Quiet Period
This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.
Test Quiet Period In 802.1X Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1/MohQa3qfOY9r5FtX1PpsbUB5Zmb9mOEUMqFa5vmO5frChKvIpEr7wYOAKBMaY0W2VKbHh5a7kNA== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.200 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.200/0.200/0.200/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX192MkDrpbcebH1s7punoWhIv61o+eqOXZE= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Mar 23 14:53:55.108444 osdx hostapd[819211]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Mar 23 14:53:55.108456 osdx hostapd[819211]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:53:55.108688 osdx hostapd[819211]: connect[radius]: Network is unreachable Mar 23 14:53:55.108499 osdx hostapd[819211]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2 Mar 23 14:53:55.108503 osdx hostapd[819211]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Mar 23 14:53:55.140345 osdx hostapd[819211]: Discovery mode enabled on eth2 Mar 23 14:53:55.140416 osdx hostapd[819211]: eth2: interface state UNINITIALIZED->ENABLED Mar 23 14:53:55.140416 osdx hostapd[819211]: eth2: AP-ENABLED Mar 23 14:53:56.495151 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:53:58.348643 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Mar 23 14:53:58.348664 osdx hostapd[819212]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Mar 23 14:53:58.364433 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Mar 23 14:53:58.364466 osdx hostapd[819212]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Mar 23 14:53:58.364486 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Mar 23 14:53:58.364497 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Mar 23 14:53:58.364510 osdx hostapd[819212]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:53:58.364532 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 18) Mar 23 14:53:58.364882 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=18 len=10) from STA: EAP Response-Identity (1) Mar 23 14:53:58.364894 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Mar 23 14:53:58.364916 osdx hostapd[819212]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:53:58.366879 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.366907 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.367146 osdx hostapd[819212]: eth2: RADIUS Received 80 bytes from RADIUS server Mar 23 14:53:58.367152 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:58.367155 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:58.367174 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=19 len=22) from RADIUS server: EAP-Request-MD5 (4) Mar 23 14:53:58.367180 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 19) Mar 23 14:53:58.367393 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=19 len=6) from STA: EAP Response-unknown (3) Mar 23 14:53:58.367437 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.367448 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.367639 osdx hostapd[819212]: eth2: RADIUS Received 64 bytes from RADIUS server Mar 23 14:53:58.367644 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:58.367646 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:58.367659 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=20 len=6) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:53:58.367663 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 20) Mar 23 14:53:58.367949 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=20 len=194) from STA: EAP Response-PEAP (25) Mar 23 14:53:58.367990 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.368002 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.369117 osdx hostapd[819212]: eth2: RADIUS Received 1068 bytes from RADIUS server Mar 23 14:53:58.369125 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:58.369129 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:58.369159 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=21 len=1004) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:53:58.369167 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 21) Mar 23 14:53:58.369381 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=21 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:53:58.369434 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.369449 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.369612 osdx hostapd[819212]: eth2: RADIUS Received 229 bytes from RADIUS server Mar 23 14:53:58.369618 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:58.369621 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:58.369636 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=22 len=171) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:53:58.369642 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 22) Mar 23 14:53:58.371176 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=22 len=103) from STA: EAP Response-PEAP (25) Mar 23 14:53:58.371232 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.371246 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.371629 osdx hostapd[819212]: eth2: RADIUS Received 115 bytes from RADIUS server Mar 23 14:53:58.371635 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:58.371638 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:58.371655 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=23 len=57) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:53:58.371667 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 23) Mar 23 14:53:58.371853 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=23 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:53:58.371886 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.371896 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.372061 osdx hostapd[819212]: eth2: RADIUS Received 98 bytes from RADIUS server Mar 23 14:53:58.372068 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:58.372071 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:58.372092 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=24 len=40) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:53:58.372099 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 24) Mar 23 14:53:58.372223 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=24 len=41) from STA: EAP Response-PEAP (25) Mar 23 14:53:58.372258 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.372267 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.372412 osdx hostapd[819212]: eth2: RADIUS Received 131 bytes from RADIUS server Mar 23 14:53:58.372418 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:58.372421 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:58.372436 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=25 len=73) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:53:58.372442 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 25) Mar 23 14:53:58.372633 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=25 len=95) from STA: EAP Response-PEAP (25) Mar 23 14:53:58.372663 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.372671 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.372820 osdx hostapd[819212]: eth2: RADIUS Received 104 bytes from RADIUS server Mar 23 14:53:58.372825 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:58.372828 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:58.372840 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=26 len=46) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:53:58.372845 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 26) Mar 23 14:53:58.372970 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=26 len=46) from STA: EAP Response-PEAP (25) Mar 23 14:53:58.372996 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:53:58.373003 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:53:58.611927 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:53:59.373120 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) Mar 23 14:53:59.373188 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:53:59.373506 osdx hostapd[819212]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:53:59.373514 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:59.373523 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:53:59.373616 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=26 len=4) from RADIUS server: EAP Failure Mar 23 14:53:59.373671 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 26) Mar 23 14:53:59.373696 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Mar 23 14:53:59.373704 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Mar 23 14:53:59.373711 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Mar 23 14:53:59.373721 osdx hostapd[819212]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:53:59.373727 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:53:59.373737 osdx hostapd[819212]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Mar 23 14:54:01.228436 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:03.342846 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:05.438992 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:07.503442 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:09.568762 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:11.651089 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:13.723907 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:15.799809 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:17.871061 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:19.383435 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Mar 23 14:54:19.383449 osdx hostapd[819212]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:54:19.383502 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 162) Mar 23 14:54:19.384056 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=162 len=10) from STA: EAP Response-Identity (1) Mar 23 14:54:19.384073 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Mar 23 14:54:19.384152 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.384337 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:19.384476 osdx hostapd[819212]: eth2: RADIUS Received 80 bytes from RADIUS server Mar 23 14:54:19.384482 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:54:19.384487 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:19.384514 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=163 len=22) from RADIUS server: EAP-Request-MD5 (4) Mar 23 14:54:19.384521 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 163) Mar 23 14:54:19.384836 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=163 len=6) from STA: EAP Response-unknown (3) Mar 23 14:54:19.384903 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.384925 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:19.385166 osdx hostapd[819212]: eth2: RADIUS Received 64 bytes from RADIUS server Mar 23 14:54:19.385173 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:54:19.385177 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:19.385208 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=164 len=6) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:54:19.385216 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 164) Mar 23 14:54:19.385617 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=164 len=194) from STA: EAP Response-PEAP (25) Mar 23 14:54:19.385682 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.385701 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:19.387049 osdx hostapd[819212]: eth2: RADIUS Received 1068 bytes from RADIUS server Mar 23 14:54:19.387058 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:54:19.387063 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:19.387094 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=165 len=1004) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:54:19.387103 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 165) Mar 23 14:54:19.387405 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=165 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:54:19.387463 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.387567 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:19.387686 osdx hostapd[819212]: eth2: RADIUS Received 229 bytes from RADIUS server Mar 23 14:54:19.387693 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:54:19.387698 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:19.387720 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=166 len=171) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:54:19.387727 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 166) Mar 23 14:54:19.389226 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=166 len=103) from STA: EAP Response-PEAP (25) Mar 23 14:54:19.389300 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.389319 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:19.389808 osdx hostapd[819212]: eth2: RADIUS Received 115 bytes from RADIUS server Mar 23 14:54:19.389816 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:54:19.389820 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:19.389846 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=167 len=57) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:54:19.389854 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 167) Mar 23 14:54:19.390148 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=167 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:54:19.390203 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.390293 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:19.390413 osdx hostapd[819212]: eth2: RADIUS Received 98 bytes from RADIUS server Mar 23 14:54:19.390420 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:54:19.390425 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:19.390448 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=168 len=40) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:54:19.390455 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 168) Mar 23 14:54:19.390715 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=168 len=41) from STA: EAP Response-PEAP (25) Mar 23 14:54:19.390763 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.390827 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:19.390983 osdx hostapd[819212]: eth2: RADIUS Received 131 bytes from RADIUS server Mar 23 14:54:19.390990 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:54:19.390995 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:19.391024 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=169 len=73) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:54:19.391035 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 169) Mar 23 14:54:19.391393 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=169 len=95) from STA: EAP Response-PEAP (25) Mar 23 14:54:19.391447 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.391541 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:19.391732 osdx hostapd[819212]: eth2: RADIUS Received 104 bytes from RADIUS server Mar 23 14:54:19.391740 osdx hostapd[819212]: eth2: RADIUS Received RADIUS message Mar 23 14:54:19.391745 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:19.391769 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=170 len=46) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:54:19.391777 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 170) Mar 23 14:54:19.391996 osdx hostapd[819212]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=170 len=46) from STA: EAP Response-PEAP (25) Mar 23 14:54:19.392040 osdx hostapd[819212]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:19.392052 osdx hostapd[819212]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB Mode
Description
This scenario shows how to configure the quiet period in a device with MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19l9p+0M7GTaIPizU4sE77Y/3gBlxdWmDXiNemRJBIBCXd0z7/CKxgAKTGRdnax5z78gm21VeAdjg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.215 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.215/0.215/0.215/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Mar 23 14:54:27.268993 osdx hostapd[819790]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Mar 23 14:54:27.269007 osdx hostapd[819790]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:54:27.269256 osdx hostapd[819790]: connect[radius]: Network is unreachable Mar 23 14:54:27.269069 osdx hostapd[819790]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5 Mar 23 14:54:27.269078 osdx hostapd[819790]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Mar 23 14:54:27.296824 osdx hostapd[819790]: Discovery mode enabled on eth2 Mar 23 14:54:27.296894 osdx hostapd[819790]: eth2: interface state UNINITIALIZED->ENABLED Mar 23 14:54:27.296894 osdx hostapd[819790]: eth2: AP-ENABLED Mar 23 14:54:30.476115 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:32.299933 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication Mar 23 14:54:32.299977 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Mar 23 14:54:32.299986 osdx hostapd[819791]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Mar 23 14:54:32.312889 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication Mar 23 14:54:32.312918 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Mar 23 14:54:32.312932 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Mar 23 14:54:32.314613 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Mar 23 14:54:32.314623 osdx hostapd[819791]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:54:32.314699 osdx hostapd[819791]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:32.314727 osdx hostapd[819791]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:54:33.314809 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Mar 23 14:54:33.314850 osdx hostapd[819791]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:54:33.315016 osdx hostapd[819791]: eth2: RADIUS Received 20 bytes from RADIUS server Mar 23 14:54:33.315020 osdx hostapd[819791]: eth2: RADIUS Received RADIUS message Mar 23 14:54:33.315025 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:54:33.315029 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Mar 23 14:54:33.315078 osdx hostapd[819791]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Mar 23 14:54:33.315081 osdx hostapd[819791]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Mar 23 14:54:33.315084 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Mar 23 14:54:33.315087 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Mar 23 14:54:33.315095 osdx hostapd[819791]: eth2: RADIUS Received 20 bytes from RADIUS server Mar 23 14:54:33.315098 osdx hostapd[819791]: eth2: RADIUS Received RADIUS message Mar 23 14:54:33.315101 osdx hostapd[819791]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Mar 23 14:54:36.732491 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:40.936143 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:45.119811 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:49.303016 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:54:53.315914 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Mar 23 14:54:53.315926 osdx hostapd[819791]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Mar 23 14:54:53.315930 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB Mar 23 14:54:53.315933 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Mar 23 14:54:53.315997 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Mar 23 14:54:53.316031 osdx hostapd[819791]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Mar 23 14:54:53.316062 osdx hostapd[819791]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:54:53.316100 osdx hostapd[819791]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB-Fallback Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode 802.1x-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19qGs+6c2oemqnw77mMfiP4ITJ8opF8ojk///Gyr6aYX7khq8/Rl7KIbYXZgMk8hAWCDsh0ikTNgA== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.653 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.653/0.653/0.653/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19FCvjs1Lkn8xJ90yP25iiXHAUF+vN/pRs= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Mar 23 14:55:00.646329 osdx hostapd[820337]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Mar 23 14:55:00.646345 osdx hostapd[820337]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:55:00.646708 osdx hostapd[820337]: connect[radius]: Network is unreachable Mar 23 14:55:00.646393 osdx hostapd[820337]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Mar 23 14:55:00.646396 osdx hostapd[820337]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Mar 23 14:55:00.670158 osdx hostapd[820337]: Discovery mode enabled on eth2 Mar 23 14:55:00.670227 osdx hostapd[820337]: eth2: interface state UNINITIALIZED->ENABLED Mar 23 14:55:00.670227 osdx hostapd[820337]: eth2: AP-ENABLED Mar 23 14:55:03.978311 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Mar 23 14:55:03.978324 osdx hostapd[820338]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Mar 23 14:55:03.994206 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication Mar 23 14:55:03.994234 osdx hostapd[820338]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Mar 23 14:55:03.994238 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response Mar 23 14:55:03.994240 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response Mar 23 14:55:03.994254 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response Mar 23 14:55:03.994257 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Mar 23 14:55:03.994266 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Mar 23 14:55:03.994280 osdx hostapd[820338]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:55:03.994302 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 105) Mar 23 14:55:03.994625 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=105 len=10) from STA: EAP Response-Identity (1) Mar 23 14:55:03.994637 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Mar 23 14:55:03.994663 osdx hostapd[820338]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:55:03.996449 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:03.996476 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:03.996714 osdx hostapd[820338]: eth2: RADIUS Received 80 bytes from RADIUS server Mar 23 14:55:03.996720 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:03.996723 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:03.996742 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=106 len=22) from RADIUS server: EAP-Request-MD5 (4) Mar 23 14:55:03.996748 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 106) Mar 23 14:55:03.997043 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=106 len=6) from STA: EAP Response-unknown (3) Mar 23 14:55:03.997090 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:03.997102 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:03.997300 osdx hostapd[820338]: eth2: RADIUS Received 64 bytes from RADIUS server Mar 23 14:55:03.997306 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:03.997309 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:03.997325 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=107 len=6) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:03.997331 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 107) Mar 23 14:55:03.997627 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=107 len=194) from STA: EAP Response-PEAP (25) Mar 23 14:55:03.997659 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:03.997672 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:03.998786 osdx hostapd[820338]: eth2: RADIUS Received 1068 bytes from RADIUS server Mar 23 14:55:03.998791 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:03.998794 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:03.998810 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=108 len=1004) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:03.998816 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 108) Mar 23 14:55:03.998971 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=108 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:55:03.999013 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:03.999024 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:03.999138 osdx hostapd[820338]: eth2: RADIUS Received 229 bytes from RADIUS server Mar 23 14:55:03.999144 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:03.999147 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:03.999161 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=109 len=171) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:03.999167 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 109) Mar 23 14:55:04.000416 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=109 len=103) from STA: EAP Response-PEAP (25) Mar 23 14:55:04.000452 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:04.000464 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:04.000740 osdx hostapd[820338]: eth2: RADIUS Received 115 bytes from RADIUS server Mar 23 14:55:04.000745 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:04.000748 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:04.000761 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=110 len=57) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:04.000766 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 110) Mar 23 14:55:04.000948 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=110 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:55:04.000979 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:04.001021 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:04.001129 osdx hostapd[820338]: eth2: RADIUS Received 98 bytes from RADIUS server Mar 23 14:55:04.001134 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:04.001142 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:04.001159 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=111 len=40) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:04.001165 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 111) Mar 23 14:55:04.001355 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=111 len=41) from STA: EAP Response-PEAP (25) Mar 23 14:55:04.001395 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:04.001410 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:04.001562 osdx hostapd[820338]: eth2: RADIUS Received 131 bytes from RADIUS server Mar 23 14:55:04.001567 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:04.001570 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:04.001584 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=112 len=73) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:04.001590 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 112) Mar 23 14:55:04.001835 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=112 len=95) from STA: EAP Response-PEAP (25) Mar 23 14:55:04.001871 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:04.001882 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:04.002067 osdx hostapd[820338]: eth2: RADIUS Received 104 bytes from RADIUS server Mar 23 14:55:04.002072 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:04.002074 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:04.002088 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=113 len=46) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:04.002093 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 113) Mar 23 14:55:04.002275 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=113 len=46) from STA: EAP Response-PEAP (25) Mar 23 14:55:04.002310 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:04.002321 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:04.291070 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:05.002429 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Mar 23 14:55:05.002471 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:55:05.002620 osdx hostapd[820338]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:55:05.002624 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:05.002629 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:05.002681 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=113 len=4) from RADIUS server: EAP Failure Mar 23 14:55:05.002710 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 113) Mar 23 14:55:05.002724 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Mar 23 14:55:05.002729 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Mar 23 14:55:05.002733 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Mar 23 14:55:05.002738 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Mar 23 14:55:05.002800 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Mar 23 14:55:05.002808 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Mar 23 14:55:05.002822 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:05.002833 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:05.002847 osdx hostapd[820338]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:55:05.002854 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:05.002859 osdx hostapd[820338]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet Mar 23 14:55:06.002918 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Mar 23 14:55:06.002952 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:55:06.003257 osdx hostapd[820338]: eth2: RADIUS Received 20 bytes from RADIUS server Mar 23 14:55:06.003263 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:06.003266 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:06.003270 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Mar 23 14:55:06.003318 osdx hostapd[820338]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Mar 23 14:55:06.003321 osdx hostapd[820338]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Mar 23 14:55:06.003323 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Mar 23 14:55:06.003326 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Mar 23 14:55:06.003332 osdx hostapd[820338]: eth2: RADIUS Received 20 bytes from RADIUS server Mar 23 14:55:06.003334 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:06.003336 osdx hostapd[820338]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Mar 23 14:55:10.585687 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:14.743019 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:18.896295 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:23.069410 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:26.004241 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Mar 23 14:55:26.004252 osdx hostapd[820338]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Mar 23 14:55:26.004256 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X Mar 23 14:55:26.004260 osdx hostapd[820338]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Mar 23 14:55:26.004272 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Mar 23 14:55:26.004278 osdx hostapd[820338]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:55:26.004318 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 214) Mar 23 14:55:26.004736 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=214 len=10) from STA: EAP Response-Identity (1) Mar 23 14:55:26.004748 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Mar 23 14:55:26.004838 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.004974 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:26.005176 osdx hostapd[820338]: eth2: RADIUS Received 80 bytes from RADIUS server Mar 23 14:55:26.005182 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:26.005187 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:26.005220 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=215 len=22) from RADIUS server: EAP-Request-MD5 (4) Mar 23 14:55:26.005228 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 215) Mar 23 14:55:26.005494 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=215 len=6) from STA: EAP Response-unknown (3) Mar 23 14:55:26.005543 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.005560 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:26.005734 osdx hostapd[820338]: eth2: RADIUS Received 64 bytes from RADIUS server Mar 23 14:55:26.005740 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:26.005745 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:26.005762 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=216 len=6) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:26.005769 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 216) Mar 23 14:55:26.006097 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=216 len=194) from STA: EAP Response-PEAP (25) Mar 23 14:55:26.006162 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.006181 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:26.007167 osdx hostapd[820338]: eth2: RADIUS Received 1068 bytes from RADIUS server Mar 23 14:55:26.007180 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:26.007185 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:26.007212 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=217 len=1004) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:26.007221 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 217) Mar 23 14:55:26.007399 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=217 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:55:26.007443 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.007458 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:26.007603 osdx hostapd[820338]: eth2: RADIUS Received 229 bytes from RADIUS server Mar 23 14:55:26.007609 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:26.007613 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:26.007630 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=218 len=171) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:26.007636 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 218) Mar 23 14:55:26.008627 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=218 len=103) from STA: EAP Response-PEAP (25) Mar 23 14:55:26.008674 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.008694 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:26.008999 osdx hostapd[820338]: eth2: RADIUS Received 115 bytes from RADIUS server Mar 23 14:55:26.009005 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:26.009009 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:26.009026 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=219 len=57) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:26.009033 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 219) Mar 23 14:55:26.009297 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=219 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:55:26.009336 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.009347 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:26.009504 osdx hostapd[820338]: eth2: RADIUS Received 98 bytes from RADIUS server Mar 23 14:55:26.009512 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:26.009516 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:26.009538 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=220 len=40) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:26.009547 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 220) Mar 23 14:55:26.009746 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=220 len=41) from STA: EAP Response-PEAP (25) Mar 23 14:55:26.009798 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.009812 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:26.010001 osdx hostapd[820338]: eth2: RADIUS Received 131 bytes from RADIUS server Mar 23 14:55:26.010007 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:26.010011 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:26.010028 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=221 len=73) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:26.010034 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 221) Mar 23 14:55:26.010317 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=221 len=95) from STA: EAP Response-PEAP (25) Mar 23 14:55:26.010354 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.010365 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:26.010585 osdx hostapd[820338]: eth2: RADIUS Received 104 bytes from RADIUS server Mar 23 14:55:26.010590 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:26.010593 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:26.010605 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=222 len=46) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:26.010610 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 222) Mar 23 14:55:26.010810 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=222 len=46) from STA: EAP Response-PEAP (25) Mar 23 14:55:26.010843 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:26.010855 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:27.011218 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Mar 23 14:55:27.011260 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:55:27.011432 osdx hostapd[820338]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:55:27.011436 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:27.011441 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:27.011494 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=222 len=4) from RADIUS server: EAP Failure Mar 23 14:55:27.011519 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 222) Mar 23 14:55:27.011534 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Mar 23 14:55:27.011538 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Mar 23 14:55:27.011541 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Mar 23 14:55:27.011546 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Mar 23 14:55:27.011572 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Mar 23 14:55:27.011580 osdx hostapd[820338]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Mar 23 14:55:27.011594 osdx hostapd[820338]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:27.011605 osdx hostapd[820338]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:27.011633 osdx hostapd[820338]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:55:27.011636 osdx hostapd[820338]: eth2: RADIUS Received RADIUS message Mar 23 14:55:27.011639 osdx hostapd[820338]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Test Quiet Period In MAB-First Mode
Description
This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode MAB-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+TPB1tLmTFGLsU+ouT4fCX8/Ydbr265ysi7Q6qQfhJ2ydnMWJVfvMQVJzwV5c7l5hb07XqLRz7Mg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.546 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.546/0.546/0.546/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19r1Pd1NFw/8KzlAMxNlg2Tbw4b4DSeMcg= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Mar 23 14:55:34.254303 osdx hostapd[820901]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Mar 23 14:55:34.254314 osdx hostapd[820901]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:55:34.254536 osdx hostapd[820901]: connect[radius]: Network is unreachable Mar 23 14:55:34.254356 osdx hostapd[820901]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Mar 23 14:55:34.254359 osdx hostapd[820901]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Mar 23 14:55:34.274155 osdx hostapd[820901]: Discovery mode enabled on eth2 Mar 23 14:55:34.274249 osdx hostapd[820901]: eth2: interface state UNINITIALIZED->ENABLED Mar 23 14:55:34.274249 osdx hostapd[820901]: eth2: AP-ENABLED Mar 23 14:55:37.394303 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Mar 23 14:55:37.394318 osdx hostapd[820902]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Mar 23 14:55:37.410185 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication Mar 23 14:55:37.410221 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Mar 23 14:55:37.410241 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Mar 23 14:55:37.412891 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Mar 23 14:55:37.412909 osdx hostapd[820902]: eth2: RADIUS Authentication server 10.215.168.1:1812 Mar 23 14:55:37.413040 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:37.413080 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:37.413124 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Mar 23 14:55:37.681259 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:38.413222 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Mar 23 14:55:38.413255 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:55:38.413445 osdx hostapd[820902]: eth2: RADIUS Received 20 bytes from RADIUS server Mar 23 14:55:38.413450 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.413454 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.413459 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Mar 23 14:55:38.413506 osdx hostapd[820902]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Mar 23 14:55:38.413509 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X Mar 23 14:55:38.413513 osdx hostapd[820902]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Mar 23 14:55:38.413518 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started Mar 23 14:55:38.413528 osdx hostapd[820902]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:55:38.413544 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 184) Mar 23 14:55:38.413560 osdx hostapd[820902]: eth2: RADIUS Received 20 bytes from RADIUS server Mar 23 14:55:38.413562 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.413565 osdx hostapd[820902]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet Mar 23 14:55:38.414078 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=184 len=10) from STA: EAP Response-Identity (1) Mar 23 14:55:38.414103 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Mar 23 14:55:38.414170 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.414187 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:38.414451 osdx hostapd[820902]: eth2: RADIUS Received 80 bytes from RADIUS server Mar 23 14:55:38.414458 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.414463 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.414495 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=185 len=22) from RADIUS server: EAP-Request-MD5 (4) Mar 23 14:55:38.414501 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 185) Mar 23 14:55:38.414715 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=185 len=6) from STA: EAP Response-unknown (3) Mar 23 14:55:38.414759 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.414771 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:38.414990 osdx hostapd[820902]: eth2: RADIUS Received 64 bytes from RADIUS server Mar 23 14:55:38.414995 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.414998 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.415016 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=186 len=6) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:38.415022 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 186) Mar 23 14:55:38.415381 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=186 len=194) from STA: EAP Response-PEAP (25) Mar 23 14:55:38.415469 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.415484 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:38.416885 osdx hostapd[820902]: eth2: RADIUS Received 1068 bytes from RADIUS server Mar 23 14:55:38.416895 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.416900 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.416932 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=187 len=1004) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:38.416941 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 187) Mar 23 14:55:38.417214 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=187 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:55:38.417275 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.417290 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:38.417474 osdx hostapd[820902]: eth2: RADIUS Received 229 bytes from RADIUS server Mar 23 14:55:38.417478 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.417481 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.417497 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=188 len=171) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:38.417504 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 188) Mar 23 14:55:38.419061 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=188 len=103) from STA: EAP Response-PEAP (25) Mar 23 14:55:38.419107 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.419122 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:38.419469 osdx hostapd[820902]: eth2: RADIUS Received 115 bytes from RADIUS server Mar 23 14:55:38.419475 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.419478 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.419497 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=189 len=57) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:38.419504 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 189) Mar 23 14:55:38.419786 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=189 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:55:38.419835 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.419848 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:38.420015 osdx hostapd[820902]: eth2: RADIUS Received 98 bytes from RADIUS server Mar 23 14:55:38.420022 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.420025 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.420043 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=190 len=40) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:38.420048 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 190) Mar 23 14:55:38.420246 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=190 len=41) from STA: EAP Response-PEAP (25) Mar 23 14:55:38.420286 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.420298 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:38.420479 osdx hostapd[820902]: eth2: RADIUS Received 131 bytes from RADIUS server Mar 23 14:55:38.420484 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.420487 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.420500 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=191 len=73) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:38.420505 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 191) Mar 23 14:55:38.420792 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=191 len=95) from STA: EAP Response-PEAP (25) Mar 23 14:55:38.420823 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.420832 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:38.421031 osdx hostapd[820902]: eth2: RADIUS Received 104 bytes from RADIUS server Mar 23 14:55:38.421036 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:38.421039 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:38.421054 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=192 len=46) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:38.421060 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 192) Mar 23 14:55:38.421210 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=192 len=46) from STA: EAP Response-PEAP (25) Mar 23 14:55:38.421241 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:38.421252 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:39.421335 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Mar 23 14:55:39.421370 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:55:39.421568 osdx hostapd[820902]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:55:39.421571 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:39.421575 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:39.421617 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=192 len=4) from RADIUS server: EAP Failure Mar 23 14:55:39.421640 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 192) Mar 23 14:55:39.421653 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Mar 23 14:55:39.421666 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Mar 23 14:55:39.421669 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Mar 23 14:55:39.421681 osdx hostapd[820902]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:55:39.421684 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:39.421687 osdx hostapd[820902]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Mar 23 14:55:43.944380 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:48.105893 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:52.279226 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:56.442332 osdx OSDxCLI[768149]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Mar 23 14:55:59.430195 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Mar 23 14:55:59.430205 osdx hostapd[820902]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Mar 23 14:55:59.430239 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 236) Mar 23 14:55:59.430622 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=236 len=10) from STA: EAP Response-Identity (1) Mar 23 14:55:59.430633 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Mar 23 14:55:59.430696 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.430716 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:59.430936 osdx hostapd[820902]: eth2: RADIUS Received 80 bytes from RADIUS server Mar 23 14:55:59.430941 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:59.430943 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:59.430967 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=237 len=22) from RADIUS server: EAP-Request-MD5 (4) Mar 23 14:55:59.430973 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 237) Mar 23 14:55:59.431134 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=237 len=6) from STA: EAP Response-unknown (3) Mar 23 14:55:59.431168 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.431178 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:59.431349 osdx hostapd[820902]: eth2: RADIUS Received 64 bytes from RADIUS server Mar 23 14:55:59.431355 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:59.431359 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:59.431373 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=238 len=6) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:59.431378 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 238) Mar 23 14:55:59.431670 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=238 len=194) from STA: EAP Response-PEAP (25) Mar 23 14:55:59.431712 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.431725 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:59.432838 osdx hostapd[820902]: eth2: RADIUS Received 1068 bytes from RADIUS server Mar 23 14:55:59.432844 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:59.432848 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:59.432869 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=239 len=1004) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:59.432876 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 239) Mar 23 14:55:59.433070 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=239 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:55:59.433117 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.433132 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:59.433257 osdx hostapd[820902]: eth2: RADIUS Received 229 bytes from RADIUS server Mar 23 14:55:59.433262 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:59.433265 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:59.433280 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=240 len=171) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:59.433286 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 240) Mar 23 14:55:59.434413 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=240 len=103) from STA: EAP Response-PEAP (25) Mar 23 14:55:59.434466 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.434481 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:59.434772 osdx hostapd[820902]: eth2: RADIUS Received 115 bytes from RADIUS server Mar 23 14:55:59.434777 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:59.434781 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:59.434797 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=241 len=57) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:59.434803 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 241) Mar 23 14:55:59.435097 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=241 len=6) from STA: EAP Response-PEAP (25) Mar 23 14:55:59.435135 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.435147 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:59.435278 osdx hostapd[820902]: eth2: RADIUS Received 98 bytes from RADIUS server Mar 23 14:55:59.435284 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:59.435288 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:59.435303 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=242 len=40) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:59.435309 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 242) Mar 23 14:55:59.435491 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=242 len=41) from STA: EAP Response-PEAP (25) Mar 23 14:55:59.435547 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.435569 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:59.435735 osdx hostapd[820902]: eth2: RADIUS Received 131 bytes from RADIUS server Mar 23 14:55:59.435741 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:59.435745 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:59.435763 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=243 len=73) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:59.435770 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 243) Mar 23 14:55:59.436033 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=243 len=95) from STA: EAP Response-PEAP (25) Mar 23 14:55:59.436072 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.436085 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:55:59.436274 osdx hostapd[820902]: eth2: RADIUS Received 104 bytes from RADIUS server Mar 23 14:55:59.436281 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:55:59.436286 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:55:59.436308 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=244 len=46) from RADIUS server: EAP-Request-PEAP (25) Mar 23 14:55:59.436315 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 244) Mar 23 14:55:59.436510 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=244 len=46) from STA: EAP Response-PEAP (25) Mar 23 14:55:59.436558 osdx hostapd[820902]: eth2: RADIUS Sending RADIUS message to authentication server Mar 23 14:55:59.436572 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Mar 23 14:56:00.436651 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Mar 23 14:56:00.436684 osdx hostapd[820902]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Mar 23 14:56:00.436859 osdx hostapd[820902]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:56:00.436866 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:56:00.436870 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Mar 23 14:56:00.436910 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=244 len=4) from RADIUS server: EAP Failure Mar 23 14:56:00.436933 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 244) Mar 23 14:56:00.436946 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Mar 23 14:56:00.436950 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Mar 23 14:56:00.436953 osdx hostapd[820902]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Mar 23 14:56:00.436958 osdx hostapd[820902]: eth2: RADIUS Received 44 bytes from RADIUS server Mar 23 14:56:00.436961 osdx hostapd[820902]: eth2: RADIUS Received RADIUS message Mar 23 14:56:00.436964 osdx hostapd[820902]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet