Quiet Period
This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.
Test Quiet Period In 802.1X Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19NLc5F6ze2Uyg45VvEMea2Vv/j1DcCUuH81d0jWHtz4PLQilwVQ/dJlJoJPWKUnFGMOKuuYF+M9g== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.322 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.322/0.322/0.322/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+6sNKUSCgmlvqVqTFy8h7eIlUXu9OgmZU= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Feb 12 20:24:49.421936 osdx hostapd[491621]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 12 20:24:49.422423 osdx hostapd[491621]: connect[radius]: Network is unreachable Feb 12 20:24:49.421957 osdx hostapd[491621]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:24:49.422023 osdx hostapd[491621]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2 Feb 12 20:24:49.422029 osdx hostapd[491621]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 12 20:24:49.441655 osdx hostapd[491621]: Discovery mode enabled on eth2 Feb 12 20:24:49.441747 osdx hostapd[491621]: eth2: interface state UNINITIALIZED->ENABLED Feb 12 20:24:49.441747 osdx hostapd[491621]: eth2: AP-ENABLED Feb 12 20:24:51.300702 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:24:53.115386 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Feb 12 20:24:53.115401 osdx hostapd[491622]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 12 20:24:53.129704 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Feb 12 20:24:53.129741 osdx hostapd[491622]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 12 20:24:53.129761 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Feb 12 20:24:53.129775 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Feb 12 20:24:53.129783 osdx hostapd[491622]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:24:53.129814 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 253) Feb 12 20:24:53.130218 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=253 len=10) from STA: EAP Response-Identity (1) Feb 12 20:24:53.130231 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Feb 12 20:24:53.130265 osdx hostapd[491622]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:24:53.132717 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.132750 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.133056 osdx hostapd[491622]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 12 20:24:53.133063 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:53.133069 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:53.133091 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=254 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 12 20:24:53.133099 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 254) Feb 12 20:24:53.133377 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=254 len=6) from STA: EAP Response-unknown (3) Feb 12 20:24:53.133447 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.133464 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.133652 osdx hostapd[491622]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 12 20:24:53.133658 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:53.133662 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:53.133681 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=255 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:24:53.133688 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 255) Feb 12 20:24:53.134097 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=255 len=194) from STA: EAP Response-PEAP (25) Feb 12 20:24:53.134147 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.134160 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.135294 osdx hostapd[491622]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 12 20:24:53.135300 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:53.135306 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:53.135342 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=0 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:24:53.135350 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 0) Feb 12 20:24:53.135556 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=0 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:24:53.135602 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.135615 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.135757 osdx hostapd[491622]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 12 20:24:53.135762 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:53.135765 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:53.135779 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=1 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:24:53.135785 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 1) Feb 12 20:24:53.137218 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=1 len=103) from STA: EAP Response-PEAP (25) Feb 12 20:24:53.137262 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.137275 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.137605 osdx hostapd[491622]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 12 20:24:53.137610 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:53.137613 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:53.137630 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=2 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:24:53.137636 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 2) Feb 12 20:24:53.137870 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=2 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:24:53.137928 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.137942 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.138094 osdx hostapd[491622]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 12 20:24:53.138101 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:53.138105 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:53.138122 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=3 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:24:53.138129 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 3) Feb 12 20:24:53.138298 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=3 len=41) from STA: EAP Response-PEAP (25) Feb 12 20:24:53.138343 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.138355 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.138503 osdx hostapd[491622]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 12 20:24:53.138510 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:53.138514 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:53.138536 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=4 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:24:53.138542 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 4) Feb 12 20:24:53.138805 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=4 len=95) from STA: EAP Response-PEAP (25) Feb 12 20:24:53.138840 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.138849 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.139037 osdx hostapd[491622]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 12 20:24:53.139043 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:53.139048 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:53.139064 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=5 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:24:53.139070 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 5) Feb 12 20:24:53.139254 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=5 len=46) from STA: EAP Response-PEAP (25) Feb 12 20:24:53.139291 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:24:53.139301 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:24:53.462994 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:24:54.139395 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) Feb 12 20:24:54.139433 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:24:54.139615 osdx hostapd[491622]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:24:54.139620 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:54.139624 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:24:54.139671 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=5 len=4) from RADIUS server: EAP Failure Feb 12 20:24:54.139695 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 5) Feb 12 20:24:54.139709 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Feb 12 20:24:54.139714 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 12 20:24:54.139717 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Feb 12 20:24:54.139722 osdx hostapd[491622]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:24:54.139725 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:24:54.139728 osdx hostapd[491622]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Feb 12 20:24:55.977924 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:24:58.104239 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:00.187126 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:02.259391 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:04.377549 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:06.500086 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:08.617824 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:10.721085 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:12.801957 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:14.147955 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Feb 12 20:25:14.147975 osdx hostapd[491622]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:25:14.148015 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 46) Feb 12 20:25:14.148461 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=46 len=10) from STA: EAP Response-Identity (1) Feb 12 20:25:14.148474 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Feb 12 20:25:14.148560 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.148587 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:14.148902 osdx hostapd[491622]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 12 20:25:14.148910 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:25:14.148915 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:14.148947 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=47 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 12 20:25:14.148956 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 47) Feb 12 20:25:14.149224 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=47 len=6) from STA: EAP Response-unknown (3) Feb 12 20:25:14.149281 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.149372 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:14.149540 osdx hostapd[491622]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 12 20:25:14.149548 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:25:14.149551 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:14.149571 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=48 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:25:14.149579 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 48) Feb 12 20:25:14.149948 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=48 len=194) from STA: EAP Response-PEAP (25) Feb 12 20:25:14.150000 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.150014 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:14.151031 osdx hostapd[491622]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 12 20:25:14.151041 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:25:14.151045 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:14.151077 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=49 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:25:14.151085 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 49) Feb 12 20:25:14.151330 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=49 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:25:14.151382 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.151401 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:14.151571 osdx hostapd[491622]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 12 20:25:14.151578 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:25:14.151581 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:14.151597 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:25:14.151604 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 50) Feb 12 20:25:14.152712 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=50 len=103) from STA: EAP Response-PEAP (25) Feb 12 20:25:14.152756 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.152772 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:14.153068 osdx hostapd[491622]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 12 20:25:14.153074 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:25:14.153077 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:14.153095 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:25:14.153101 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 51) Feb 12 20:25:14.153359 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=51 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:25:14.153393 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.153405 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:14.153577 osdx hostapd[491622]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 12 20:25:14.153583 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:25:14.153586 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:14.153614 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=52 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:25:14.153620 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 52) Feb 12 20:25:14.153859 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=52 len=41) from STA: EAP Response-PEAP (25) Feb 12 20:25:14.153914 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.153926 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:14.154094 osdx hostapd[491622]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 12 20:25:14.154101 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:25:14.154105 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:14.154125 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:25:14.154132 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 53) Feb 12 20:25:14.154416 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=53 len=95) from STA: EAP Response-PEAP (25) Feb 12 20:25:14.154455 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.154468 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:14.154641 osdx hostapd[491622]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 12 20:25:14.154646 osdx hostapd[491622]: eth2: RADIUS Received RADIUS message Feb 12 20:25:14.154650 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:14.154674 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=54 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:25:14.154680 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 54) Feb 12 20:25:14.154846 osdx hostapd[491622]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=54 len=46) from STA: EAP Response-PEAP (25) Feb 12 20:25:14.154895 osdx hostapd[491622]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:14.154907 osdx hostapd[491622]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB Mode
Description
This scenario shows how to configure the quiet period in a device with MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/q1adR78XhvXHf/A4SE8NvrRcIeRzXcMvKf/J/6iu/b+V4a/AKLl5GvlNj+9mPd8pmayjnRWzYhw== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.220 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.220/0.220/0.220/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Feb 12 20:25:22.461238 osdx hostapd[492209]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 12 20:25:22.461253 osdx hostapd[492209]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:25:22.461530 osdx hostapd[492209]: connect[radius]: Network is unreachable Feb 12 20:25:22.461298 osdx hostapd[492209]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5 Feb 12 20:25:22.461301 osdx hostapd[492209]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 12 20:25:22.497112 osdx hostapd[492209]: Discovery mode enabled on eth2 Feb 12 20:25:22.497184 osdx hostapd[492209]: eth2: interface state UNINITIALIZED->ENABLED Feb 12 20:25:22.497184 osdx hostapd[492209]: eth2: AP-ENABLED Feb 12 20:25:25.727217 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:27.499448 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication Feb 12 20:25:27.499481 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Feb 12 20:25:27.499490 osdx hostapd[492210]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 12 20:25:27.513128 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication Feb 12 20:25:27.513156 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 12 20:25:27.513169 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 12 20:25:27.514825 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 12 20:25:27.514837 osdx hostapd[492210]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:25:27.514910 osdx hostapd[492210]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:27.514938 osdx hostapd[492210]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:25:28.515020 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Feb 12 20:25:28.515052 osdx hostapd[492210]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:25:28.515244 osdx hostapd[492210]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 12 20:25:28.515248 osdx hostapd[492210]: eth2: RADIUS Received RADIUS message Feb 12 20:25:28.515252 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:25:28.515256 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Feb 12 20:25:28.515301 osdx hostapd[492210]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 12 20:25:28.515304 osdx hostapd[492210]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 12 20:25:28.515307 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Feb 12 20:25:28.515311 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Feb 12 20:25:28.515318 osdx hostapd[492210]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 12 20:25:28.515321 osdx hostapd[492210]: eth2: RADIUS Received RADIUS message Feb 12 20:25:28.515323 osdx hostapd[492210]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Feb 12 20:25:31.989592 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:36.185918 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:40.343919 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:44.589002 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:25:48.515408 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Feb 12 20:25:48.515417 osdx hostapd[492210]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 12 20:25:48.515420 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB Feb 12 20:25:48.515422 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 12 20:25:48.515471 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 12 20:25:48.515498 osdx hostapd[492210]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 12 20:25:48.515517 osdx hostapd[492210]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:25:48.515540 osdx hostapd[492210]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB-Fallback Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1X-MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode 802.1x-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/IMvY87pjmDtAbOiJqiJPaGJ8/WSHZWjFSuallJhlM8eMDxXSqXoZmw0p4qePsqbWxikjrfJfRKQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.208 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.208/0.208/0.208/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX18MNAF/l/WMdkQssjO+DJxQT5eidepFWF8= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Feb 12 20:25:56.887626 osdx hostapd[492765]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 12 20:25:56.887640 osdx hostapd[492765]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:25:56.887980 osdx hostapd[492765]: connect[radius]: Network is unreachable Feb 12 20:25:56.887685 osdx hostapd[492765]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Feb 12 20:25:56.887688 osdx hostapd[492765]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 12 20:25:56.911499 osdx hostapd[492765]: Discovery mode enabled on eth2 Feb 12 20:25:56.911609 osdx hostapd[492765]: eth2: interface state UNINITIALIZED->ENABLED Feb 12 20:25:56.911609 osdx hostapd[492765]: eth2: AP-ENABLED Feb 12 20:26:00.166171 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Feb 12 20:26:00.166183 osdx hostapd[492766]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 12 20:26:00.183498 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication Feb 12 20:26:00.183527 osdx hostapd[492766]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 12 20:26:00.183531 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response Feb 12 20:26:00.183534 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response Feb 12 20:26:00.183547 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response Feb 12 20:26:00.183550 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Feb 12 20:26:00.183562 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 12 20:26:00.183569 osdx hostapd[492766]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:26:00.183593 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 105) Feb 12 20:26:00.183936 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=105 len=10) from STA: EAP Response-Identity (1) Feb 12 20:26:00.183949 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Feb 12 20:26:00.183984 osdx hostapd[492766]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:26:00.187104 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.187156 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.187757 osdx hostapd[492766]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 12 20:26:00.187774 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:00.187795 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:00.187868 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=106 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 12 20:26:00.187887 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 106) Feb 12 20:26:00.188445 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=106 len=6) from STA: EAP Response-unknown (3) Feb 12 20:26:00.188583 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.188623 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.189012 osdx hostapd[492766]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 12 20:26:00.189029 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:00.189041 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:00.189088 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=107 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:00.189107 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 107) Feb 12 20:26:00.190105 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=107 len=194) from STA: EAP Response-PEAP (25) Feb 12 20:26:00.190262 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.190295 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.192531 osdx hostapd[492766]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 12 20:26:00.192548 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:00.192558 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:00.192644 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=108 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:00.192667 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 108) Feb 12 20:26:00.193236 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=108 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:26:00.193379 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.193413 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.193841 osdx hostapd[492766]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 12 20:26:00.193860 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:00.193873 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:00.193937 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=109 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:00.193959 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 109) Feb 12 20:26:00.197667 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=109 len=103) from STA: EAP Response-PEAP (25) Feb 12 20:26:00.197800 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.197834 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.198689 osdx hostapd[492766]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 12 20:26:00.198721 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:00.198733 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:00.198789 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=110 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:00.198809 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 110) Feb 12 20:26:00.199524 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=110 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:26:00.199639 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.199681 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.200091 osdx hostapd[492766]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 12 20:26:00.200109 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:00.200121 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:00.200182 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=111 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:00.200201 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 111) Feb 12 20:26:00.200891 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=111 len=41) from STA: EAP Response-PEAP (25) Feb 12 20:26:00.201034 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.201086 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.201612 osdx hostapd[492766]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 12 20:26:00.201625 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:00.201633 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:00.201681 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=112 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:00.201712 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 112) Feb 12 20:26:00.202594 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=112 len=95) from STA: EAP Response-PEAP (25) Feb 12 20:26:00.202771 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.202904 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.203567 osdx hostapd[492766]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 12 20:26:00.203586 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:00.203597 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:00.203672 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=113 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:00.203710 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 113) Feb 12 20:26:00.204401 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=113 len=46) from STA: EAP Response-PEAP (25) Feb 12 20:26:00.204529 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:00.204561 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:00.523597 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:01.204657 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Feb 12 20:26:01.204694 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:26:01.205019 osdx hostapd[492766]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:26:01.205025 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:01.205029 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:01.205077 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=113 len=4) from RADIUS server: EAP Failure Feb 12 20:26:01.205106 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 113) Feb 12 20:26:01.205126 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 12 20:26:01.205133 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 12 20:26:01.205136 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Feb 12 20:26:01.205145 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 12 20:26:01.205173 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 12 20:26:01.205180 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 12 20:26:01.205200 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:01.205213 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:02.205324 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Feb 12 20:26:02.205369 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:26:02.205575 osdx hostapd[492766]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 12 20:26:02.205580 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:02.205585 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:02.205590 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Feb 12 20:26:02.205664 osdx hostapd[492766]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 12 20:26:02.205667 osdx hostapd[492766]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 12 20:26:02.205671 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Feb 12 20:26:02.205675 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Feb 12 20:26:02.205687 osdx hostapd[492766]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 12 20:26:02.205690 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:02.205693 osdx hostapd[492766]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Feb 12 20:26:06.812942 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:11.040032 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:15.218213 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:19.407112 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:22.205754 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Feb 12 20:26:22.205791 osdx hostapd[492766]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 12 20:26:22.205796 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X Feb 12 20:26:22.205801 osdx hostapd[492766]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 12 20:26:22.205810 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 12 20:26:22.205816 osdx hostapd[492766]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:26:22.205902 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 115) Feb 12 20:26:22.206755 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=115 len=10) from STA: EAP Response-Identity (1) Feb 12 20:26:22.206786 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Feb 12 20:26:22.206869 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.206965 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:22.207205 osdx hostapd[492766]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 12 20:26:22.207212 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:22.207216 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:22.207254 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=116 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 12 20:26:22.207263 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 116) Feb 12 20:26:22.207535 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=116 len=6) from STA: EAP Response-unknown (3) Feb 12 20:26:22.207585 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.207621 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:22.207871 osdx hostapd[492766]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 12 20:26:22.207878 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:22.207881 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:22.207911 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=117 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:22.207920 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 117) Feb 12 20:26:22.208326 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=117 len=194) from STA: EAP Response-PEAP (25) Feb 12 20:26:22.208382 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.208409 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:22.209537 osdx hostapd[492766]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 12 20:26:22.209541 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:22.209544 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:22.209566 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=118 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:22.209573 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 118) Feb 12 20:26:22.209786 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=118 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:26:22.209881 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.210189 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:22.210278 osdx hostapd[492766]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 12 20:26:22.210284 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:22.210289 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:22.210359 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=119 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:22.210370 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 119) Feb 12 20:26:22.211858 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=119 len=103) from STA: EAP Response-PEAP (25) Feb 12 20:26:22.211917 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.211969 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:22.212302 osdx hostapd[492766]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 12 20:26:22.212308 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:22.212314 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:22.212344 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=120 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:22.212352 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 120) Feb 12 20:26:22.212631 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=120 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:26:22.212679 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.212856 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:22.212884 osdx hostapd[492766]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 12 20:26:22.212887 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:22.212891 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:22.212911 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=121 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:22.212919 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 121) Feb 12 20:26:22.213113 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=121 len=41) from STA: EAP Response-PEAP (25) Feb 12 20:26:22.213188 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.213221 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:22.213456 osdx hostapd[492766]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 12 20:26:22.213464 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:22.213469 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:22.213489 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=122 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:22.213496 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 122) Feb 12 20:26:22.213877 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=122 len=95) from STA: EAP Response-PEAP (25) Feb 12 20:26:22.213933 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.214015 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:22.214207 osdx hostapd[492766]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 12 20:26:22.214241 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:22.214246 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:22.214281 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=123 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:22.214289 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 123) Feb 12 20:26:22.214566 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=123 len=46) from STA: EAP Response-PEAP (25) Feb 12 20:26:22.214611 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:22.214736 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:23.214830 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Feb 12 20:26:23.214860 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:26:23.215021 osdx hostapd[492766]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:26:23.215024 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:23.215028 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:23.215074 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=123 len=4) from RADIUS server: EAP Failure Feb 12 20:26:23.215104 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 123) Feb 12 20:26:23.215115 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 12 20:26:23.215120 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 12 20:26:23.215123 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Feb 12 20:26:23.215127 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 12 20:26:23.215183 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 12 20:26:23.215190 osdx hostapd[492766]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 12 20:26:23.215201 osdx hostapd[492766]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:23.215210 osdx hostapd[492766]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:23.215220 osdx hostapd[492766]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:26:23.215223 osdx hostapd[492766]: eth2: RADIUS Received RADIUS message Feb 12 20:26:23.215225 osdx hostapd[492766]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Test Quiet Period In MAB-First Mode
Description
This scenario shows how to configure the quiet period in a device with MAB-802.1X authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode MAB-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+LSs8pRrz70gI+WKm2aI/+0nlY/Nejlm2Y8jIicLTf/Ie7xWdxJ2qKLUKlUVuBXuSCd26ZHiR9Gw== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.254 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.254/0.254/0.254/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19G9S5gvuhHlHNeVCOI1EyNRxVmPKD2oN8= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Feb 12 20:26:30.499106 osdx hostapd[493336]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 12 20:26:30.499120 osdx hostapd[493336]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:26:30.499333 osdx hostapd[493336]: connect[radius]: Network is unreachable Feb 12 20:26:30.499155 osdx hostapd[493336]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Feb 12 20:26:30.499158 osdx hostapd[493336]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 12 20:26:30.523006 osdx hostapd[493336]: Discovery mode enabled on eth2 Feb 12 20:26:30.523064 osdx hostapd[493336]: eth2: interface state UNINITIALIZED->ENABLED Feb 12 20:26:30.523064 osdx hostapd[493336]: eth2: AP-ENABLED Feb 12 20:26:33.855734 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Feb 12 20:26:33.855749 osdx hostapd[493337]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 12 20:26:33.875034 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication Feb 12 20:26:33.875063 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 12 20:26:33.875079 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 12 20:26:33.876861 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 12 20:26:33.876881 osdx hostapd[493337]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 12 20:26:33.877012 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:33.877055 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:33.877095 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Feb 12 20:26:34.137587 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:34.877135 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Feb 12 20:26:34.877166 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:26:34.877373 osdx hostapd[493337]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 12 20:26:34.877377 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.877381 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.877384 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Feb 12 20:26:34.877428 osdx hostapd[493337]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 12 20:26:34.877430 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X Feb 12 20:26:34.877433 osdx hostapd[493337]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 12 20:26:34.877435 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started Feb 12 20:26:34.877441 osdx hostapd[493337]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:26:34.877456 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 213) Feb 12 20:26:34.877833 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=213 len=10) from STA: EAP Response-Identity (1) Feb 12 20:26:34.877850 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Feb 12 20:26:34.877920 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.877956 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:34.878172 osdx hostapd[493337]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 12 20:26:34.878179 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.878184 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.878215 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=214 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 12 20:26:34.878223 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 214) Feb 12 20:26:34.878483 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=214 len=6) from STA: EAP Response-unknown (3) Feb 12 20:26:34.878542 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.878559 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:34.878771 osdx hostapd[493337]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 12 20:26:34.878778 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.878782 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.878802 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=215 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:34.878808 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 215) Feb 12 20:26:34.879187 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=215 len=194) from STA: EAP Response-PEAP (25) Feb 12 20:26:34.879229 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.879241 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:34.880151 osdx hostapd[493337]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 12 20:26:34.880158 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.880163 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.880196 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=216 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:34.880204 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 216) Feb 12 20:26:34.880449 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=216 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:26:34.880501 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.880516 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:34.880665 osdx hostapd[493337]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 12 20:26:34.880675 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.880678 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.880698 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=217 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:34.880704 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 217) Feb 12 20:26:34.882295 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=217 len=103) from STA: EAP Response-PEAP (25) Feb 12 20:26:34.882358 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.882375 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:34.882771 osdx hostapd[493337]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 12 20:26:34.882778 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.882783 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.882813 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=218 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:34.882822 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 218) Feb 12 20:26:34.883133 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=218 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:26:34.883183 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.883198 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:34.883368 osdx hostapd[493337]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 12 20:26:34.883374 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.883378 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.883398 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=219 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:34.883404 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 219) Feb 12 20:26:34.883610 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=219 len=41) from STA: EAP Response-PEAP (25) Feb 12 20:26:34.883654 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.883668 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:34.883856 osdx hostapd[493337]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 12 20:26:34.883869 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.883874 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.883897 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=220 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:34.883904 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 220) Feb 12 20:26:34.884200 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=220 len=95) from STA: EAP Response-PEAP (25) Feb 12 20:26:34.884242 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.884258 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:34.884473 osdx hostapd[493337]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 12 20:26:34.884480 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:34.884484 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:34.884503 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=221 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:34.884510 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 221) Feb 12 20:26:34.884725 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=221 len=46) from STA: EAP Response-PEAP (25) Feb 12 20:26:34.884779 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:34.884841 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:35.884953 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Feb 12 20:26:35.884987 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:26:35.885146 osdx hostapd[493337]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:26:35.885149 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:35.885153 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:35.885215 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=221 len=4) from RADIUS server: EAP Failure Feb 12 20:26:35.885241 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 221) Feb 12 20:26:35.885256 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 12 20:26:35.885268 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 12 20:26:35.885273 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Feb 12 20:26:35.885303 osdx hostapd[493337]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:26:35.885306 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:35.885308 osdx hostapd[493337]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Feb 12 20:26:40.432308 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:44.620642 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:48.784743 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:52.956852 osdx OSDxCLI[453798]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 12 20:26:55.894303 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Feb 12 20:26:55.894320 osdx hostapd[493337]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 12 20:26:55.894354 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 136) Feb 12 20:26:55.894784 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=136 len=10) from STA: EAP Response-Identity (1) Feb 12 20:26:55.894795 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Feb 12 20:26:55.894858 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.894880 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:55.895123 osdx hostapd[493337]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 12 20:26:55.895129 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:55.895133 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:55.895162 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=137 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 12 20:26:55.895169 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 137) Feb 12 20:26:55.895396 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=137 len=6) from STA: EAP Response-unknown (3) Feb 12 20:26:55.895441 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.895455 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:55.895628 osdx hostapd[493337]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 12 20:26:55.895632 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:55.895635 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:55.895649 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=138 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:55.895654 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 138) Feb 12 20:26:55.895946 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=138 len=194) from STA: EAP Response-PEAP (25) Feb 12 20:26:55.895975 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.895984 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:55.896819 osdx hostapd[493337]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 12 20:26:55.896827 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:55.896830 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:55.896854 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=139 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:55.896862 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 139) Feb 12 20:26:55.897006 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=139 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:26:55.897050 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.897062 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:55.897162 osdx hostapd[493337]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 12 20:26:55.897167 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:55.897170 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:55.897183 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=140 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:55.897189 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 140) Feb 12 20:26:55.898164 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=140 len=103) from STA: EAP Response-PEAP (25) Feb 12 20:26:55.898199 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.898210 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:55.898462 osdx hostapd[493337]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 12 20:26:55.898466 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:55.898470 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:55.898486 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=141 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:55.898491 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 141) Feb 12 20:26:55.898653 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=141 len=6) from STA: EAP Response-PEAP (25) Feb 12 20:26:55.898688 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.898698 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:55.898823 osdx hostapd[493337]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 12 20:26:55.898831 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:55.898836 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:55.898856 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=142 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:55.898863 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 142) Feb 12 20:26:55.899005 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=142 len=41) from STA: EAP Response-PEAP (25) Feb 12 20:26:55.899037 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.899048 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:55.899175 osdx hostapd[493337]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 12 20:26:55.899179 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:55.899181 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:55.899192 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=143 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:55.899196 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 143) Feb 12 20:26:55.899367 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=143 len=95) from STA: EAP Response-PEAP (25) Feb 12 20:26:55.899392 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.899401 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:55.899547 osdx hostapd[493337]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 12 20:26:55.899551 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:55.899554 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:55.899564 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=144 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 12 20:26:55.899568 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 144) Feb 12 20:26:55.899722 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=144 len=46) from STA: EAP Response-PEAP (25) Feb 12 20:26:55.899748 osdx hostapd[493337]: eth2: RADIUS Sending RADIUS message to authentication server Feb 12 20:26:55.899757 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 12 20:26:56.899843 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Feb 12 20:26:56.899884 osdx hostapd[493337]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 12 20:26:56.900034 osdx hostapd[493337]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:26:56.900038 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:56.900042 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 12 20:26:56.900093 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=144 len=4) from RADIUS server: EAP Failure Feb 12 20:26:56.900119 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 144) Feb 12 20:26:56.900132 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 12 20:26:56.900136 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 12 20:26:56.900139 osdx hostapd[493337]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Feb 12 20:26:56.900144 osdx hostapd[493337]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 12 20:26:56.900147 osdx hostapd[493337]: eth2: RADIUS Received RADIUS message Feb 12 20:26:56.900150 osdx hostapd[493337]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet