Quiet Period

This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.

../../../../../_images/topologydut0dut1.svg

Test Quiet Period In 802.1X Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1x authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode only-802.1x
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19QhbXs9nRHKUHjySjNPNK7kTq5uACDHP++kumsGkL1pjRfxB3pv079f+FveHxnf/eoS5Bq3FCdxg==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.544 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.544/0.544/0.544/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX18NxZpJorR08o06C3MF/NcKJbWvXKaSXvE=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Authentication failed, enforcing quiet period
Show output
Mar 05 18:36:27.321380 osdx hostapd[612852]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Mar 05 18:36:27.321400 osdx hostapd[612852]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 05 18:36:27.321620 osdx hostapd[612852]: connect[radius]: Network is unreachable
Mar 05 18:36:27.321440 osdx hostapd[612852]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2
Mar 05 18:36:27.321444 osdx hostapd[612852]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Mar 05 18:36:27.353269 osdx hostapd[612852]: Discovery mode enabled on eth2
Mar 05 18:36:27.353341 osdx hostapd[612852]: eth2: interface state UNINITIALIZED->ENABLED
Mar 05 18:36:27.353341 osdx hostapd[612852]: eth2: AP-ENABLED
Mar 05 18:36:28.695094 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:30.540083 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added
Mar 05 18:36:30.540098 osdx hostapd[612853]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Mar 05 18:36:30.553287 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication
Mar 05 18:36:30.553311 osdx hostapd[612853]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Mar 05 18:36:30.553325 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA
Mar 05 18:36:30.553332 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port
Mar 05 18:36:30.553338 osdx hostapd[612853]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 05 18:36:30.553363 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 172)
Mar 05 18:36:30.553675 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=172 len=10) from STA: EAP Response-Identity (1)
Mar 05 18:36:30.553692 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong'
Mar 05 18:36:30.553715 osdx hostapd[612853]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 05 18:36:30.555453 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.555481 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.555716 osdx hostapd[612853]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 05 18:36:30.555721 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:30.555725 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:30.555742 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=173 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 05 18:36:30.555749 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 173)
Mar 05 18:36:30.555990 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=173 len=6) from STA: EAP Response-unknown (3)
Mar 05 18:36:30.556048 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.556063 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.556288 osdx hostapd[612853]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 05 18:36:30.556293 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:30.556296 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:30.556310 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=174 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:30.556315 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 174)
Mar 05 18:36:30.556654 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=174 len=194) from STA: EAP Response-PEAP (25)
Mar 05 18:36:30.556697 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.556710 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.557707 osdx hostapd[612853]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 05 18:36:30.557715 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:30.557718 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:30.557739 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=175 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:30.557746 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 175)
Mar 05 18:36:30.557920 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=175 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:36:30.557960 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.557973 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.558121 osdx hostapd[612853]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 05 18:36:30.558126 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:30.558128 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:30.558141 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=176 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:30.558146 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 176)
Mar 05 18:36:30.559440 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=176 len=103) from STA: EAP Response-PEAP (25)
Mar 05 18:36:30.559473 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.559482 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.559756 osdx hostapd[612853]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 05 18:36:30.559760 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:30.559763 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:30.559783 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=177 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:30.559788 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 177)
Mar 05 18:36:30.559999 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=177 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:36:30.560026 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.560033 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.560134 osdx hostapd[612853]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 05 18:36:30.560138 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:30.560141 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:30.560153 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=178 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:30.560159 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 178)
Mar 05 18:36:30.560268 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=178 len=41) from STA: EAP Response-PEAP (25)
Mar 05 18:36:30.560294 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.560303 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.560454 osdx hostapd[612853]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 05 18:36:30.560460 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:30.560464 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:30.560478 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=179 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:30.560484 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 179)
Mar 05 18:36:30.560685 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=179 len=95) from STA: EAP Response-PEAP (25)
Mar 05 18:36:30.560720 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.560729 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.560912 osdx hostapd[612853]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 05 18:36:30.560918 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:30.560921 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:30.560943 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=180 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:30.560949 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 180)
Mar 05 18:36:30.561123 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=180 len=46) from STA: EAP Response-PEAP (25)
Mar 05 18:36:30.561156 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:30.561167 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:30.825083 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:31.561252 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8)
Mar 05 18:36:31.561286 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 05 18:36:31.561461 osdx hostapd[612853]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:36:31.561464 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:31.561468 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:31.561507 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=180 len=4) from RADIUS server: EAP Failure
Mar 05 18:36:31.561532 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 180)
Mar 05 18:36:31.561545 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port
Mar 05 18:36:31.561549 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 05 18:36:31.561552 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Mar 05 18:36:31.561556 osdx hostapd[612853]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:36:31.561558 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:31.561561 osdx hostapd[612853]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired
Show output
Mar 05 18:36:33.192182 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:35.300400 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:37.372882 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:39.438194 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:41.515968 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:43.596985 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:45.671844 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:47.749408 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:49.861710 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:36:51.572066 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Mar 05 18:36:51.572081 osdx hostapd[612853]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 05 18:36:51.572128 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 206)
Mar 05 18:36:51.572565 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=206 len=10) from STA: EAP Response-Identity (1)
Mar 05 18:36:51.572580 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong'
Mar 05 18:36:51.572653 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.572677 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:51.572932 osdx hostapd[612853]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 05 18:36:51.572938 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:51.572942 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:51.572963 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=207 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 05 18:36:51.572969 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 207)
Mar 05 18:36:51.573185 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=207 len=6) from STA: EAP Response-unknown (3)
Mar 05 18:36:51.573266 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.573284 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:51.573463 osdx hostapd[612853]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 05 18:36:51.573469 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:51.573474 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:51.573491 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=208 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:51.573498 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 208)
Mar 05 18:36:51.573783 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=208 len=194) from STA: EAP Response-PEAP (25)
Mar 05 18:36:51.573819 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.573831 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:51.574950 osdx hostapd[612853]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 05 18:36:51.574956 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:51.574961 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:51.574982 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=209 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:51.574990 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 209)
Mar 05 18:36:51.575173 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=209 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:36:51.575211 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.575223 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:51.575351 osdx hostapd[612853]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 05 18:36:51.575357 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:51.575361 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:51.575376 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=210 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:51.575383 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 210)
Mar 05 18:36:51.576565 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=210 len=103) from STA: EAP Response-PEAP (25)
Mar 05 18:36:51.576604 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.576615 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:51.576963 osdx hostapd[612853]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 05 18:36:51.576969 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:51.576973 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:51.576988 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=211 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:51.576998 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 211)
Mar 05 18:36:51.577195 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=211 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:36:51.577236 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.577247 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:51.577388 osdx hostapd[612853]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 05 18:36:51.577394 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:51.577397 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:51.577411 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=212 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:51.577417 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 212)
Mar 05 18:36:51.577555 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=212 len=41) from STA: EAP Response-PEAP (25)
Mar 05 18:36:51.577588 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.577598 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:51.577728 osdx hostapd[612853]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 05 18:36:51.577733 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:51.577737 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:51.577753 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=213 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:51.577760 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 213)
Mar 05 18:36:51.578050 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=213 len=95) from STA: EAP Response-PEAP (25)
Mar 05 18:36:51.578106 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.578122 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:36:51.578326 osdx hostapd[612853]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 05 18:36:51.578331 osdx hostapd[612853]: eth2: RADIUS Received RADIUS message
Mar 05 18:36:51.578335 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:36:51.578350 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=214 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:36:51.578357 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 214)
Mar 05 18:36:51.578561 osdx hostapd[612853]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=214 len=46) from STA: EAP Response-PEAP (25)
Mar 05 18:36:51.578594 osdx hostapd[612853]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:36:51.578604 osdx hostapd[612853]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds

Test Quiet Period In MAB Mode

Description

This scenario shows how to configure the quiet period in a device with MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode only-MAB
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1+HuQhRkGyEfFzEZ0LVODeqZHUiyJl1fJK3ai5y7vD4yBfGj2+yCZf+VlN+TSJIqawPQ6dvIyX//A==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.260 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.260/0.260/0.260/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

MAB: Authentication failed, entering held state
Show output
Mar 05 18:36:59.354137 osdx hostapd[613428]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Mar 05 18:36:59.354153 osdx hostapd[613428]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 05 18:36:59.354384 osdx hostapd[613428]: connect[radius]: Network is unreachable
Mar 05 18:36:59.354202 osdx hostapd[613428]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5
Mar 05 18:36:59.354206 osdx hostapd[613428]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Mar 05 18:36:59.373980 osdx hostapd[613428]: Discovery mode enabled on eth2
Mar 05 18:36:59.374069 osdx hostapd[613428]: eth2: interface state UNINITIALIZED->ENABLED
Mar 05 18:36:59.374069 osdx hostapd[613428]: eth2: AP-ENABLED
Mar 05 18:37:02.674577 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:04.375906 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication
Mar 05 18:37:04.376002 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Mar 05 18:37:04.376023 osdx hostapd[613429]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Mar 05 18:37:04.397988 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication
Mar 05 18:37:04.398016 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 05 18:37:04.398033 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 05 18:37:04.400046 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 05 18:37:04.400061 osdx hostapd[613429]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 05 18:37:04.400135 osdx hostapd[613429]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:04.400164 osdx hostapd[613429]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:05.400244 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Mar 05 18:37:05.400279 osdx hostapd[613429]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 05 18:37:05.400451 osdx hostapd[613429]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 05 18:37:05.400454 osdx hostapd[613429]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:05.400462 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:05.400466 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Mar 05 18:37:05.400517 osdx hostapd[613429]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 05 18:37:05.400520 osdx hostapd[613429]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 05 18:37:05.400523 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Mar 05 18:37:05.400526 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Mar 05 18:37:05.400534 osdx hostapd[613429]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 05 18:37:05.400537 osdx hostapd[613429]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:05.400539 osdx hostapd[613429]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired
Show output
Mar 05 18:37:08.904728 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:13.073888 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:17.245866 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:21.424986 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:25.400752 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Mar 05 18:37:25.400763 osdx hostapd[613429]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 05 18:37:25.400765 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB
Mar 05 18:37:25.400768 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 05 18:37:25.400817 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 05 18:37:25.400843 osdx hostapd[613429]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 05 18:37:25.400866 osdx hostapd[613429]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:25.400890 osdx hostapd[613429]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds

Test Quiet Period In MAB-Fallback Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode 802.1x-MAB
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19JO4MoR8M1BaVOXa7IZZEHCjfqw79/jeyHCz1piD0VQRgZtqnz2TFs6HTcBkcIu/WI1dJ52nIPCA==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.329 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.329/0.329/0.329/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1/gxyT3ipDFAfY3iecWWzMtrqxa3euVWPg=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

MAB: Authentication failed, entering held state
Show output
Mar 05 18:37:32.579440 osdx hostapd[613977]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Mar 05 18:37:32.579451 osdx hostapd[613977]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 05 18:37:32.579680 osdx hostapd[613977]: connect[radius]: Network is unreachable
Mar 05 18:37:32.579483 osdx hostapd[613977]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Mar 05 18:37:32.579486 osdx hostapd[613977]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Mar 05 18:37:32.615303 osdx hostapd[613977]: Discovery mode enabled on eth2
Mar 05 18:37:32.615408 osdx hostapd[613977]: eth2: interface state UNINITIALIZED->ENABLED
Mar 05 18:37:32.615408 osdx hostapd[613977]: eth2: AP-ENABLED
Mar 05 18:37:35.775157 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Mar 05 18:37:35.775172 osdx hostapd[613978]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Mar 05 18:37:35.787337 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication
Mar 05 18:37:35.787363 osdx hostapd[613978]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Mar 05 18:37:35.787367 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response
Mar 05 18:37:35.787369 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response
Mar 05 18:37:35.787383 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response
Mar 05 18:37:35.787385 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Mar 05 18:37:35.787393 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 05 18:37:35.787400 osdx hostapd[613978]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 05 18:37:35.787429 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 167)
Mar 05 18:37:35.787778 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=167 len=10) from STA: EAP Response-Identity (1)
Mar 05 18:37:35.787791 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Mar 05 18:37:35.787824 osdx hostapd[613978]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 05 18:37:35.789614 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.789646 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:35.789931 osdx hostapd[613978]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 05 18:37:35.789943 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:35.789947 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:35.789980 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=168 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 05 18:37:35.789989 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 168)
Mar 05 18:37:35.790262 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=168 len=6) from STA: EAP Response-unknown (3)
Mar 05 18:37:35.790321 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.790339 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:35.790552 osdx hostapd[613978]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 05 18:37:35.790559 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:35.790563 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:35.790585 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=169 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:35.790592 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 169)
Mar 05 18:37:35.791034 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=169 len=194) from STA: EAP Response-PEAP (25)
Mar 05 18:37:35.791084 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.791100 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:35.792437 osdx hostapd[613978]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 05 18:37:35.792444 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:35.792448 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:35.792476 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=170 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:35.792484 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 170)
Mar 05 18:37:35.792713 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=170 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:37:35.792762 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.792779 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:35.792942 osdx hostapd[613978]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 05 18:37:35.792949 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:35.792953 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:35.792970 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=171 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:35.792977 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 171)
Mar 05 18:37:35.794471 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=171 len=103) from STA: EAP Response-PEAP (25)
Mar 05 18:37:35.794532 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.794548 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:35.794951 osdx hostapd[613978]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 05 18:37:35.794959 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:35.794963 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:35.794991 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=172 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:35.794999 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 172)
Mar 05 18:37:35.795327 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=172 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:37:35.795390 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.795405 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:35.795578 osdx hostapd[613978]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 05 18:37:35.795585 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:35.795589 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:35.795606 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=173 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:35.795613 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 173)
Mar 05 18:37:35.795839 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=173 len=41) from STA: EAP Response-PEAP (25)
Mar 05 18:37:35.795879 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.795892 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:35.796060 osdx hostapd[613978]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 05 18:37:35.796066 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:35.796070 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:35.796086 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=174 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:35.796093 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 174)
Mar 05 18:37:35.796408 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=174 len=95) from STA: EAP Response-PEAP (25)
Mar 05 18:37:35.796460 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.796476 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:35.796679 osdx hostapd[613978]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 05 18:37:35.796686 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:35.796690 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:35.796707 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=175 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:35.796714 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 175)
Mar 05 18:37:35.796934 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=175 len=46) from STA: EAP Response-PEAP (25)
Mar 05 18:37:35.796985 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:35.797004 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:36.107576 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:36.797061 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Mar 05 18:37:36.797103 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 05 18:37:36.797315 osdx hostapd[613978]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:37:36.797319 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:36.797324 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:36.797377 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=175 len=4) from RADIUS server: EAP Failure
Mar 05 18:37:36.797406 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 175)
Mar 05 18:37:36.797479 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 05 18:37:36.797484 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 05 18:37:36.797488 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Mar 05 18:37:36.797493 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 05 18:37:36.797523 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 05 18:37:36.797532 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 05 18:37:36.797547 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:36.797590 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:36.797604 osdx hostapd[613978]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:37:36.797607 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:36.797610 osdx hostapd[613978]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Mar 05 18:37:37.797687 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Mar 05 18:37:37.797719 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 05 18:37:37.797886 osdx hostapd[613978]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 05 18:37:37.797890 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:37.797893 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:37.797897 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Mar 05 18:37:37.797943 osdx hostapd[613978]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 05 18:37:37.797946 osdx hostapd[613978]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 05 18:37:37.797950 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Mar 05 18:37:37.797953 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Mar 05 18:37:37.797961 osdx hostapd[613978]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 05 18:37:37.797963 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:37.797965 osdx hostapd[613978]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired
Show output
Mar 05 18:37:42.420246 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:46.601282 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:50.862807 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:55.030002 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:37:57.798066 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Mar 05 18:37:57.798076 osdx hostapd[613978]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 05 18:37:57.798078 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X
Mar 05 18:37:57.798081 osdx hostapd[613978]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Mar 05 18:37:57.798090 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 05 18:37:57.798094 osdx hostapd[613978]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 05 18:37:57.798125 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 206)
Mar 05 18:37:57.798512 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=206 len=10) from STA: EAP Response-Identity (1)
Mar 05 18:37:57.798521 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Mar 05 18:37:57.798593 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.798612 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:57.798866 osdx hostapd[613978]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 05 18:37:57.798872 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:57.798875 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:57.798892 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=207 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 05 18:37:57.798898 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 207)
Mar 05 18:37:57.799044 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=207 len=6) from STA: EAP Response-unknown (3)
Mar 05 18:37:57.799079 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.799090 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:57.799281 osdx hostapd[613978]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 05 18:37:57.799286 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:57.799289 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:57.799301 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=208 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:57.799306 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 208)
Mar 05 18:37:57.799529 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=208 len=194) from STA: EAP Response-PEAP (25)
Mar 05 18:37:57.799560 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.799571 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:57.800541 osdx hostapd[613978]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 05 18:37:57.800547 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:57.800551 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:57.800572 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=209 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:57.800578 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 209)
Mar 05 18:37:57.800705 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=209 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:37:57.800738 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.800748 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:57.800849 osdx hostapd[613978]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 05 18:37:57.800853 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:57.800856 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:57.800869 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=210 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:57.800874 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 210)
Mar 05 18:37:57.801766 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=210 len=103) from STA: EAP Response-PEAP (25)
Mar 05 18:37:57.801802 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.801811 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:57.802065 osdx hostapd[613978]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 05 18:37:57.802071 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:57.802074 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:57.802088 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=211 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:57.802093 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 211)
Mar 05 18:37:57.802244 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=211 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:37:57.802274 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.802286 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:57.802408 osdx hostapd[613978]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 05 18:37:57.802412 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:57.802416 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:57.802428 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=212 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:57.802433 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 212)
Mar 05 18:37:57.802554 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=212 len=41) from STA: EAP Response-PEAP (25)
Mar 05 18:37:57.802581 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.802592 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:57.802722 osdx hostapd[613978]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 05 18:37:57.802726 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:57.802728 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:57.802739 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=213 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:57.802743 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 213)
Mar 05 18:37:57.802901 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=213 len=95) from STA: EAP Response-PEAP (25)
Mar 05 18:37:57.802925 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.802932 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:57.803083 osdx hostapd[613978]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 05 18:37:57.803087 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:57.803089 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:57.803100 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=214 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:37:57.803106 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 214)
Mar 05 18:37:57.803247 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=214 len=46) from STA: EAP Response-PEAP (25)
Mar 05 18:37:57.803274 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:57.803285 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:58.804058 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Mar 05 18:37:58.804093 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 05 18:37:58.804179 osdx hostapd[613978]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:37:58.804183 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:58.804187 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:37:58.804237 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=214 len=4) from RADIUS server: EAP Failure
Mar 05 18:37:58.804264 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 214)
Mar 05 18:37:58.804278 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 05 18:37:58.804282 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 05 18:37:58.804285 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Mar 05 18:37:58.804290 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 05 18:37:58.804314 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 05 18:37:58.804322 osdx hostapd[613978]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 05 18:37:58.804335 osdx hostapd[613978]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:37:58.804347 osdx hostapd[613978]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:37:58.804360 osdx hostapd[613978]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:37:58.804363 osdx hostapd[613978]: eth2: RADIUS Received RADIUS message
Mar 05 18:37:58.804366 osdx hostapd[613978]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet

Test Quiet Period In MAB-First Mode

Description

This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode MAB-802.1x
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19ZOPSnmDPdZJN8N630qbtJYQHlATh4lrB7KDarR1wHPvkm9Kk8KMLFB/6ZibFQQORgiyKHYCAe1g==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1
Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.501 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.501/0.501/0.501/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX18R3RxyaG7PcoOXwFl3aEqOLX0rSGhwlTc=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Authentication failed, enforcing quiet period
Show output
Mar 05 18:38:06.094864 osdx hostapd[614535]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Mar 05 18:38:06.094881 osdx hostapd[614535]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 05 18:38:06.095154 osdx hostapd[614535]: connect[radius]: Network is unreachable
Mar 05 18:38:06.094928 osdx hostapd[614535]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Mar 05 18:38:06.094932 osdx hostapd[614535]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Mar 05 18:38:06.114742 osdx hostapd[614535]: Discovery mode enabled on eth2
Mar 05 18:38:06.114852 osdx hostapd[614535]: eth2: interface state UNINITIALIZED->ENABLED
Mar 05 18:38:06.114852 osdx hostapd[614535]: eth2: AP-ENABLED
Mar 05 18:38:09.238564 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Mar 05 18:38:09.238577 osdx hostapd[614536]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Mar 05 18:38:09.250738 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication
Mar 05 18:38:09.250765 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Mar 05 18:38:09.250779 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Mar 05 18:38:09.252404 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Mar 05 18:38:09.252415 osdx hostapd[614536]: eth2: RADIUS Authentication server 10.215.168.1:1812
Mar 05 18:38:09.252490 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:09.252517 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:09.252538 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Mar 05 18:38:09.533834 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:38:10.252599 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Mar 05 18:38:10.252634 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 05 18:38:10.252779 osdx hostapd[614536]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 05 18:38:10.252782 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.252786 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.252790 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Mar 05 18:38:10.252837 osdx hostapd[614536]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Mar 05 18:38:10.252841 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X
Mar 05 18:38:10.252845 osdx hostapd[614536]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Mar 05 18:38:10.252848 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started
Mar 05 18:38:10.252854 osdx hostapd[614536]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 05 18:38:10.252866 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 250)
Mar 05 18:38:10.252879 osdx hostapd[614536]: eth2: RADIUS Received 20 bytes from RADIUS server
Mar 05 18:38:10.252883 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.252886 osdx hostapd[614536]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Mar 05 18:38:10.253176 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=250 len=10) from STA: EAP Response-Identity (1)
Mar 05 18:38:10.253188 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Mar 05 18:38:10.253251 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.253268 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:10.253439 osdx hostapd[614536]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 05 18:38:10.253446 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.253450 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.253481 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=251 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 05 18:38:10.253488 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 251)
Mar 05 18:38:10.253682 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=251 len=6) from STA: EAP Response-unknown (3)
Mar 05 18:38:10.253731 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.253743 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:10.253970 osdx hostapd[614536]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 05 18:38:10.253975 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.253978 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.253992 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=252 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:10.253998 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 252)
Mar 05 18:38:10.254364 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=252 len=194) from STA: EAP Response-PEAP (25)
Mar 05 18:38:10.254406 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.254419 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:10.255779 osdx hostapd[614536]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 05 18:38:10.255785 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.255788 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.255811 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=253 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:10.255817 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 253)
Mar 05 18:38:10.256000 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=253 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:38:10.256037 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.256049 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:10.256202 osdx hostapd[614536]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 05 18:38:10.256207 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.256209 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.256224 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=254 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:10.256229 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 254)
Mar 05 18:38:10.257622 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=254 len=103) from STA: EAP Response-PEAP (25)
Mar 05 18:38:10.257669 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.257684 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:10.258005 osdx hostapd[614536]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 05 18:38:10.258010 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.258012 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.258027 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=255 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:10.258033 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 255)
Mar 05 18:38:10.258266 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=255 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:38:10.258318 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.258334 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:10.258486 osdx hostapd[614536]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 05 18:38:10.258492 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.258496 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.258511 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=0 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:10.258518 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 0)
Mar 05 18:38:10.258689 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=0 len=41) from STA: EAP Response-PEAP (25)
Mar 05 18:38:10.258722 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.258731 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:10.258864 osdx hostapd[614536]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 05 18:38:10.258869 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.258873 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.258888 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=1 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:10.258902 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 1)
Mar 05 18:38:10.259131 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=1 len=95) from STA: EAP Response-PEAP (25)
Mar 05 18:38:10.259165 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.259174 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:10.259332 osdx hostapd[614536]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 05 18:38:10.259338 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:10.259341 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:10.259355 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=2 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:10.259361 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 2)
Mar 05 18:38:10.259526 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=2 len=46) from STA: EAP Response-PEAP (25)
Mar 05 18:38:10.259559 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:10.259570 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:11.259682 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Mar 05 18:38:11.259903 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 05 18:38:11.259936 osdx hostapd[614536]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:38:11.259940 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:11.259945 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:11.260001 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=2 len=4) from RADIUS server: EAP Failure
Mar 05 18:38:11.260034 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 2)
Mar 05 18:38:11.260125 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 05 18:38:11.260138 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 05 18:38:11.260142 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Mar 05 18:38:11.260148 osdx hostapd[614536]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:38:11.260151 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:11.260154 osdx hostapd[614536]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired
Show output
Mar 05 18:38:15.774428 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:38:19.981607 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:38:24.156118 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:38:28.310133 osdx OSDxCLI[559085]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Mar 05 18:38:31.270534 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Mar 05 18:38:31.270548 osdx hostapd[614536]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Mar 05 18:38:31.270587 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 84)
Mar 05 18:38:31.271026 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=84 len=10) from STA: EAP Response-Identity (1)
Mar 05 18:38:31.271042 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Mar 05 18:38:31.271112 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.271138 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:31.271407 osdx hostapd[614536]: eth2: RADIUS Received 80 bytes from RADIUS server
Mar 05 18:38:31.271413 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:31.271416 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:31.271443 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=85 len=22) from RADIUS server: EAP-Request-MD5 (4)
Mar 05 18:38:31.271450 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 85)
Mar 05 18:38:31.271628 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=85 len=6) from STA: EAP Response-unknown (3)
Mar 05 18:38:31.271665 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.271677 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:31.271862 osdx hostapd[614536]: eth2: RADIUS Received 64 bytes from RADIUS server
Mar 05 18:38:31.271867 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:31.271870 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:31.271885 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=86 len=6) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:31.271890 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 86)
Mar 05 18:38:31.272198 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=86 len=194) from STA: EAP Response-PEAP (25)
Mar 05 18:38:31.272238 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.272251 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:31.273246 osdx hostapd[614536]: eth2: RADIUS Received 1068 bytes from RADIUS server
Mar 05 18:38:31.273253 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:31.273257 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:31.273277 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=87 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:31.273283 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 87)
Mar 05 18:38:31.273461 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=87 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:38:31.273499 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.273511 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:31.273660 osdx hostapd[614536]: eth2: RADIUS Received 229 bytes from RADIUS server
Mar 05 18:38:31.273666 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:31.273669 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:31.273687 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=88 len=171) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:31.273694 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 88)
Mar 05 18:38:31.274751 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=88 len=103) from STA: EAP Response-PEAP (25)
Mar 05 18:38:31.274806 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.274822 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:31.275111 osdx hostapd[614536]: eth2: RADIUS Received 115 bytes from RADIUS server
Mar 05 18:38:31.275116 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:31.275120 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:31.275138 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=89 len=57) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:31.275144 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 89)
Mar 05 18:38:31.275315 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=89 len=6) from STA: EAP Response-PEAP (25)
Mar 05 18:38:31.275350 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.275361 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:31.275491 osdx hostapd[614536]: eth2: RADIUS Received 98 bytes from RADIUS server
Mar 05 18:38:31.275496 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:31.275500 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:31.275514 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=90 len=40) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:31.275521 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 90)
Mar 05 18:38:31.275664 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=90 len=41) from STA: EAP Response-PEAP (25)
Mar 05 18:38:31.275697 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.275711 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:31.275867 osdx hostapd[614536]: eth2: RADIUS Received 131 bytes from RADIUS server
Mar 05 18:38:31.275873 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:31.275877 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:31.275891 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=91 len=73) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:31.275897 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 91)
Mar 05 18:38:31.276102 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=91 len=95) from STA: EAP Response-PEAP (25)
Mar 05 18:38:31.276132 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.276142 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:31.276284 osdx hostapd[614536]: eth2: RADIUS Received 104 bytes from RADIUS server
Mar 05 18:38:31.276288 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:31.276292 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:31.276304 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=92 len=46) from RADIUS server: EAP-Request-PEAP (25)
Mar 05 18:38:31.276309 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 92)
Mar 05 18:38:31.276446 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=92 len=46) from STA: EAP Response-PEAP (25)
Mar 05 18:38:31.276479 osdx hostapd[614536]: eth2: RADIUS Sending RADIUS message to authentication server
Mar 05 18:38:31.276488 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Mar 05 18:38:32.276579 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Mar 05 18:38:32.276619 osdx hostapd[614536]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Mar 05 18:38:32.276790 osdx hostapd[614536]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:38:32.276795 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:32.276800 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Mar 05 18:38:32.276851 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=92 len=4) from RADIUS server: EAP Failure
Mar 05 18:38:32.276881 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 92)
Mar 05 18:38:32.276895 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Mar 05 18:38:32.276900 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Mar 05 18:38:32.276903 osdx hostapd[614536]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Mar 05 18:38:32.276909 osdx hostapd[614536]: eth2: RADIUS Received 44 bytes from RADIUS server
Mar 05 18:38:32.276911 osdx hostapd[614536]: eth2: RADIUS Received RADIUS message
Mar 05 18:38:32.276915 osdx hostapd[614536]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet