417]: eth2: STA de:ad:be:ef:6c:12 MLME: MLME-DELETEKEYS.request(de:ad:be:ef:6c:12)