Quiet Period

Contents

This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.

Test Quiet Period In 802.1X Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1x authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode only-802.1x
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX18V1fmmsWh/mRKACmpmIplNCFydn83VFzLkyTNFCSoJCsNHiPA3NJCgrxnsgJtH94a5lXk08VUNGw==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.275 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.275/0.275/0.275/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+KW+nsdGgB8Edu8QEI4N2fVpkWFs07Llg=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Authentication failed, enforcing quiet period

Show output

Mar 20 09:29:16.410219 osdx hostapd[111220]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Mar 20 09:29:16.410234 osdx hostapd[111220]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 20 09:29:16.410516 osdx hostapd[111220]: connect[radius]: Network is unreachable
Mar 20 09:29:16.410275 osdx hostapd[111220]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2
Mar 20 09:29:16.410278 osdx hostapd[111220]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Mar 20 09:29:16.434084 osdx hostapd[111220]: Discovery mode enabled on eth2
Mar 20 09:29:16.434194 osdx hostapd[111220]: eth2: interface state UNINITIALIZED->ENABLED
Mar 20 09:29:16.434194 osdx hostapd[111220]: eth2: AP-ENABLED
Mar 20 09:29:18.059259 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:19.895858 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added
Mar 20 09:29:19.895873 osdx hostapd[111221]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Mar 20 09:29:19.910130 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication
Mar 20 09:29:19.910162 osdx hostapd[111221]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Mar 20 09:29:19.910181 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA
Mar 20 09:29:19.910192 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port
Mar 20 09:29:19.910205 osdx hostapd[111221]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 20 09:29:19.910230 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 134)
Mar 20 09:29:19.910713 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=134 len=10) from STA: EAP Response-Identity (1)
Mar 20 09:29:19.910727 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong'
Mar 20 09:29:19.910754 osdx hostapd[111221]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 20 09:29:19.913262 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.913300 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:19.913606 osdx hostapd[111221]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 20 09:29:19.913614 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:19.913619 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:19.913644 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=135 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 20 09:29:19.913653 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 135)
Mar 20 09:29:19.913963 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=135 len=6) from STA: EAP Response-unknown (3)
Mar 20 09:29:19.914039 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.914310 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:19.914320 osdx hostapd[111221]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 20 09:29:19.914323 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:19.914328 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:19.914358 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=136 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:19.914368 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 136)
Mar 20 09:29:19.914837 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=136 len=194) from STA: EAP Response-PEAP (25)
Mar 20 09:29:19.914910 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.914969 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:19.916059 osdx hostapd[111221]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 20 09:29:19.916068 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:19.916072 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:19.916098 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=137 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:19.916107 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 137)
Mar 20 09:29:19.916426 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=137 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:29:19.916495 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.916512 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:19.916683 osdx hostapd[111221]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 20 09:29:19.916691 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:19.916696 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:19.916716 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=138 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:19.916729 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 138)
Mar 20 09:29:19.918256 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=138 len=103) from STA: EAP Response-PEAP (25)
Mar 20 09:29:19.918315 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.918330 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:19.918703 osdx hostapd[111221]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 20 09:29:19.918713 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:19.918717 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:19.918739 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=139 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:19.918745 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 139)
Mar 20 09:29:19.919065 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=139 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:29:19.919106 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.919125 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:19.919283 osdx hostapd[111221]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 20 09:29:19.919289 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:19.919292 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:19.919310 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=140 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:19.919316 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 140)
Mar 20 09:29:19.919527 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=140 len=41) from STA: EAP Response-PEAP (25)
Mar 20 09:29:19.919571 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.919586 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:19.919783 osdx hostapd[111221]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 20 09:29:19.919792 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:19.919796 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:19.919816 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=141 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:19.919823 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 141)
Mar 20 09:29:19.920171 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=141 len=95) from STA: EAP Response-PEAP (25)
Mar 20 09:29:19.920217 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.920286 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:19.920471 osdx hostapd[111221]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 20 09:29:19.920474 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:19.920478 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:19.920495 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=142 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:19.920508 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 142)
Mar 20 09:29:19.920728 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=142 len=46) from STA: EAP Response-PEAP (25)
Mar 20 09:29:19.920775 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:19.920789 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:20.197333 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:20.920917 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8)
Mar 20 09:29:20.920958 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 20 09:29:20.921187 osdx hostapd[111221]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:29:20.921194 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:20.921201 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:20.921259 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=142 len=4) from RADIUS server: EAP Failure
Mar 20 09:29:20.921295 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 142)
Mar 20 09:29:20.921310 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port
Mar 20 09:29:20.921315 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 20 09:29:20.921318 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Mar 20 09:29:20.921325 osdx hostapd[111221]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:29:20.921328 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:20.921331 osdx hostapd[111221]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Mar 20 09:29:22.599595 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:24.709774 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:26.789034 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:28.871170 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:30.986648 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:33.061615 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:35.163083 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:37.239693 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:39.313937 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:40.929160 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Mar 20 09:29:40.929172 osdx hostapd[111221]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 20 09:29:40.929210 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 215)
Mar 20 09:29:40.929601 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=215 len=10) from STA: EAP Response-Identity (1)
Mar 20 09:29:40.929612 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong'
Mar 20 09:29:40.929677 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.929697 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:40.929927 osdx hostapd[111221]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 20 09:29:40.929932 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:40.929935 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:40.929953 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=216 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 20 09:29:40.929959 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 216)
Mar 20 09:29:40.930120 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=216 len=6) from STA: EAP Response-unknown (3)
Mar 20 09:29:40.930151 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.930162 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:40.930324 osdx hostapd[111221]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 20 09:29:40.930328 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:40.930331 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:40.930347 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=217 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:40.930352 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 217)
Mar 20 09:29:40.930585 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=217 len=194) from STA: EAP Response-PEAP (25)
Mar 20 09:29:40.930615 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.930624 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:40.931885 osdx hostapd[111221]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 20 09:29:40.931899 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:40.931909 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:40.931957 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=218 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:40.931972 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 218)
Mar 20 09:29:40.932300 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=218 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:29:40.932332 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.932342 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:40.932436 osdx hostapd[111221]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 20 09:29:40.932442 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:40.932445 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:40.932457 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=219 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:40.932462 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 219)
Mar 20 09:29:40.933509 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=219 len=103) from STA: EAP Response-PEAP (25)
Mar 20 09:29:40.933565 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.933580 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:40.934109 osdx hostapd[111221]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 20 09:29:40.934127 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:40.934133 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:40.934184 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=220 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:40.934195 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 220)
Mar 20 09:29:40.934496 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=220 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:29:40.934531 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.934543 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:40.934659 osdx hostapd[111221]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 20 09:29:40.934664 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:40.934667 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:40.934686 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=221 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:40.934692 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 221)
Mar 20 09:29:40.934848 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=221 len=41) from STA: EAP Response-PEAP (25)
Mar 20 09:29:40.934883 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.934894 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:40.935031 osdx hostapd[111221]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 20 09:29:40.935036 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:40.935038 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:40.935051 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=222 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:40.935057 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 222)
Mar 20 09:29:40.935233 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=222 len=95) from STA: EAP Response-PEAP (25)
Mar 20 09:29:40.935264 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.935273 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:40.935417 osdx hostapd[111221]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 20 09:29:40.935422 osdx hostapd[111221]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:40.935425 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:40.935438 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=223 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:29:40.935443 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 223)
Mar 20 09:29:40.935635 osdx hostapd[111221]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=223 len=46) from STA: EAP Response-PEAP (25)
Mar 20 09:29:40.935667 osdx hostapd[111221]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:40.935677 osdx hostapd[111221]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds

---

Test Quiet Period In MAB Mode

Description

This scenario shows how to configure the quiet period in a device with MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode only-MAB
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19wbjt+hdBAZa/Sx1wbtlSEO5YnstC8U2W4K5hBuL2iHyrKxkQvK5o4TYr65gIGnL6jzOZmSTbhMA==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.184 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.184/0.184/0.184/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

MAB: Authentication failed, entering held state

Show output

Mar 20 09:29:48.344530 osdx hostapd[111801]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Mar 20 09:29:48.344550 osdx hostapd[111801]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 20 09:29:48.344850 osdx hostapd[111801]: connect[radius]: Network is unreachable
Mar 20 09:29:48.344601 osdx hostapd[111801]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5
Mar 20 09:29:48.344604 osdx hostapd[111801]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Mar 20 09:29:48.364361 osdx hostapd[111801]: Discovery mode enabled on eth2
Mar 20 09:29:48.364452 osdx hostapd[111801]: eth2: interface state UNINITIALIZED->ENABLED
Mar 20 09:29:48.364452 osdx hostapd[111801]: eth2: AP-ENABLED
Mar 20 09:29:51.619378 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:29:53.367511 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication
Mar 20 09:29:53.367543 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Mar 20 09:29:53.367551 osdx hostapd[111802]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Mar 20 09:29:53.380404 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication
Mar 20 09:29:53.380435 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 20 09:29:53.380450 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 20 09:29:53.382239 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 20 09:29:53.382250 osdx hostapd[111802]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 20 09:29:53.382327 osdx hostapd[111802]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:29:53.382450 osdx hostapd[111802]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:29:54.382534 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Mar 20 09:29:54.382569 osdx hostapd[111802]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 20 09:29:54.382854 osdx hostapd[111802]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 20 09:29:54.382860 osdx hostapd[111802]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:54.382865 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:29:54.382869 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Mar 20 09:29:54.382920 osdx hostapd[111802]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 20 09:29:54.382923 osdx hostapd[111802]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 20 09:29:54.382927 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Mar 20 09:29:54.382930 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Mar 20 09:29:54.382937 osdx hostapd[111802]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 20 09:29:54.382940 osdx hostapd[111802]: eth2: RADIUS Received RADIUS message
Mar 20 09:29:54.382944 osdx hostapd[111802]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Mar 20 09:29:57.888776 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:02.090391 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:06.261463 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:10.438397 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:14.383484 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Mar 20 09:30:14.383496 osdx hostapd[111802]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 20 09:30:14.383500 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB
Mar 20 09:30:14.383503 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 20 09:30:14.383571 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 20 09:30:14.383603 osdx hostapd[111802]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 20 09:30:14.383629 osdx hostapd[111802]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:14.383768 osdx hostapd[111802]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds

---

Test Quiet Period In MAB-Fallback Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1X-MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode 802.1x-MAB
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1+S5iYM2niHCixCzCNDBmd4cpVJXj0gR1CMHXJvxX9E+p6U8ZpBPif5vztEu/lKtBwaMLoWV0RQNg==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.471 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.471/0.471/0.471/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19cmruffQxUuQDuDeUwe3Zia51P8DyirRA=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

MAB: Authentication failed, entering held state

Show output

Mar 20 09:30:21.369338 osdx hostapd[112358]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Mar 20 09:30:21.369353 osdx hostapd[112358]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 20 09:30:21.369597 osdx hostapd[112358]: connect[radius]: Network is unreachable
Mar 20 09:30:21.369404 osdx hostapd[112358]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Mar 20 09:30:21.369409 osdx hostapd[112358]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Mar 20 09:30:21.401167 osdx hostapd[112358]: Discovery mode enabled on eth2
Mar 20 09:30:21.401232 osdx hostapd[112358]: eth2: interface state UNINITIALIZED->ENABLED
Mar 20 09:30:21.401232 osdx hostapd[112358]: eth2: AP-ENABLED
Mar 20 09:30:24.548882 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Mar 20 09:30:24.548895 osdx hostapd[112359]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Mar 20 09:30:24.561168 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication
Mar 20 09:30:24.561194 osdx hostapd[112359]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Mar 20 09:30:24.561198 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response
Mar 20 09:30:24.561200 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response
Mar 20 09:30:24.561213 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response
Mar 20 09:30:24.561215 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Mar 20 09:30:24.561230 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 20 09:30:24.561237 osdx hostapd[112359]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 20 09:30:24.561255 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 52)
Mar 20 09:30:24.561569 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=52 len=10) from STA: EAP Response-Identity (1)
Mar 20 09:30:24.561583 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Mar 20 09:30:24.561617 osdx hostapd[112359]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 20 09:30:24.563747 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.563775 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.564008 osdx hostapd[112359]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 20 09:30:24.564014 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:24.564018 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:24.564038 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 20 09:30:24.564046 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 53)
Mar 20 09:30:24.564236 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=53 len=6) from STA: EAP Response-unknown (3)
Mar 20 09:30:24.564279 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.564292 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.564445 osdx hostapd[112359]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 20 09:30:24.564451 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:24.564454 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:24.564468 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=54 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:24.564474 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 54)
Mar 20 09:30:24.564787 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=54 len=194) from STA: EAP Response-PEAP (25)
Mar 20 09:30:24.564827 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.564837 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.565795 osdx hostapd[112359]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 20 09:30:24.565801 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:24.565805 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:24.565823 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=55 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:24.565829 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 55)
Mar 20 09:30:24.565995 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=55 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:30:24.566030 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.566040 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.566164 osdx hostapd[112359]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 20 09:30:24.566169 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:24.566173 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:24.566187 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=56 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:24.566194 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 56)
Mar 20 09:30:24.567418 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=56 len=103) from STA: EAP Response-PEAP (25)
Mar 20 09:30:24.567453 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.567461 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.567744 osdx hostapd[112359]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 20 09:30:24.567750 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:24.567754 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:24.567768 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=57 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:24.567774 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 57)
Mar 20 09:30:24.567982 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=57 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:30:24.568016 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.568026 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.568157 osdx hostapd[112359]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 20 09:30:24.568163 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:24.568167 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:24.568181 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=58 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:24.568187 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 58)
Mar 20 09:30:24.568311 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=58 len=41) from STA: EAP Response-PEAP (25)
Mar 20 09:30:24.568341 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.568350 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.568463 osdx hostapd[112359]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 20 09:30:24.568468 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:24.568471 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:24.568483 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=59 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:24.568489 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 59)
Mar 20 09:30:24.568676 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=59 len=95) from STA: EAP Response-PEAP (25)
Mar 20 09:30:24.568709 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.568717 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.568886 osdx hostapd[112359]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 20 09:30:24.568891 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:24.568895 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:24.568907 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=60 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:24.568913 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 60)
Mar 20 09:30:24.569069 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=60 len=46) from STA: EAP Response-PEAP (25)
Mar 20 09:30:24.569105 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:24.569112 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:24.885105 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:25.569226 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Mar 20 09:30:25.569269 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 20 09:30:25.569403 osdx hostapd[112359]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:30:25.569408 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:25.569413 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:25.569464 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=60 len=4) from RADIUS server: EAP Failure
Mar 20 09:30:25.569494 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 60)
Mar 20 09:30:25.569508 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 20 09:30:25.569513 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 20 09:30:25.569516 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Mar 20 09:30:25.569522 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 20 09:30:25.569553 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 20 09:30:25.569561 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 20 09:30:25.569575 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:25.569640 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:25.569656 osdx hostapd[112359]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:30:25.569659 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:25.569662 osdx hostapd[112359]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Mar 20 09:30:26.569743 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Mar 20 09:30:26.569784 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 20 09:30:26.569946 osdx hostapd[112359]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 20 09:30:26.569953 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:26.569958 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:26.569963 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Mar 20 09:30:26.570022 osdx hostapd[112359]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 20 09:30:26.570025 osdx hostapd[112359]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 20 09:30:26.570029 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Mar 20 09:30:26.570033 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Mar 20 09:30:26.570042 osdx hostapd[112359]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 20 09:30:26.570045 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:26.570048 osdx hostapd[112359]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Mar 20 09:30:31.174204 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:35.340390 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:39.501287 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:43.672820 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:46.570273 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Mar 20 09:30:46.570284 osdx hostapd[112359]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 20 09:30:46.570286 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X
Mar 20 09:30:46.570290 osdx hostapd[112359]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Mar 20 09:30:46.570302 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 20 09:30:46.570307 osdx hostapd[112359]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 20 09:30:46.570346 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 210)
Mar 20 09:30:46.570792 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=210 len=10) from STA: EAP Response-Identity (1)
Mar 20 09:30:46.570803 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Mar 20 09:30:46.570868 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.570892 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:46.571147 osdx hostapd[112359]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 20 09:30:46.571154 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:46.571158 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:46.571186 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=211 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 20 09:30:46.571194 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 211)
Mar 20 09:30:46.571370 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=211 len=6) from STA: EAP Response-unknown (3)
Mar 20 09:30:46.571410 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.571424 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:46.571574 osdx hostapd[112359]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 20 09:30:46.571580 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:46.571584 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:46.571600 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=212 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:46.571606 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 212)
Mar 20 09:30:46.571828 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=212 len=194) from STA: EAP Response-PEAP (25)
Mar 20 09:30:46.571863 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.571872 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:46.572832 osdx hostapd[112359]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 20 09:30:46.572838 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:46.572842 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:46.572860 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=213 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:46.572867 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 213)
Mar 20 09:30:46.573013 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=213 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:30:46.573049 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.573060 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:46.573177 osdx hostapd[112359]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 20 09:30:46.573182 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:46.573186 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:46.573201 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=214 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:46.573207 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 214)
Mar 20 09:30:46.574130 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=214 len=103) from STA: EAP Response-PEAP (25)
Mar 20 09:30:46.574167 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.574176 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:46.574442 osdx hostapd[112359]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 20 09:30:46.574446 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:46.574449 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:46.574461 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=215 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:46.574466 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 215)
Mar 20 09:30:46.574693 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=215 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:30:46.574722 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.574731 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:46.574858 osdx hostapd[112359]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 20 09:30:46.574863 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:46.574866 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:46.574880 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=216 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:46.574886 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 216)
Mar 20 09:30:46.575063 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=216 len=41) from STA: EAP Response-PEAP (25)
Mar 20 09:30:46.575097 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.575106 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:46.575238 osdx hostapd[112359]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 20 09:30:46.575242 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:46.575245 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:46.575257 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=217 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:46.575262 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 217)
Mar 20 09:30:46.575479 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=217 len=95) from STA: EAP Response-PEAP (25)
Mar 20 09:30:46.575507 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.575514 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:46.575686 osdx hostapd[112359]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 20 09:30:46.575691 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:46.575694 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:46.575706 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=218 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:46.575710 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 218)
Mar 20 09:30:46.575857 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=218 len=46) from STA: EAP Response-PEAP (25)
Mar 20 09:30:46.575884 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:46.575892 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:47.576273 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Mar 20 09:30:47.576314 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 20 09:30:47.576504 osdx hostapd[112359]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:30:47.576509 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:47.576515 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:47.576570 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=218 len=4) from RADIUS server: EAP Failure
Mar 20 09:30:47.576605 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 218)
Mar 20 09:30:47.576620 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 20 09:30:47.576625 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 20 09:30:47.576629 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Mar 20 09:30:47.576635 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 20 09:30:47.576665 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 20 09:30:47.576674 osdx hostapd[112359]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 20 09:30:47.576687 osdx hostapd[112359]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:47.576704 osdx hostapd[112359]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:47.576718 osdx hostapd[112359]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:30:47.576722 osdx hostapd[112359]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:47.576725 osdx hostapd[112359]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet

---

Test Quiet Period In MAB-First Mode

Description

This scenario shows how to configure the quiet period in a device with MAB-802.1X authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode MAB-802.1x
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX18DYoZll1k/lkXH/Dcl7kWli2lV5NebM48TIcteb6odSCMxscZG4EsXH4ALOmiLq3PgLM2NMjo19w==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.230 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.230/0.230/0.230/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+/ZQhfeX2V9ioHxgcLHZ4irMKF5Rf8k+k=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Authentication failed, enforcing quiet period

Show output

Mar 20 09:30:54.344222 osdx hostapd[112922]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Mar 20 09:30:54.344246 osdx hostapd[112922]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 20 09:30:54.344603 osdx hostapd[112922]: connect[radius]: Network is unreachable
Mar 20 09:30:54.344304 osdx hostapd[112922]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Mar 20 09:30:54.344308 osdx hostapd[112922]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Mar 20 09:30:54.359972 osdx hostapd[112922]: Discovery mode enabled on eth2
Mar 20 09:30:54.360090 osdx hostapd[112922]: eth2: interface state UNINITIALIZED->ENABLED
Mar 20 09:30:54.360090 osdx hostapd[112922]: eth2: AP-ENABLED
Mar 20 09:30:57.655680 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Mar 20 09:30:57.655693 osdx hostapd[112923]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Mar 20 09:30:57.672017 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication
Mar 20 09:30:57.672053 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 20 09:30:57.672073 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 20 09:30:57.674437 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 20 09:30:57.674451 osdx hostapd[112923]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 20 09:30:57.674541 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:57.674576 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:57.674611 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Mar 20 09:30:57.936411 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:30:58.674658 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Mar 20 09:30:58.674694 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 20 09:30:58.674876 osdx hostapd[112923]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 20 09:30:58.674880 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.674885 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.674889 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Mar 20 09:30:58.674940 osdx hostapd[112923]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 20 09:30:58.674942 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X
Mar 20 09:30:58.674946 osdx hostapd[112923]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Mar 20 09:30:58.674948 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started
Mar 20 09:30:58.674954 osdx hostapd[112923]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 20 09:30:58.674967 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 165)
Mar 20 09:30:58.674981 osdx hostapd[112923]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 20 09:30:58.674984 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.674987 osdx hostapd[112923]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Mar 20 09:30:58.675360 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=165 len=10) from STA: EAP Response-Identity (1)
Mar 20 09:30:58.675375 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Mar 20 09:30:58.675434 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.675451 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:58.675700 osdx hostapd[112923]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 20 09:30:58.675706 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.675709 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.675740 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=166 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 20 09:30:58.675747 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 166)
Mar 20 09:30:58.675999 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=166 len=6) from STA: EAP Response-unknown (3)
Mar 20 09:30:58.676058 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.676114 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:58.676320 osdx hostapd[112923]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 20 09:30:58.676326 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.676331 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.676353 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=167 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:58.676361 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 167)
Mar 20 09:30:58.676712 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=167 len=194) from STA: EAP Response-PEAP (25)
Mar 20 09:30:58.676762 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.676787 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:58.678185 osdx hostapd[112923]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 20 09:30:58.678193 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.678198 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.678257 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=168 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:58.678267 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 168)
Mar 20 09:30:58.678520 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=168 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:30:58.678586 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.678605 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:58.678788 osdx hostapd[112923]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 20 09:30:58.678795 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.678799 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.678818 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=169 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:58.678826 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 169)
Mar 20 09:30:58.680289 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=169 len=103) from STA: EAP Response-PEAP (25)
Mar 20 09:30:58.680367 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.680384 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:58.680858 osdx hostapd[112923]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 20 09:30:58.680865 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.680869 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.680891 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=170 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:58.680898 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 170)
Mar 20 09:30:58.681264 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=170 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:30:58.681320 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.681390 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:58.681515 osdx hostapd[112923]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 20 09:30:58.681521 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.681526 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.681545 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=171 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:58.681551 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 171)
Mar 20 09:30:58.681747 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=171 len=41) from STA: EAP Response-PEAP (25)
Mar 20 09:30:58.681792 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.681834 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:58.681986 osdx hostapd[112923]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 20 09:30:58.681993 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.681998 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.682026 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=172 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:58.682033 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 172)
Mar 20 09:30:58.682324 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=172 len=95) from STA: EAP Response-PEAP (25)
Mar 20 09:30:58.682373 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.682388 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:58.682612 osdx hostapd[112923]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 20 09:30:58.682620 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:58.682624 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:58.682646 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=173 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:30:58.682654 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 173)
Mar 20 09:30:58.682933 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=173 len=46) from STA: EAP Response-PEAP (25)
Mar 20 09:30:58.682986 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:30:58.683004 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:30:59.683041 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Mar 20 09:30:59.683080 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 20 09:30:59.683231 osdx hostapd[112923]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:30:59.683236 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:59.683241 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:30:59.683289 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=173 len=4) from RADIUS server: EAP Failure
Mar 20 09:30:59.683314 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 173)
Mar 20 09:30:59.683391 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 20 09:30:59.683406 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 20 09:30:59.683409 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Mar 20 09:30:59.683415 osdx hostapd[112923]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:30:59.683418 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:30:59.683421 osdx hostapd[112923]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Mar 20 09:31:04.193888 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:31:08.387357 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:31:12.595046 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:31:16.766176 osdx OSDxCLI[81197]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 20 09:31:19.692060 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Mar 20 09:31:19.692073 osdx hostapd[112923]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 20 09:31:19.692105 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 122)
Mar 20 09:31:19.692603 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=122 len=10) from STA: EAP Response-Identity (1)
Mar 20 09:31:19.692615 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Mar 20 09:31:19.692688 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.692713 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:19.692996 osdx hostapd[112923]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 20 09:31:19.693001 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:19.693005 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:19.693032 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=123 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 20 09:31:19.693037 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 123)
Mar 20 09:31:19.693239 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=123 len=6) from STA: EAP Response-unknown (3)
Mar 20 09:31:19.693279 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.693294 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:19.693538 osdx hostapd[112923]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 20 09:31:19.693544 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:19.693547 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:19.693564 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=124 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:31:19.693570 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 124)
Mar 20 09:31:19.693925 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=124 len=194) from STA: EAP Response-PEAP (25)
Mar 20 09:31:19.693971 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.693984 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:19.695017 osdx hostapd[112923]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 20 09:31:19.695023 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:19.695026 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:19.695048 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=125 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:31:19.695059 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 125)
Mar 20 09:31:19.695286 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=125 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:31:19.695343 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.695361 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:19.695542 osdx hostapd[112923]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 20 09:31:19.695547 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:19.695550 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:19.695564 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=126 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:31:19.695570 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 126)
Mar 20 09:31:19.697075 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=126 len=103) from STA: EAP Response-PEAP (25)
Mar 20 09:31:19.697129 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.697145 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:19.697595 osdx hostapd[112923]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 20 09:31:19.697600 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:19.697603 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:19.697625 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=127 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:31:19.697630 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 127)
Mar 20 09:31:19.697913 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=127 len=6) from STA: EAP Response-PEAP (25)
Mar 20 09:31:19.697963 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.697975 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:19.698151 osdx hostapd[112923]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 20 09:31:19.698156 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:19.698159 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:19.698176 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=128 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:31:19.698182 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 128)
Mar 20 09:31:19.698406 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=128 len=41) from STA: EAP Response-PEAP (25)
Mar 20 09:31:19.698445 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.698458 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:19.698645 osdx hostapd[112923]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 20 09:31:19.698655 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:19.698660 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:19.698688 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=129 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:31:19.698697 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 129)
Mar 20 09:31:19.699124 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=129 len=95) from STA: EAP Response-PEAP (25)
Mar 20 09:31:19.699168 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.699181 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:19.699411 osdx hostapd[112923]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 20 09:31:19.699417 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:19.699421 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:19.699438 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=130 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 20 09:31:19.699444 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 130)
Mar 20 09:31:19.699660 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=130 len=46) from STA: EAP Response-PEAP (25)
Mar 20 09:31:19.699715 osdx hostapd[112923]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 20 09:31:19.699732 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 20 09:31:20.699821 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Mar 20 09:31:20.699853 osdx hostapd[112923]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 20 09:31:20.700034 osdx hostapd[112923]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:31:20.700039 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:20.700044 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 20 09:31:20.700096 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=130 len=4) from RADIUS server: EAP Failure
Mar 20 09:31:20.700127 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 130)
Mar 20 09:31:20.700143 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 20 09:31:20.700147 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 20 09:31:20.700151 osdx hostapd[112923]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Mar 20 09:31:20.700156 osdx hostapd[112923]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 20 09:31:20.700160 osdx hostapd[112923]: eth2: RADIUS Received RADIUS message
Mar 20 09:31:20.700163 osdx hostapd[112923]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet

---