Quiet Period
This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.
Test Quiet Period In 802.1X Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX18kfLggrDnR0xH8vhBsN2T24nxyCVakxYOMmBrCVafVBlqDngaW0m7o4wq/BOSlIyaA92jQOaFImQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.187 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.187/0.187/0.187/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1/8Wo9eqjFPjEwRkobETx7otzXcK9h0ByU= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Feb 19 07:47:26.429478 osdx hostapd[47719]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 19 07:47:26.429491 osdx hostapd[47719]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 19 07:47:26.429697 osdx hostapd[47719]: connect[radius]: Network is unreachable Feb 19 07:47:26.429528 osdx hostapd[47719]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2 Feb 19 07:47:26.429532 osdx hostapd[47719]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 19 07:47:26.449339 osdx hostapd[47719]: Discovery mode enabled on eth2 Feb 19 07:47:26.449441 osdx hostapd[47719]: eth2: interface state UNINITIALIZED->ENABLED Feb 19 07:47:26.449441 osdx hostapd[47719]: eth2: AP-ENABLED Feb 19 07:47:27.854280 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:29.704625 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Feb 19 07:47:29.704640 osdx hostapd[47720]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 19 07:47:29.725354 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Feb 19 07:47:29.725380 osdx hostapd[47720]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 19 07:47:29.725393 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Feb 19 07:47:29.725403 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Feb 19 07:47:29.725409 osdx hostapd[47720]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 19 07:47:29.725431 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 50) Feb 19 07:47:29.725763 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=50 len=10) from STA: EAP Response-Identity (1) Feb 19 07:47:29.725772 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Feb 19 07:47:29.725790 osdx hostapd[47720]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 19 07:47:29.727499 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.727524 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.727749 osdx hostapd[47720]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 19 07:47:29.727755 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:29.727759 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:29.727785 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 19 07:47:29.727792 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 51) Feb 19 07:47:29.727993 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=51 len=6) from STA: EAP Response-unknown (3) Feb 19 07:47:29.728036 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.728052 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.728194 osdx hostapd[47720]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 19 07:47:29.728199 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:29.728202 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:29.728215 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=52 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:29.728220 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 52) Feb 19 07:47:29.728500 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=52 len=194) from STA: EAP Response-PEAP (25) Feb 19 07:47:29.728533 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.728544 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.729513 osdx hostapd[47720]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 19 07:47:29.729518 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:29.729521 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:29.729537 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:29.729543 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 53) Feb 19 07:47:29.729652 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=53 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:47:29.729683 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.729692 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.729781 osdx hostapd[47720]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 19 07:47:29.729785 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:29.729788 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:29.729799 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=54 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:29.729805 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 54) Feb 19 07:47:29.731023 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=54 len=103) from STA: EAP Response-PEAP (25) Feb 19 07:47:29.731057 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.731068 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.731311 osdx hostapd[47720]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 19 07:47:29.731316 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:29.731318 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:29.731331 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=55 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:29.731336 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 55) Feb 19 07:47:29.731517 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=55 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:47:29.731544 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.731554 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.731652 osdx hostapd[47720]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 19 07:47:29.731656 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:29.731659 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:29.731670 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=56 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:29.731675 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 56) Feb 19 07:47:29.731766 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=56 len=41) from STA: EAP Response-PEAP (25) Feb 19 07:47:29.731790 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.731799 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.731912 osdx hostapd[47720]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 19 07:47:29.731917 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:29.731921 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:29.731935 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=57 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:29.731939 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 57) Feb 19 07:47:29.732110 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=57 len=95) from STA: EAP Response-PEAP (25) Feb 19 07:47:29.732136 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.732144 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.732281 osdx hostapd[47720]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 19 07:47:29.732285 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:29.732288 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:29.732298 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=58 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:29.732304 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 58) Feb 19 07:47:29.732419 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=58 len=46) from STA: EAP Response-PEAP (25) Feb 19 07:47:29.732447 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:29.732456 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:29.973696 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:30.732544 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) Feb 19 07:47:30.732582 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 19 07:47:30.732726 osdx hostapd[47720]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:47:30.732730 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:30.732734 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:30.732776 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=58 len=4) from RADIUS server: EAP Failure Feb 19 07:47:30.732800 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 58) Feb 19 07:47:30.732814 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Feb 19 07:47:30.732818 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 19 07:47:30.732821 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Feb 19 07:47:30.732826 osdx hostapd[47720]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:47:30.732830 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:30.732835 osdx hostapd[47720]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Feb 19 07:47:32.399640 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:34.482946 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:36.568912 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:38.678439 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:40.760670 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:42.837650 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:44.913063 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:46.985215 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:49.071244 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:47:50.744328 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Feb 19 07:47:50.744347 osdx hostapd[47720]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 19 07:47:50.744389 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 94) Feb 19 07:47:50.744808 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=94 len=10) from STA: EAP Response-Identity (1) Feb 19 07:47:50.744823 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Feb 19 07:47:50.744903 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.744931 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:50.745211 osdx hostapd[47720]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 19 07:47:50.745217 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:50.745220 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:50.745253 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=95 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 19 07:47:50.745261 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 95) Feb 19 07:47:50.745520 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=95 len=6) from STA: EAP Response-unknown (3) Feb 19 07:47:50.745566 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.745582 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:50.745784 osdx hostapd[47720]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 19 07:47:50.745788 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:50.745792 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:50.745806 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=96 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:50.745812 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 96) Feb 19 07:47:50.746101 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=96 len=194) from STA: EAP Response-PEAP (25) Feb 19 07:47:50.746143 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.746153 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:50.747483 osdx hostapd[47720]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 19 07:47:50.747491 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:50.747496 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:50.747521 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=97 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:50.747529 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 97) Feb 19 07:47:50.747734 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=97 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:47:50.747777 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.747791 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:50.747959 osdx hostapd[47720]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 19 07:47:50.747966 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:50.747970 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:50.747995 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=98 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:50.748003 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 98) Feb 19 07:47:50.749426 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=98 len=103) from STA: EAP Response-PEAP (25) Feb 19 07:47:50.749473 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.749485 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:50.749873 osdx hostapd[47720]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 19 07:47:50.749883 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:50.749887 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:50.749911 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=99 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:50.749919 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 99) Feb 19 07:47:50.750191 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=99 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:47:50.750245 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.750261 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:50.750400 osdx hostapd[47720]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 19 07:47:50.750406 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:50.750410 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:50.750434 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=100 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:50.750441 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 100) Feb 19 07:47:50.750606 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=100 len=41) from STA: EAP Response-PEAP (25) Feb 19 07:47:50.750644 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.750656 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:50.750790 osdx hostapd[47720]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 19 07:47:50.750795 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:50.750804 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:50.750819 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=101 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:50.750825 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 101) Feb 19 07:47:50.751075 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=101 len=95) from STA: EAP Response-PEAP (25) Feb 19 07:47:50.751125 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.751140 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:47:50.751305 osdx hostapd[47720]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 19 07:47:50.751311 osdx hostapd[47720]: eth2: RADIUS Received RADIUS message Feb 19 07:47:50.751315 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:47:50.751331 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=102 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:47:50.751338 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 102) Feb 19 07:47:50.751525 osdx hostapd[47720]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=102 len=46) from STA: EAP Response-PEAP (25) Feb 19 07:47:50.751558 osdx hostapd[47720]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:47:50.751569 osdx hostapd[47720]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB Mode
Description
This scenario shows how to configure the quiet period in a device with MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX199KygxFHH3NTMBaXqN/40esJ4p72b9bw3vi1Rn7RDOFHUj+Nho21AldxOZB5pohSN2pNNyvMEZRQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=1.31 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 1.307/1.307/1.307/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Feb 19 07:47:57.475731 osdx hostapd[48298]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 19 07:47:57.475744 osdx hostapd[48298]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 19 07:47:57.476026 osdx hostapd[48298]: connect[radius]: Network is unreachable Feb 19 07:47:57.475781 osdx hostapd[48298]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5 Feb 19 07:47:57.475784 osdx hostapd[48298]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 19 07:47:57.495633 osdx hostapd[48298]: Discovery mode enabled on eth2 Feb 19 07:47:57.495742 osdx hostapd[48298]: eth2: interface state UNINITIALIZED->ENABLED Feb 19 07:47:57.495742 osdx hostapd[48298]: eth2: AP-ENABLED Feb 19 07:48:00.875627 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:02.497666 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication Feb 19 07:48:02.497708 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Feb 19 07:48:02.497718 osdx hostapd[48299]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 19 07:48:02.511659 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication Feb 19 07:48:02.511687 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 19 07:48:02.511707 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 19 07:48:02.513924 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 19 07:48:02.513939 osdx hostapd[48299]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 19 07:48:02.514016 osdx hostapd[48299]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:02.514048 osdx hostapd[48299]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:03.514134 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Feb 19 07:48:03.514171 osdx hostapd[48299]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 19 07:48:03.514329 osdx hostapd[48299]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 19 07:48:03.514333 osdx hostapd[48299]: eth2: RADIUS Received RADIUS message Feb 19 07:48:03.514338 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:03.514342 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Feb 19 07:48:03.514396 osdx hostapd[48299]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 19 07:48:03.514400 osdx hostapd[48299]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 19 07:48:03.514403 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Feb 19 07:48:03.514406 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Feb 19 07:48:03.514413 osdx hostapd[48299]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 19 07:48:03.514416 osdx hostapd[48299]: eth2: RADIUS Received RADIUS message Feb 19 07:48:03.514420 osdx hostapd[48299]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Feb 19 07:48:07.122241 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:11.276136 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:15.465102 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:19.654097 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:23.514602 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Feb 19 07:48:23.514612 osdx hostapd[48299]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 19 07:48:23.514614 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB Feb 19 07:48:23.514617 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 19 07:48:23.514671 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 19 07:48:23.514699 osdx hostapd[48299]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 19 07:48:23.514722 osdx hostapd[48299]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:23.514747 osdx hostapd[48299]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB-Fallback Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1X-MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode 802.1x-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX18dv3bfYzCxsXd/xrmujp02CjMgCIRKUSTxcnExgHGyG6H8xKTuZ7dkmeTzx1UPowgAalOL4sZLmA== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.199 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.199/0.199/0.199/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+pPwnhGsNtAMONrr3UD8Xz+QSlPZ672vA= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Feb 19 07:48:30.268010 osdx hostapd[48851]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 19 07:48:30.268049 osdx hostapd[48851]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 19 07:48:30.268862 osdx hostapd[48851]: connect[radius]: Network is unreachable Feb 19 07:48:30.268102 osdx hostapd[48851]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Feb 19 07:48:30.268106 osdx hostapd[48851]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 19 07:48:30.283763 osdx hostapd[48851]: Discovery mode enabled on eth2 Feb 19 07:48:30.283882 osdx hostapd[48851]: eth2: interface state UNINITIALIZED->ENABLED Feb 19 07:48:30.283909 osdx hostapd[48851]: eth2: AP-ENABLED Feb 19 07:48:33.431036 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Feb 19 07:48:33.431049 osdx hostapd[48852]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 19 07:48:33.451831 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication Feb 19 07:48:33.451867 osdx hostapd[48852]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 19 07:48:33.451872 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response Feb 19 07:48:33.451875 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response Feb 19 07:48:33.451891 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response Feb 19 07:48:33.451895 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Feb 19 07:48:33.451904 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 19 07:48:33.451913 osdx hostapd[48852]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 19 07:48:33.451938 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 32) Feb 19 07:48:33.452349 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=32 len=10) from STA: EAP Response-Identity (1) Feb 19 07:48:33.452363 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Feb 19 07:48:33.452399 osdx hostapd[48852]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 19 07:48:33.454814 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.454847 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.455109 osdx hostapd[48852]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 19 07:48:33.455116 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:33.455121 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:33.455143 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=33 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 19 07:48:33.455151 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 33) Feb 19 07:48:33.455395 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=33 len=6) from STA: EAP Response-unknown (3) Feb 19 07:48:33.455446 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.455460 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.455646 osdx hostapd[48852]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 19 07:48:33.455651 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:33.455654 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:33.455678 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=34 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:33.455689 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 34) Feb 19 07:48:33.456031 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=34 len=194) from STA: EAP Response-PEAP (25) Feb 19 07:48:33.456080 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.456093 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.457428 osdx hostapd[48852]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 19 07:48:33.457434 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:33.457439 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:33.457461 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=35 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:33.457468 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 35) Feb 19 07:48:33.457653 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=35 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:48:33.457700 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.457713 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.457856 osdx hostapd[48852]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 19 07:48:33.457861 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:33.457865 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:33.457881 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=36 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:33.457888 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 36) Feb 19 07:48:33.459166 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=36 len=103) from STA: EAP Response-PEAP (25) Feb 19 07:48:33.459206 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.459217 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.459564 osdx hostapd[48852]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 19 07:48:33.459570 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:33.459574 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:33.459590 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=37 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:33.459596 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 37) Feb 19 07:48:33.459809 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=37 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:48:33.459846 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.459856 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.459964 osdx hostapd[48852]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 19 07:48:33.459969 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:33.459972 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:33.459990 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=38 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:33.459997 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 38) Feb 19 07:48:33.460160 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=38 len=41) from STA: EAP Response-PEAP (25) Feb 19 07:48:33.460193 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.460201 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.460374 osdx hostapd[48852]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 19 07:48:33.460382 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:33.460385 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:33.460399 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=39 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:33.460404 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 39) Feb 19 07:48:33.460654 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=39 len=95) from STA: EAP Response-PEAP (25) Feb 19 07:48:33.460701 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.460712 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.460905 osdx hostapd[48852]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 19 07:48:33.460910 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:33.460913 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:33.460928 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=40 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:33.460933 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 40) Feb 19 07:48:33.461091 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=40 len=46) from STA: EAP Response-PEAP (25) Feb 19 07:48:33.461125 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:33.461135 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:33.751383 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:34.461221 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Feb 19 07:48:34.461257 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 19 07:48:34.461430 osdx hostapd[48852]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:48:34.461434 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:34.461438 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:34.461483 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=40 len=4) from RADIUS server: EAP Failure Feb 19 07:48:34.461508 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 40) Feb 19 07:48:34.461520 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 19 07:48:34.461523 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 19 07:48:34.461526 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Feb 19 07:48:34.461531 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 19 07:48:34.461582 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 19 07:48:34.461589 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 19 07:48:34.461602 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:34.461614 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:34.461626 osdx hostapd[48852]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:48:34.461628 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:34.461631 osdx hostapd[48852]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet Feb 19 07:48:35.461718 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Feb 19 07:48:35.461758 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 19 07:48:35.461954 osdx hostapd[48852]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 19 07:48:35.461959 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:35.461964 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:35.461969 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Feb 19 07:48:35.462019 osdx hostapd[48852]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 19 07:48:35.462022 osdx hostapd[48852]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 19 07:48:35.462025 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Feb 19 07:48:35.462028 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Feb 19 07:48:35.462036 osdx hostapd[48852]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 19 07:48:35.462039 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:35.462042 osdx hostapd[48852]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Feb 19 07:48:40.019620 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:44.247141 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:48.421106 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:52.610502 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:48:55.462768 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Feb 19 07:48:55.462782 osdx hostapd[48852]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 19 07:48:55.462786 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X Feb 19 07:48:55.462790 osdx hostapd[48852]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 19 07:48:55.462802 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 19 07:48:55.462808 osdx hostapd[48852]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 19 07:48:55.462848 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 42) Feb 19 07:48:55.463288 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=42 len=10) from STA: EAP Response-Identity (1) Feb 19 07:48:55.463300 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Feb 19 07:48:55.463363 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.463391 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:55.463648 osdx hostapd[48852]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 19 07:48:55.463653 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:55.463656 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:55.463678 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=43 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 19 07:48:55.463689 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 43) Feb 19 07:48:55.463907 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=43 len=6) from STA: EAP Response-unknown (3) Feb 19 07:48:55.463942 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.463955 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:55.464129 osdx hostapd[48852]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 19 07:48:55.464134 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:55.464138 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:55.464151 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=44 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:55.464156 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 44) Feb 19 07:48:55.464439 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=44 len=194) from STA: EAP Response-PEAP (25) Feb 19 07:48:55.464491 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.464507 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:55.465521 osdx hostapd[48852]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 19 07:48:55.465527 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:55.465535 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:55.465557 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=45 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:55.465565 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 45) Feb 19 07:48:55.465736 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=45 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:48:55.465784 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.465797 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:55.465918 osdx hostapd[48852]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 19 07:48:55.465923 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:55.465927 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:55.465944 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=46 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:55.465950 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 46) Feb 19 07:48:55.466934 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=46 len=103) from STA: EAP Response-PEAP (25) Feb 19 07:48:55.466979 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.466993 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:55.467293 osdx hostapd[48852]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 19 07:48:55.467299 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:55.467303 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:55.467320 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=47 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:55.467328 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 47) Feb 19 07:48:55.467527 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=47 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:48:55.467574 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.467587 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:55.467742 osdx hostapd[48852]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 19 07:48:55.467748 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:55.467752 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:55.467774 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=48 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:55.467782 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 48) Feb 19 07:48:55.467975 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=48 len=41) from STA: EAP Response-PEAP (25) Feb 19 07:48:55.468029 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.468043 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:55.468184 osdx hostapd[48852]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 19 07:48:55.468189 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:55.468193 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:55.468207 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=49 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:55.468214 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 49) Feb 19 07:48:55.468422 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=49 len=95) from STA: EAP Response-PEAP (25) Feb 19 07:48:55.468460 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.468471 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:55.468634 osdx hostapd[48852]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 19 07:48:55.468639 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:55.468643 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:55.468660 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:48:55.468668 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 50) Feb 19 07:48:55.468847 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=50 len=46) from STA: EAP Response-PEAP (25) Feb 19 07:48:55.468893 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:55.468906 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:56.469450 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Feb 19 07:48:56.469483 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 19 07:48:56.469493 osdx hostapd[48852]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:48:56.469498 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:56.469503 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:48:56.469555 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=50 len=4) from RADIUS server: EAP Failure Feb 19 07:48:56.469585 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 50) Feb 19 07:48:56.469599 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 19 07:48:56.469604 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 19 07:48:56.469608 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Feb 19 07:48:56.469639 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 19 07:48:56.469673 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 19 07:48:56.469682 osdx hostapd[48852]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 19 07:48:56.469704 osdx hostapd[48852]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:48:56.469714 osdx hostapd[48852]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:48:56.469729 osdx hostapd[48852]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:48:56.469735 osdx hostapd[48852]: eth2: RADIUS Received RADIUS message Feb 19 07:48:56.469738 osdx hostapd[48852]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Test Quiet Period In MAB-First Mode
Description
This scenario shows how to configure the quiet period in a device with MAB-802.1X authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode MAB-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX185Cc1rYIs/w11LB1al1VeSH3DvcZcWla4lDoVonFVdONOke8sk+erEafKZUtf1NizW3Mwbw93mkQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.221 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.221/0.221/0.221/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+lzpLKh/s9nwe2SpSHRLX623yEJ1YCjLg= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Feb 19 07:49:04.336965 osdx hostapd[49416]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Feb 19 07:49:04.336978 osdx hostapd[49416]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 19 07:49:04.337207 osdx hostapd[49416]: connect[radius]: Network is unreachable Feb 19 07:49:04.337017 osdx hostapd[49416]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Feb 19 07:49:04.337022 osdx hostapd[49416]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Feb 19 07:49:04.352828 osdx hostapd[49416]: Discovery mode enabled on eth2 Feb 19 07:49:04.352891 osdx hostapd[49416]: eth2: interface state UNINITIALIZED->ENABLED Feb 19 07:49:04.352891 osdx hostapd[49416]: eth2: AP-ENABLED Feb 19 07:49:07.563128 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Feb 19 07:49:07.563147 osdx hostapd[49417]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Feb 19 07:49:07.576904 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication Feb 19 07:49:07.576934 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Feb 19 07:49:07.576947 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Feb 19 07:49:07.578579 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Feb 19 07:49:07.578590 osdx hostapd[49417]: eth2: RADIUS Authentication server 10.215.168.1:1812 Feb 19 07:49:07.578660 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:07.578688 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:07.578709 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Feb 19 07:49:07.851129 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:49:08.578777 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Feb 19 07:49:08.578813 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 19 07:49:08.578970 osdx hostapd[49417]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 19 07:49:08.578974 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.578978 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.578983 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Feb 19 07:49:08.579029 osdx hostapd[49417]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Feb 19 07:49:08.579032 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X Feb 19 07:49:08.579036 osdx hostapd[49417]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Feb 19 07:49:08.579040 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started Feb 19 07:49:08.579046 osdx hostapd[49417]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 19 07:49:08.579064 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 227) Feb 19 07:49:08.579079 osdx hostapd[49417]: eth2: RADIUS Received 20 bytes from RADIUS server Feb 19 07:49:08.579082 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.579085 osdx hostapd[49417]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet Feb 19 07:49:08.579436 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=227 len=10) from STA: EAP Response-Identity (1) Feb 19 07:49:08.579452 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Feb 19 07:49:08.579509 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.579524 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:08.579702 osdx hostapd[49417]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 19 07:49:08.579708 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.579712 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.579738 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=228 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 19 07:49:08.579745 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 228) Feb 19 07:49:08.579942 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=228 len=6) from STA: EAP Response-unknown (3) Feb 19 07:49:08.579985 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.579998 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:08.580149 osdx hostapd[49417]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 19 07:49:08.580154 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.580157 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.580173 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=229 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:08.580179 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 229) Feb 19 07:49:08.580458 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=229 len=194) from STA: EAP Response-PEAP (25) Feb 19 07:49:08.580497 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.580508 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:08.581756 osdx hostapd[49417]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 19 07:49:08.581765 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.581776 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.581815 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=230 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:08.581825 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 230) Feb 19 07:49:08.582062 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=230 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:49:08.582118 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.582132 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:08.582312 osdx hostapd[49417]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 19 07:49:08.582324 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.582331 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.582380 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=231 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:08.582394 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 231) Feb 19 07:49:08.584152 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=231 len=103) from STA: EAP Response-PEAP (25) Feb 19 07:49:08.584221 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.584246 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:08.584704 osdx hostapd[49417]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 19 07:49:08.584713 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.584719 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.584758 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=232 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:08.584778 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 232) Feb 19 07:49:08.585130 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=232 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:49:08.585185 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.585201 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:08.585354 osdx hostapd[49417]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 19 07:49:08.585361 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.585365 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.585383 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=233 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:08.585390 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 233) Feb 19 07:49:08.585645 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=233 len=41) from STA: EAP Response-PEAP (25) Feb 19 07:49:08.585698 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.585716 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:08.585930 osdx hostapd[49417]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 19 07:49:08.585938 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.585943 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.585966 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=234 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:08.585976 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 234) Feb 19 07:49:08.586321 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=234 len=95) from STA: EAP Response-PEAP (25) Feb 19 07:49:08.586369 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.586382 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:08.586640 osdx hostapd[49417]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 19 07:49:08.586649 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:08.586655 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:08.586686 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=235 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:08.586695 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 235) Feb 19 07:49:08.587006 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=235 len=46) from STA: EAP Response-PEAP (25) Feb 19 07:49:08.587062 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:08.587081 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:09.587166 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Feb 19 07:49:09.587195 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 19 07:49:09.587331 osdx hostapd[49417]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:49:09.587335 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:09.587338 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:09.587378 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=235 len=4) from RADIUS server: EAP Failure Feb 19 07:49:09.587401 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 235) Feb 19 07:49:09.587414 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 19 07:49:09.587433 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 19 07:49:09.587438 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Feb 19 07:49:09.587443 osdx hostapd[49417]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:49:09.587450 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:09.587452 osdx hostapd[49417]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Feb 19 07:49:14.133282 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:49:18.286657 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:49:22.464749 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:49:26.625347 osdx OSDxCLI[6022]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Feb 19 07:49:29.596819 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Feb 19 07:49:29.596831 osdx hostapd[49417]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Feb 19 07:49:29.596872 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 30) Feb 19 07:49:29.597242 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=30 len=10) from STA: EAP Response-Identity (1) Feb 19 07:49:29.597252 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Feb 19 07:49:29.597315 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.597342 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:29.597561 osdx hostapd[49417]: eth2: RADIUS Received 80 bytes from RADIUS server Feb 19 07:49:29.597565 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:29.597569 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:29.597586 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=31 len=22) from RADIUS server: EAP-Request-MD5 (4) Feb 19 07:49:29.597591 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 31) Feb 19 07:49:29.597752 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=31 len=6) from STA: EAP Response-unknown (3) Feb 19 07:49:29.597790 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.597804 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:29.597983 osdx hostapd[49417]: eth2: RADIUS Received 64 bytes from RADIUS server Feb 19 07:49:29.597988 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:29.597992 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:29.598007 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=32 len=6) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:29.598013 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 32) Feb 19 07:49:29.598245 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=32 len=194) from STA: EAP Response-PEAP (25) Feb 19 07:49:29.598278 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.598288 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:29.599566 osdx hostapd[49417]: eth2: RADIUS Received 1068 bytes from RADIUS server Feb 19 07:49:29.599572 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:29.599575 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:29.599592 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=33 len=1004) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:29.599598 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 33) Feb 19 07:49:29.599770 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=33 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:49:29.599832 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.599847 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:29.599962 osdx hostapd[49417]: eth2: RADIUS Received 229 bytes from RADIUS server Feb 19 07:49:29.599968 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:29.599972 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:29.599988 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=34 len=171) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:29.599994 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 34) Feb 19 07:49:29.600928 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=34 len=103) from STA: EAP Response-PEAP (25) Feb 19 07:49:29.600966 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.600978 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:29.601253 osdx hostapd[49417]: eth2: RADIUS Received 115 bytes from RADIUS server Feb 19 07:49:29.601259 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:29.601262 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:29.601277 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=35 len=57) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:29.601283 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 35) Feb 19 07:49:29.601511 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=35 len=6) from STA: EAP Response-PEAP (25) Feb 19 07:49:29.601557 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.601570 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:29.601690 osdx hostapd[49417]: eth2: RADIUS Received 98 bytes from RADIUS server Feb 19 07:49:29.601694 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:29.601698 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:29.601712 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=36 len=40) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:29.601717 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 36) Feb 19 07:49:29.601872 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=36 len=41) from STA: EAP Response-PEAP (25) Feb 19 07:49:29.601901 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.601911 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:29.602042 osdx hostapd[49417]: eth2: RADIUS Received 131 bytes from RADIUS server Feb 19 07:49:29.602047 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:29.602049 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:29.602063 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=37 len=73) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:29.602068 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 37) Feb 19 07:49:29.602284 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=37 len=95) from STA: EAP Response-PEAP (25) Feb 19 07:49:29.602309 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.602318 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:29.602490 osdx hostapd[49417]: eth2: RADIUS Received 104 bytes from RADIUS server Feb 19 07:49:29.602495 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:29.602497 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:29.602507 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=38 len=46) from RADIUS server: EAP-Request-PEAP (25) Feb 19 07:49:29.602511 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 38) Feb 19 07:49:29.602636 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=38 len=46) from STA: EAP Response-PEAP (25) Feb 19 07:49:29.602660 osdx hostapd[49417]: eth2: RADIUS Sending RADIUS message to authentication server Feb 19 07:49:29.602670 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Feb 19 07:49:30.602755 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Feb 19 07:49:30.602789 osdx hostapd[49417]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Feb 19 07:49:30.602952 osdx hostapd[49417]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:49:30.602956 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:30.602959 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Feb 19 07:49:30.603002 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=38 len=4) from RADIUS server: EAP Failure Feb 19 07:49:30.603026 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 38) Feb 19 07:49:30.603040 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Feb 19 07:49:30.603044 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Feb 19 07:49:30.603047 osdx hostapd[49417]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Feb 19 07:49:30.603052 osdx hostapd[49417]: eth2: RADIUS Received 44 bytes from RADIUS server Feb 19 07:49:30.603059 osdx hostapd[49417]: eth2: RADIUS Received RADIUS message Feb 19 07:49:30.603062 osdx hostapd[49417]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet