Only 802.1X
This scenario shows how to configure the only-802.1x
authentication mode.
Test Successful 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 uses the correct username and password.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+bUl9yDJJB4oQOpNIFvc0mwnmtA4J0tbLpcn2QEBSQN/71ApStNJ7AZt00TSNKvUuPGLtGdwlTGg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.202 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.202/0.202/0.202/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19+k+hPBn1A66R7Nsub99Wkt+aQwANT0W8= set interfaces ethernet eth2 supplicant username testing set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 supplicant show status at DUT1 and check if output contains the following tokens:
AuthorizedShow output
--------------------------------------------------- Field Value --------------------------------------------------- EAP State SUCCESS EAP TLS Cipher ECDHE-RSA-AES256-GCM-SHA384 EAP TLS Version TLSv1.2 PAE State AUTHENTICATED Supplicant Port Status Authorized WPA State COMPLETED
Step 5: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+AuthorizedShow output
------------------------------- Field Value ------------------------------- EAPoL Frames (Rx) 11 EAPoL Frames (Tx) 11 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Authorized Req Frames (Rx) 9 Req ID Frames (Rx) 1 Resp Frames (Tx) 10 Start Frames (Tx) 1
Step 6: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
Authentication Successes\s+1 Authentication Mode\s+802\.1XShow output
--------------------------------------------- Field Value --------------------------------------------- Access Challenges 9 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode 802.1X Authentication Status Authorized (802.1X) Authentication Successes 1 EAPoL frames (Rx) 11 EAPoL frames (Tx) 11 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name testing
Step 7: Ping IP address 192.168.100.1 from DUT1:
admin@DUT1$ ping 192.168.100.1 count 1 size 56 timeout 1Show output
PING 192.168.100.1 (192.168.100.1) 56(84) bytes of data. 64 bytes from 192.168.100.1: icmp_seq=1 ttl=64 time=0.378 ms --- 192.168.100.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.378/0.378/0.378/0.000 ms
Step 8: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: authenticated - EAP type: 25 (PEAP)Show output
Mar 23 14:42:36.330577 osdx hostapd[799939]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Mar 23 14:42:36.330592 osdx hostapd[799939]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:42:36.330854 osdx hostapd[799939]: connect[radius]: Network is unreachable Mar 23 14:42:36.330640 osdx hostapd[799939]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Mar 23 14:42:36.330644 osdx hostapd[799939]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Mar 23 14:42:36.350465 osdx hostapd[799939]: Discovery mode enabled on eth2 Mar 23 14:42:36.350560 osdx hostapd[799939]: eth2: interface state UNINITIALIZED->ENABLED Mar 23 14:42:36.350560 osdx hostapd[799939]: eth2: AP-ENABLED Mar 23 14:42:39.467595 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Mar 23 14:42:39.467608 osdx hostapd[799940]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Mar 23 14:42:39.482515 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Mar 23 14:42:39.482548 osdx hostapd[799940]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Mar 23 14:42:39.482566 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Mar 23 14:42:39.482580 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Mar 23 14:42:39.482589 osdx hostapd[799940]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:42:39.482618 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 50) Mar 23 14:42:39.482924 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=50 len=12) from STA: EAP Response-Identity (1) Mar 23 14:42:39.482935 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'testing' Mar 23 14:42:39.482960 osdx hostapd[799940]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:42:39.484720 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.484747 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.484997 osdx hostapd[799940]: eth2: RADIUS Received 80 bytes from RADIUS server Mar 23 14:42:39.485002 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.485006 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.485026 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=22) from RADIUS server: EAP-Request-MD5 (4) Mar 23 14:42:39.485032 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 51) Mar 23 14:42:39.485306 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=51 len=6) from STA: EAP Response-unknown (3) Mar 23 14:42:39.485359 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.485375 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.485607 osdx hostapd[799940]: eth2: RADIUS Received 64 bytes from RADIUS server Mar 23 14:42:39.485614 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.485618 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.485640 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=52 len=6) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:39.485647 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 52) Mar 23 14:42:39.486060 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=52 len=194) from STA: EAP Response-PEAP (25) Mar 23 14:42:39.486119 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.486134 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.487496 osdx hostapd[799940]: eth2: RADIUS Received 1068 bytes from RADIUS server Mar 23 14:42:39.487503 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.487510 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.487534 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=1004) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:39.487541 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 53) Mar 23 14:42:39.487812 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=53 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:42:39.487871 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.487888 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.488073 osdx hostapd[799940]: eth2: RADIUS Received 229 bytes from RADIUS server Mar 23 14:42:39.488079 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.488083 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.488101 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=54 len=171) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:39.488109 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 54) Mar 23 14:42:39.490123 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=54 len=103) from STA: EAP Response-PEAP (25) Mar 23 14:42:39.490187 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.490208 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.490662 osdx hostapd[799940]: eth2: RADIUS Received 115 bytes from RADIUS server Mar 23 14:42:39.490667 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.490676 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.490698 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=55 len=57) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:39.490706 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 55) Mar 23 14:42:39.490983 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=55 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:42:39.491022 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.491034 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.491209 osdx hostapd[799940]: eth2: RADIUS Received 98 bytes from RADIUS server Mar 23 14:42:39.491214 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.491217 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.491231 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=56 len=40) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:39.491238 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 56) Mar 23 14:42:39.491488 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=56 len=43) from STA: EAP Response-PEAP (25) Mar 23 14:42:39.491527 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.491540 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.491724 osdx hostapd[799940]: eth2: RADIUS Received 131 bytes from RADIUS server Mar 23 14:42:39.491730 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.491733 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.491747 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=57 len=73) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:39.491753 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 57) Mar 23 14:42:39.492040 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=57 len=97) from STA: EAP Response-PEAP (25) Mar 23 14:42:39.492072 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.492081 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.492302 osdx hostapd[799940]: eth2: RADIUS Received 140 bytes from RADIUS server Mar 23 14:42:39.492310 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.492315 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.492339 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=58 len=82) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:39.492347 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 58) Mar 23 14:42:39.492557 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=58 len=37) from STA: EAP Response-PEAP (25) Mar 23 14:42:39.492604 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.492617 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.492782 osdx hostapd[799940]: eth2: RADIUS Received 104 bytes from RADIUS server Mar 23 14:42:39.492786 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.492789 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.492803 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=59 len=46) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:39.492808 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 59) Mar 23 14:42:39.492992 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=59 len=46) from STA: EAP Response-PEAP (25) Mar 23 14:42:39.493050 osdx hostapd[799940]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:39.493062 osdx hostapd[799940]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:39.493248 osdx hostapd[799940]: eth2: RADIUS Received 175 bytes from RADIUS server Mar 23 14:42:39.493253 osdx hostapd[799940]: eth2: RADIUS Received RADIUS message Mar 23 14:42:39.493265 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:39.493289 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: old identity 'testing' updated with User-Name from Access-Accept 'testing' Mar 23 14:42:39.493293 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=3 id=59 len=4) from RADIUS server: EAP Success Mar 23 14:42:39.493311 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 59) Mar 23 14:42:39.493327 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authorizing port Mar 23 14:42:39.493331 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 RADIUS: starting accounting session E3EF35007A8F4451 Mar 23 14:42:39.493353 osdx hostapd[799940]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authenticated - EAP type: 25 (PEAP)
Test Unsuccessful 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 uses an incorrect username.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/ix1F50NzVd1cQ30WQcxN7EySHk2XJOT5PJA2JjYLOlb/jAviEfTE0IBpwhjwE2JMW6w9qsbwdkg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.389 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.389/0.389/0.389/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+rsi1HbysQnQQlxo/AjrAypFXbPpqLnI0= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 0 EAPoL Frames (Tx) 0 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 0 Req ID Frames (Rx) 0 Resp Frames (Tx) 0 Start Frames (Tx) 0
Step 5: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 9 EAPoL Frames (Tx) 10 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 8 Req ID Frames (Rx) 1 Resp Frames (Tx) 9 Start Frames (Tx) 1
Step 6: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 10 EAPoL Frames (Tx) 10 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 8 Req ID Frames (Rx) 1 Resp Frames (Tx) 9 Start Frames (Tx) 1
Step 7: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
Authentication Failures\s+[1-9]\d?Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 8 Authentication Backend RADIUS Authentication Failures 1 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 10 EAPoL frames (Tx) 10 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 8: Expect a failure in the following command:
Ping IP address 192.168.100.1 from DUT1:
admin@DUT1$ ping 192.168.100.1 count 1 size 56 timeout 1Show output
PING 192.168.100.1 (192.168.100.1) 56(84) bytes of data. --- 192.168.100.1 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms
Step 9: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)Show output
Mar 23 14:42:47.183184 osdx hostapd[800455]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Mar 23 14:42:47.183200 osdx hostapd[800455]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:42:47.183580 osdx hostapd[800455]: connect[radius]: Network is unreachable Mar 23 14:42:47.183250 osdx hostapd[800455]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Mar 23 14:42:47.183255 osdx hostapd[800455]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Mar 23 14:42:47.203038 osdx hostapd[800455]: Discovery mode enabled on eth2 Mar 23 14:42:47.203130 osdx hostapd[800455]: eth2: interface state UNINITIALIZED->ENABLED Mar 23 14:42:47.203130 osdx hostapd[800455]: eth2: AP-ENABLED Mar 23 14:42:50.543296 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Mar 23 14:42:50.543314 osdx hostapd[800456]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Mar 23 14:42:50.563106 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Mar 23 14:42:50.563143 osdx hostapd[800456]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Mar 23 14:42:50.563163 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Mar 23 14:42:50.563172 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Mar 23 14:42:50.563181 osdx hostapd[800456]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:42:50.563212 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 238) Mar 23 14:42:50.563592 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=238 len=10) from STA: EAP Response-Identity (1) Mar 23 14:42:50.563603 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Mar 23 14:42:50.563631 osdx hostapd[800456]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:42:50.565393 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.565424 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:50.565698 osdx hostapd[800456]: eth2: RADIUS Received 80 bytes from RADIUS server Mar 23 14:42:50.565703 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:50.565707 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:50.565725 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=239 len=22) from RADIUS server: EAP-Request-MD5 (4) Mar 23 14:42:50.565732 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 239) Mar 23 14:42:50.566015 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=239 len=6) from STA: EAP Response-unknown (3) Mar 23 14:42:50.566059 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.566073 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:50.566268 osdx hostapd[800456]: eth2: RADIUS Received 64 bytes from RADIUS server Mar 23 14:42:50.566277 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:50.566281 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:50.566312 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=240 len=6) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:50.566320 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 240) Mar 23 14:42:50.566749 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=240 len=194) from STA: EAP Response-PEAP (25) Mar 23 14:42:50.566805 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.566822 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:50.568161 osdx hostapd[800456]: eth2: RADIUS Received 1068 bytes from RADIUS server Mar 23 14:42:50.568169 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:50.568174 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:50.568201 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=241 len=1004) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:50.568209 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 241) Mar 23 14:42:50.568412 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=241 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:42:50.568459 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.568475 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:50.568594 osdx hostapd[800456]: eth2: RADIUS Received 229 bytes from RADIUS server Mar 23 14:42:50.568600 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:50.568604 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:50.568621 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=242 len=171) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:50.568628 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 242) Mar 23 14:42:50.570182 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=242 len=103) from STA: EAP Response-PEAP (25) Mar 23 14:42:50.570242 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.570259 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:50.570602 osdx hostapd[800456]: eth2: RADIUS Received 115 bytes from RADIUS server Mar 23 14:42:50.570608 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:50.570612 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:50.570632 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=243 len=57) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:50.570638 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 243) Mar 23 14:42:50.570939 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=243 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:42:50.570999 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.571015 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:50.571176 osdx hostapd[800456]: eth2: RADIUS Received 98 bytes from RADIUS server Mar 23 14:42:50.571181 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:50.571184 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:50.571202 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=244 len=40) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:50.571208 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 244) Mar 23 14:42:50.571416 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=244 len=41) from STA: EAP Response-PEAP (25) Mar 23 14:42:50.571451 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.571464 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:50.571640 osdx hostapd[800456]: eth2: RADIUS Received 131 bytes from RADIUS server Mar 23 14:42:50.571645 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:50.571648 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:50.571664 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=245 len=73) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:50.571670 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 245) Mar 23 14:42:50.571997 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=245 len=95) from STA: EAP Response-PEAP (25) Mar 23 14:42:50.572041 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.572054 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:50.572246 osdx hostapd[800456]: eth2: RADIUS Received 104 bytes from RADIUS server Mar 23 14:42:50.572252 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:50.572256 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:50.572275 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=246 len=46) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:42:50.572282 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 246) Mar 23 14:42:50.572489 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=246 len=46) from STA: EAP Response-PEAP (25) Mar 23 14:42:50.572527 osdx hostapd[800456]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:42:50.572541 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:42:51.572670 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) Mar 23 14:42:51.572742 osdx hostapd[800456]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:42:51.573155 osdx hostapd[800456]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:42:51.573167 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:51.573180 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:42:51.573279 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=246 len=4) from RADIUS server: EAP Failure Mar 23 14:42:51.573361 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 246) Mar 23 14:42:51.573414 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Mar 23 14:42:51.573428 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Mar 23 14:42:51.573438 osdx hostapd[800456]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (60 seconds) Mar 23 14:42:51.573453 osdx hostapd[800456]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:42:51.573462 osdx hostapd[800456]: eth2: RADIUS Received RADIUS message Mar 23 14:42:51.573471 osdx hostapd[800456]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Test Unsupported 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 does not support 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/raMfM/9tRYVmFlydKgIGa/ocxDflNCbFPd8SfwdAFy4vHgaaWX7U/lg7tzk5LmqY/vZ/kOhmSAg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.268 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.268/0.268/0.268/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 2 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 5: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 3 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 6: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 3 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 7: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: EAP authentication timeoutShow output
Mar 23 14:43:00.303321 osdx hostapd[800974]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Mar 23 14:43:00.303717 osdx hostapd[800974]: connect[radius]: Network is unreachable Mar 23 14:43:00.303337 osdx hostapd[800974]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:43:00.303396 osdx hostapd[800974]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Mar 23 14:43:00.303400 osdx hostapd[800974]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Mar 23 14:43:00.319062 osdx hostapd[800974]: Discovery mode enabled on eth2 Mar 23 14:43:00.319157 osdx hostapd[800974]: eth2: interface state UNINITIALIZED->ENABLED Mar 23 14:43:00.319157 osdx hostapd[800974]: eth2: AP-ENABLED Mar 23 14:43:05.319112 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 DRIVER: Device discovered, triggering MAB authentication Mar 23 14:43:05.319152 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Mar 23 14:43:05.319161 osdx hostapd[800975]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Mar 23 14:43:05.335047 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Mar 23 14:43:05.335079 osdx hostapd[800975]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Mar 23 14:43:05.335098 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Mar 23 14:43:05.335106 osdx hostapd[800975]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:43:05.335136 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 76) Mar 23 14:43:08.338102 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 76) Mar 23 14:43:13.184064 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:43:14.342117 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 76) Mar 23 14:43:21.487378 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:43:26.353103 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: aborting authentication Mar 23 14:43:26.353115 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: EAP authentication timeout - enforcing 60 second quiet period before retrying Mar 23 14:43:26.353147 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 MLME: MLME-DEAUTHENTICATE.indication(de:ad:be:ef:6c:12, 2) Mar 23 14:43:26.353150 osdx hostapd[800975]: eth2: STA de:ad:be:ef:6c:12 MLME: MLME-DELETEKEYS.request(de:ad:be:ef:6c:12)