Quiet Period

Contents

This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.

Test Quiet Period In 802.1X Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1x authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode only-802.1x
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX18ydwGiXTAtpc+e6dZzkbYCovbaPQukypWlh2eJ90e1ivX4phyT3xlzEDkkkEhryEDDJhcPPQcZhQ==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.261 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.261/0.261/0.261/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19GsiGOhRHDRsH2pZ2iSVxfzeSpF+3svi4=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Authentication failed, enforcing quiet period

Show output

Apr 16 23:52:22.732271 osdx hostapd[1097547]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Apr 16 23:52:22.732284 osdx hostapd[1097547]: eth2: RADIUS Authentication server 10.215.168.1:1812
Apr 16 23:52:22.732607 osdx hostapd[1097547]: connect[radius]: Network is unreachable
Apr 16 23:52:22.732324 osdx hostapd[1097547]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2
Apr 16 23:52:22.732327 osdx hostapd[1097547]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Apr 16 23:52:22.752047 osdx hostapd[1097547]: Discovery mode enabled on eth2
Apr 16 23:52:22.752145 osdx hostapd[1097547]: eth2: interface state UNINITIALIZED->ENABLED
Apr 16 23:52:22.752145 osdx hostapd[1097547]: eth2: AP-ENABLED
Apr 16 23:52:24.204834 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:26.061869 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added
Apr 16 23:52:26.061889 osdx hostapd[1097548]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Apr 16 23:52:26.084057 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication
Apr 16 23:52:26.084086 osdx hostapd[1097548]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Apr 16 23:52:26.084100 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA
Apr 16 23:52:26.084108 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port
Apr 16 23:52:26.084115 osdx hostapd[1097548]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Apr 16 23:52:26.084139 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 60)
Apr 16 23:52:26.084495 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=60 len=10) from STA: EAP Response-Identity (1)
Apr 16 23:52:26.084506 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong'
Apr 16 23:52:26.084530 osdx hostapd[1097548]: eth2: RADIUS Authentication server 10.215.168.1:1812
Apr 16 23:52:26.086365 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.086393 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.086659 osdx hostapd[1097548]: eth2: RADIUS Received 80 bytes from RADIUS server
Apr 16 23:52:26.086666 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:26.086670 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:26.086687 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=61 len=22) from RADIUS server: EAP-Request-MD5 (4)
Apr 16 23:52:26.086694 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 61)
Apr 16 23:52:26.086929 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=61 len=6) from STA: EAP Response-unknown (3)
Apr 16 23:52:26.086973 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.086986 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.087170 osdx hostapd[1097548]: eth2: RADIUS Received 64 bytes from RADIUS server
Apr 16 23:52:26.087175 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:26.087179 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:26.087198 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=62 len=6) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:26.087204 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 62)
Apr 16 23:52:26.087506 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=62 len=194) from STA: EAP Response-PEAP (25)
Apr 16 23:52:26.087545 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.087557 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.088510 osdx hostapd[1097548]: eth2: RADIUS Received 1068 bytes from RADIUS server
Apr 16 23:52:26.088516 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:26.088519 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:26.088540 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=63 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:26.088546 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 63)
Apr 16 23:52:26.088690 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=63 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:52:26.088726 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.088739 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.088839 osdx hostapd[1097548]: eth2: RADIUS Received 229 bytes from RADIUS server
Apr 16 23:52:26.088844 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:26.088846 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:26.088858 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=64 len=171) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:26.088864 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 64)
Apr 16 23:52:26.090141 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=64 len=103) from STA: EAP Response-PEAP (25)
Apr 16 23:52:26.090194 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.090207 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.090501 osdx hostapd[1097548]: eth2: RADIUS Received 115 bytes from RADIUS server
Apr 16 23:52:26.090506 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:26.090509 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:26.090526 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=65 len=57) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:26.090532 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 65)
Apr 16 23:52:26.090760 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=65 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:52:26.090801 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.090814 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.090939 osdx hostapd[1097548]: eth2: RADIUS Received 98 bytes from RADIUS server
Apr 16 23:52:26.090944 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:26.090947 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:26.090962 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=66 len=40) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:26.090967 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 66)
Apr 16 23:52:26.091150 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=66 len=41) from STA: EAP Response-PEAP (25)
Apr 16 23:52:26.091183 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.091195 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.091355 osdx hostapd[1097548]: eth2: RADIUS Received 131 bytes from RADIUS server
Apr 16 23:52:26.091360 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:26.091362 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:26.091374 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=67 len=73) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:26.091380 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 67)
Apr 16 23:52:26.091625 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=67 len=95) from STA: EAP Response-PEAP (25)
Apr 16 23:52:26.091652 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.091661 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.091818 osdx hostapd[1097548]: eth2: RADIUS Received 104 bytes from RADIUS server
Apr 16 23:52:26.091822 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:26.091826 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:26.091838 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=68 len=46) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:26.091843 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 68)
Apr 16 23:52:26.091993 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=68 len=46) from STA: EAP Response-PEAP (25)
Apr 16 23:52:26.092020 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:26.092029 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:26.351505 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:27.092125 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8)
Apr 16 23:52:27.092161 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Apr 16 23:52:27.092308 osdx hostapd[1097548]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:52:27.092312 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:27.092315 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:27.092355 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=68 len=4) from RADIUS server: EAP Failure
Apr 16 23:52:27.092379 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 68)
Apr 16 23:52:27.092393 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port
Apr 16 23:52:27.092397 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Apr 16 23:52:27.092402 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Apr 16 23:52:27.092407 osdx hostapd[1097548]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:52:27.092409 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:27.092412 osdx hostapd[1097548]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Apr 16 23:52:28.735604 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:30.818149 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:32.930812 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:35.007823 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:37.087035 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:39.170589 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:41.269619 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:43.388270 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:45.500301 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:47.102331 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Apr 16 23:52:47.102348 osdx hostapd[1097548]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Apr 16 23:52:47.102396 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 205)
Apr 16 23:52:47.102840 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=205 len=10) from STA: EAP Response-Identity (1)
Apr 16 23:52:47.102852 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong'
Apr 16 23:52:47.102933 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.102958 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:47.103244 osdx hostapd[1097548]: eth2: RADIUS Received 80 bytes from RADIUS server
Apr 16 23:52:47.103252 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:47.103260 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:47.103287 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=206 len=22) from RADIUS server: EAP-Request-MD5 (4)
Apr 16 23:52:47.103295 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 206)
Apr 16 23:52:47.103522 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=206 len=6) from STA: EAP Response-unknown (3)
Apr 16 23:52:47.103567 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.103580 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:47.103839 osdx hostapd[1097548]: eth2: RADIUS Received 64 bytes from RADIUS server
Apr 16 23:52:47.103846 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:47.103851 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:47.103882 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=207 len=6) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:47.103891 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 207)
Apr 16 23:52:47.104283 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=207 len=194) from STA: EAP Response-PEAP (25)
Apr 16 23:52:47.104323 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.104334 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:47.105625 osdx hostapd[1097548]: eth2: RADIUS Received 1068 bytes from RADIUS server
Apr 16 23:52:47.105632 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:47.105635 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:47.105663 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=208 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:47.105671 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 208)
Apr 16 23:52:47.105933 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=208 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:52:47.105977 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.105988 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:47.106177 osdx hostapd[1097548]: eth2: RADIUS Received 229 bytes from RADIUS server
Apr 16 23:52:47.106185 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:47.106189 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:47.106216 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=209 len=171) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:47.106225 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 209)
Apr 16 23:52:47.107663 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=209 len=103) from STA: EAP Response-PEAP (25)
Apr 16 23:52:47.107723 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.107741 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:47.108192 osdx hostapd[1097548]: eth2: RADIUS Received 115 bytes from RADIUS server
Apr 16 23:52:47.108199 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:47.108203 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:47.108238 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=210 len=57) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:47.108246 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 210)
Apr 16 23:52:47.108534 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=210 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:52:47.108576 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.108591 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:47.108760 osdx hostapd[1097548]: eth2: RADIUS Received 98 bytes from RADIUS server
Apr 16 23:52:47.108766 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:47.108774 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:47.108793 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=211 len=40) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:47.108799 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 211)
Apr 16 23:52:47.108992 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=211 len=41) from STA: EAP Response-PEAP (25)
Apr 16 23:52:47.109028 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.109040 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:47.109220 osdx hostapd[1097548]: eth2: RADIUS Received 131 bytes from RADIUS server
Apr 16 23:52:47.109227 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:47.109231 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:47.109250 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=212 len=73) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:47.109263 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 212)
Apr 16 23:52:47.109570 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=212 len=95) from STA: EAP Response-PEAP (25)
Apr 16 23:52:47.109619 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.109637 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:52:47.109872 osdx hostapd[1097548]: eth2: RADIUS Received 104 bytes from RADIUS server
Apr 16 23:52:47.109880 osdx hostapd[1097548]: eth2: RADIUS Received RADIUS message
Apr 16 23:52:47.109883 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:52:47.109902 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=213 len=46) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:52:47.109909 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 213)
Apr 16 23:52:47.110131 osdx hostapd[1097548]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=213 len=46) from STA: EAP Response-PEAP (25)
Apr 16 23:52:47.110183 osdx hostapd[1097548]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:47.110200 osdx hostapd[1097548]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds

---

Test Quiet Period In MAB Mode

Description

This scenario shows how to configure the quiet period in a device with MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode only-MAB
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX19Xb7DqggCb/VBhsludiNqLFr/PJw5AaWs6RzMh/Jm7Av2Xd4+LmbPXX1+IcZvegnTKFdT6ENUGhQ==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.212 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.212/0.212/0.212/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

MAB: Authentication failed, entering held state

Show output

Apr 16 23:52:54.273652 osdx hostapd[1098125]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Apr 16 23:52:54.273665 osdx hostapd[1098125]: eth2: RADIUS Authentication server 10.215.168.1:1812
Apr 16 23:52:54.273886 osdx hostapd[1098125]: connect[radius]: Network is unreachable
Apr 16 23:52:54.273702 osdx hostapd[1098125]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5
Apr 16 23:52:54.273705 osdx hostapd[1098125]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Apr 16 23:52:54.293532 osdx hostapd[1098125]: Discovery mode enabled on eth2
Apr 16 23:52:54.293609 osdx hostapd[1098125]: eth2: interface state UNINITIALIZED->ENABLED
Apr 16 23:52:54.293609 osdx hostapd[1098125]: eth2: AP-ENABLED
Apr 16 23:52:57.452249 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:52:59.296861 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication
Apr 16 23:52:59.296896 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Apr 16 23:52:59.296905 osdx hostapd[1098126]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Apr 16 23:52:59.309555 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication
Apr 16 23:52:59.309584 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Apr 16 23:52:59.309598 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Apr 16 23:52:59.311249 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Apr 16 23:52:59.311259 osdx hostapd[1098126]: eth2: RADIUS Authentication server 10.215.168.1:1812
Apr 16 23:52:59.311328 osdx hostapd[1098126]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:52:59.311354 osdx hostapd[1098126]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:00.311439 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Apr 16 23:53:00.311469 osdx hostapd[1098126]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Apr 16 23:53:00.311629 osdx hostapd[1098126]: eth2: RADIUS Received 20 bytes from RADIUS server
Apr 16 23:53:00.311634 osdx hostapd[1098126]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:00.311638 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:00.311642 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Apr 16 23:53:00.311706 osdx hostapd[1098126]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Apr 16 23:53:00.311711 osdx hostapd[1098126]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Apr 16 23:53:00.311715 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Apr 16 23:53:00.311718 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Apr 16 23:53:00.311726 osdx hostapd[1098126]: eth2: RADIUS Received 20 bytes from RADIUS server
Apr 16 23:53:00.311729 osdx hostapd[1098126]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:00.311732 osdx hostapd[1098126]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Apr 16 23:53:03.741105 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:07.940486 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:12.178103 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:16.345335 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:20.311830 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Apr 16 23:53:20.311841 osdx hostapd[1098126]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Apr 16 23:53:20.311844 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB
Apr 16 23:53:20.311846 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Apr 16 23:53:20.311894 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Apr 16 23:53:20.311924 osdx hostapd[1098126]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Apr 16 23:53:20.311945 osdx hostapd[1098126]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:20.311970 osdx hostapd[1098126]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds

---

Test Quiet Period In MAB-Fallback Mode

Description

This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode 802.1x-MAB
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX193zLJJBP/KKQ+12kSpVPjD1AkoFp3yZ8nq3ZZaLoH69dzKcrvTv1gPkyDYwiTh1HFBHkdKhpdNyg==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.495 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.495/0.495/0.495/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1/v607mAR0sPejzfuMOS3SMV+gc516mULc=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

MAB: Authentication failed, entering held state

Show output

Apr 16 23:53:28.864137 osdx hostapd[1098678]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Apr 16 23:53:28.864580 osdx hostapd[1098678]: connect[radius]: Network is unreachable
Apr 16 23:53:28.864153 osdx hostapd[1098678]: eth2: RADIUS Authentication server 10.215.168.1:1812
Apr 16 23:53:28.864206 osdx hostapd[1098678]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Apr 16 23:53:28.864210 osdx hostapd[1098678]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Apr 16 23:53:28.883744 osdx hostapd[1098678]: Discovery mode enabled on eth2
Apr 16 23:53:28.883857 osdx hostapd[1098678]: eth2: interface state UNINITIALIZED->ENABLED
Apr 16 23:53:28.883857 osdx hostapd[1098678]: eth2: AP-ENABLED
Apr 16 23:53:32.401577 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Apr 16 23:53:32.401589 osdx hostapd[1098679]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Apr 16 23:53:32.415762 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication
Apr 16 23:53:32.415796 osdx hostapd[1098679]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Apr 16 23:53:32.415801 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response
Apr 16 23:53:32.415804 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response
Apr 16 23:53:32.415824 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response
Apr 16 23:53:32.415827 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Apr 16 23:53:32.415839 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Apr 16 23:53:32.415848 osdx hostapd[1098679]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Apr 16 23:53:32.415917 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 251)
Apr 16 23:53:32.416317 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=251 len=10) from STA: EAP Response-Identity (1)
Apr 16 23:53:32.416331 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Apr 16 23:53:32.416366 osdx hostapd[1098679]: eth2: RADIUS Authentication server 10.215.168.1:1812
Apr 16 23:53:32.418861 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.418895 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.419203 osdx hostapd[1098679]: eth2: RADIUS Received 80 bytes from RADIUS server
Apr 16 23:53:32.419210 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:32.419215 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:32.419237 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=252 len=22) from RADIUS server: EAP-Request-MD5 (4)
Apr 16 23:53:32.419245 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 252)
Apr 16 23:53:32.419581 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=252 len=6) from STA: EAP Response-unknown (3)
Apr 16 23:53:32.419635 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.419652 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.422253 osdx hostapd[1098679]: eth2: RADIUS Received 64 bytes from RADIUS server
Apr 16 23:53:32.422257 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:32.422261 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:32.422281 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=253 len=6) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:32.422288 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 253)
Apr 16 23:53:32.422866 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=253 len=194) from STA: EAP Response-PEAP (25)
Apr 16 23:53:32.422927 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.423071 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.424298 osdx hostapd[1098679]: eth2: RADIUS Received 1068 bytes from RADIUS server
Apr 16 23:53:32.424308 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:32.424313 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:32.424338 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=254 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:32.424346 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 254)
Apr 16 23:53:32.424669 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=254 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:53:32.424725 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.424742 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.424920 osdx hostapd[1098679]: eth2: RADIUS Received 229 bytes from RADIUS server
Apr 16 23:53:32.424923 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:32.424927 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:32.424952 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=255 len=171) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:32.424962 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 255)
Apr 16 23:53:32.427116 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=255 len=103) from STA: EAP Response-PEAP (25)
Apr 16 23:53:32.427174 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.427234 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.427551 osdx hostapd[1098679]: eth2: RADIUS Received 115 bytes from RADIUS server
Apr 16 23:53:32.427556 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:32.427561 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:32.427579 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=0 len=57) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:32.427586 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 0)
Apr 16 23:53:32.427863 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=0 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:53:32.427903 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.427989 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.428098 osdx hostapd[1098679]: eth2: RADIUS Received 98 bytes from RADIUS server
Apr 16 23:53:32.428103 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:32.428108 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:32.428130 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=1 len=40) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:32.428136 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 1)
Apr 16 23:53:32.428333 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=1 len=41) from STA: EAP Response-PEAP (25)
Apr 16 23:53:32.428379 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.428391 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.428589 osdx hostapd[1098679]: eth2: RADIUS Received 131 bytes from RADIUS server
Apr 16 23:53:32.428597 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:32.428601 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:32.428621 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=2 len=73) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:32.428628 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 2)
Apr 16 23:53:32.429021 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=2 len=95) from STA: EAP Response-PEAP (25)
Apr 16 23:53:32.429061 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.429072 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.429291 osdx hostapd[1098679]: eth2: RADIUS Received 104 bytes from RADIUS server
Apr 16 23:53:32.429301 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:32.429305 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:32.429320 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=3 len=46) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:32.429326 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 3)
Apr 16 23:53:32.429568 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=3 len=46) from STA: EAP Response-PEAP (25)
Apr 16 23:53:32.429618 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:32.429631 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:32.767757 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:33.429738 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Apr 16 23:53:33.429775 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Apr 16 23:53:33.429992 osdx hostapd[1098679]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:53:33.429996 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:33.430000 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:33.430049 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=3 len=4) from RADIUS server: EAP Failure
Apr 16 23:53:33.430077 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 3)
Apr 16 23:53:33.430091 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Apr 16 23:53:33.430095 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Apr 16 23:53:33.430099 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Apr 16 23:53:33.430103 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Apr 16 23:53:33.430132 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Apr 16 23:53:33.430139 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Apr 16 23:53:33.430152 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:33.430164 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:33.430176 osdx hostapd[1098679]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:53:33.430179 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:33.430182 osdx hostapd[1098679]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Apr 16 23:53:34.430276 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Apr 16 23:53:34.430320 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Apr 16 23:53:34.430540 osdx hostapd[1098679]: eth2: RADIUS Received 20 bytes from RADIUS server
Apr 16 23:53:34.430544 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:34.430548 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:34.430553 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Apr 16 23:53:34.430608 osdx hostapd[1098679]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Apr 16 23:53:34.430611 osdx hostapd[1098679]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Apr 16 23:53:34.430615 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec)
Apr 16 23:53:34.430617 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Apr 16 23:53:34.430629 osdx hostapd[1098679]: eth2: RADIUS Received 20 bytes from RADIUS server
Apr 16 23:53:34.430631 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:34.430634 osdx hostapd[1098679]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Apr 16 23:53:39.075631 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:43.268607 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:47.450616 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:51.642234 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:53:54.431017 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry
Apr 16 23:53:54.431030 osdx hostapd[1098679]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Apr 16 23:53:54.431034 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X
Apr 16 23:53:54.431039 osdx hostapd[1098679]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Apr 16 23:53:54.431049 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Apr 16 23:53:54.431056 osdx hostapd[1098679]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Apr 16 23:53:54.431098 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 71)
Apr 16 23:53:54.431536 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=71 len=10) from STA: EAP Response-Identity (1)
Apr 16 23:53:54.431549 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Apr 16 23:53:54.431632 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.431658 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:54.431937 osdx hostapd[1098679]: eth2: RADIUS Received 80 bytes from RADIUS server
Apr 16 23:53:54.431943 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:54.431952 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:54.431983 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=72 len=22) from RADIUS server: EAP-Request-MD5 (4)
Apr 16 23:53:54.431992 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 72)
Apr 16 23:53:54.432268 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=72 len=6) from STA: EAP Response-unknown (3)
Apr 16 23:53:54.432326 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.432388 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:54.432592 osdx hostapd[1098679]: eth2: RADIUS Received 64 bytes from RADIUS server
Apr 16 23:53:54.432601 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:54.432605 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:54.432630 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=73 len=6) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:54.432638 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 73)
Apr 16 23:53:54.433061 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=73 len=194) from STA: EAP Response-PEAP (25)
Apr 16 23:53:54.433126 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.433145 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:54.434327 osdx hostapd[1098679]: eth2: RADIUS Received 1068 bytes from RADIUS server
Apr 16 23:53:54.434335 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:54.434342 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:54.434374 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=74 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:54.434383 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 74)
Apr 16 23:53:54.434620 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=74 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:53:54.434690 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.434709 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:54.434886 osdx hostapd[1098679]: eth2: RADIUS Received 229 bytes from RADIUS server
Apr 16 23:53:54.434893 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:54.434899 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:54.434927 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=75 len=171) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:54.434936 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 75)
Apr 16 23:53:54.436347 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=75 len=103) from STA: EAP Response-PEAP (25)
Apr 16 23:53:54.436404 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.436422 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:54.436924 osdx hostapd[1098679]: eth2: RADIUS Received 115 bytes from RADIUS server
Apr 16 23:53:54.436934 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:54.436939 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:54.436982 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=76 len=57) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:54.436992 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 76)
Apr 16 23:53:54.437270 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=76 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:53:54.437326 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.437347 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:54.437523 osdx hostapd[1098679]: eth2: RADIUS Received 98 bytes from RADIUS server
Apr 16 23:53:54.437531 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:54.437536 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:54.437559 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=77 len=40) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:54.437568 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 77)
Apr 16 23:53:54.437835 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=77 len=41) from STA: EAP Response-PEAP (25)
Apr 16 23:53:54.437885 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.437899 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:54.438115 osdx hostapd[1098679]: eth2: RADIUS Received 131 bytes from RADIUS server
Apr 16 23:53:54.438123 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:54.438129 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:54.438160 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=78 len=73) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:54.438170 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 78)
Apr 16 23:53:54.438496 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=78 len=95) from STA: EAP Response-PEAP (25)
Apr 16 23:53:54.438549 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.438568 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:54.438828 osdx hostapd[1098679]: eth2: RADIUS Received 104 bytes from RADIUS server
Apr 16 23:53:54.438841 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:54.438851 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:54.438880 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=79 len=46) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:53:54.438890 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 79)
Apr 16 23:53:54.439175 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=79 len=46) from STA: EAP Response-PEAP (25)
Apr 16 23:53:54.439222 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:54.439235 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:55.439370 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Apr 16 23:53:55.439432 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Apr 16 23:53:55.439679 osdx hostapd[1098679]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:53:55.439701 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:55.439709 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:53:55.439779 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=79 len=4) from RADIUS server: EAP Failure
Apr 16 23:53:55.439829 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 79)
Apr 16 23:53:55.439868 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Apr 16 23:53:55.439874 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Apr 16 23:53:55.439880 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately
Apr 16 23:53:55.439904 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Apr 16 23:53:55.440011 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Apr 16 23:53:55.440042 osdx hostapd[1098679]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Apr 16 23:53:55.440073 osdx hostapd[1098679]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:53:55.440183 osdx hostapd[1098679]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:53:55.440213 osdx hostapd[1098679]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:53:55.440218 osdx hostapd[1098679]: eth2: RADIUS Received RADIUS message
Apr 16 23:53:55.440242 osdx hostapd[1098679]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet

---

Test Quiet Period In MAB-First Mode

Description

This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.215.168.64/24
set interfaces ethernet eth2 address 192.168.100.1/24
set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2
set interfaces ethernet eth2 authenticator aaa authentication list1
set interfaces ethernet eth2 authenticator log-level debug
set interfaces ethernet eth2 authenticator mode MAB-802.1x
set interfaces ethernet eth2 authenticator quiet-period 20
set interfaces ethernet eth2 authenticator reauth-period 0
set system aaa group radius radgroup1 server serv1
set system aaa list list1 method 1 group radius radgroup1
set system aaa server radius serv1 address 10.215.168.1
set system aaa server radius serv1 encrypted-key U2FsdGVkX1+tq2sCCzf4Nx0bsfz/h6mBeIXVtC/q+DolABKABWkV/v6Xc4ASxwhN8YhaeSNN38XGmHYpsY/HJA==
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Ping IP address 10.215.168.1 from DUT0:

admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1

Show output

PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data.
64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.257 ms

--- 10.215.168.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.257/0.257/0.257/0.000 ms

Step 3: Set the following configuration in DUT1 :

set interfaces ethernet eth2 address 192.168.100.2/24
set interfaces ethernet eth2 mac '00:11:22:33:44:55'
set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19yrAeyxS3E//ipAuBWwAT1ENLs0WNEyG8=
set interfaces ethernet eth2 supplicant username wrong
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Authentication failed, enforcing quiet period

Show output

Apr 16 23:54:02.823369 osdx hostapd[1099241]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported.
Apr 16 23:54:02.823830 osdx hostapd[1099241]: connect[radius]: Network is unreachable
Apr 16 23:54:02.823385 osdx hostapd[1099241]: eth2: RADIUS Authentication server 10.215.168.1:1812
Apr 16 23:54:02.823442 osdx hostapd[1099241]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30
Apr 16 23:54:02.823445 osdx hostapd[1099241]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode
Apr 16 23:54:02.839022 osdx hostapd[1099241]: Discovery mode enabled on eth2
Apr 16 23:54:02.839160 osdx hostapd[1099241]: eth2: interface state UNINITIALIZED->ENABLED
Apr 16 23:54:02.839160 osdx hostapd[1099241]: eth2: AP-ENABLED
Apr 16 23:54:06.138859 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added
Apr 16 23:54:06.138870 osdx hostapd[1099242]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode
Apr 16 23:54:06.151046 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication
Apr 16 23:54:06.151087 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query
Apr 16 23:54:06.151111 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55
Apr 16 23:54:06.153464 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55
Apr 16 23:54:06.153477 osdx hostapd[1099242]: eth2: RADIUS Authentication server 10.215.168.1:1812
Apr 16 23:54:06.153569 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:06.153604 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:06.153633 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA
Apr 16 23:54:06.397003 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:54:07.153696 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128)
Apr 16 23:54:07.153727 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Apr 16 23:54:07.153917 osdx hostapd[1099242]: eth2: RADIUS Received 20 bytes from RADIUS server
Apr 16 23:54:07.153920 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.153924 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.153928 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response
Apr 16 23:54:07.153974 osdx hostapd[1099242]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled
Apr 16 23:54:07.153976 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X
Apr 16 23:54:07.153979 osdx hostapd[1099242]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames
Apr 16 23:54:07.153982 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started
Apr 16 23:54:07.153988 osdx hostapd[1099242]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Apr 16 23:54:07.154002 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 96)
Apr 16 23:54:07.154014 osdx hostapd[1099242]: eth2: RADIUS Received 20 bytes from RADIUS server
Apr 16 23:54:07.154016 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.154018 osdx hostapd[1099242]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Apr 16 23:54:07.154384 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=96 len=10) from STA: EAP Response-Identity (1)
Apr 16 23:54:07.154396 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Apr 16 23:54:07.154459 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.154477 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:07.154690 osdx hostapd[1099242]: eth2: RADIUS Received 80 bytes from RADIUS server
Apr 16 23:54:07.154694 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.154697 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.154727 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=97 len=22) from RADIUS server: EAP-Request-MD5 (4)
Apr 16 23:54:07.154735 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 97)
Apr 16 23:54:07.155074 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=97 len=6) from STA: EAP Response-unknown (3)
Apr 16 23:54:07.155133 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.155150 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:07.155372 osdx hostapd[1099242]: eth2: RADIUS Received 64 bytes from RADIUS server
Apr 16 23:54:07.155378 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.155382 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.155399 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=98 len=6) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:07.155406 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 98)
Apr 16 23:54:07.155791 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=98 len=194) from STA: EAP Response-PEAP (25)
Apr 16 23:54:07.155835 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.155849 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:07.157263 osdx hostapd[1099242]: eth2: RADIUS Received 1068 bytes from RADIUS server
Apr 16 23:54:07.157271 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.157275 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.157306 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=99 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:07.157316 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 99)
Apr 16 23:54:07.157592 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=99 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:54:07.157645 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.157660 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:07.157843 osdx hostapd[1099242]: eth2: RADIUS Received 229 bytes from RADIUS server
Apr 16 23:54:07.157853 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.157857 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.157881 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=100 len=171) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:07.157891 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 100)
Apr 16 23:54:07.160072 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=100 len=103) from STA: EAP Response-PEAP (25)
Apr 16 23:54:07.160146 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.160587 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:07.160614 osdx hostapd[1099242]: eth2: RADIUS Received 115 bytes from RADIUS server
Apr 16 23:54:07.160618 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.160623 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.160647 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=101 len=57) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:07.160655 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 101)
Apr 16 23:54:07.160988 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=101 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:54:07.161038 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.161053 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:07.161239 osdx hostapd[1099242]: eth2: RADIUS Received 98 bytes from RADIUS server
Apr 16 23:54:07.161245 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.161249 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.161268 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=102 len=40) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:07.161275 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 102)
Apr 16 23:54:07.161511 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=102 len=41) from STA: EAP Response-PEAP (25)
Apr 16 23:54:07.161551 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.161565 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:07.161731 osdx hostapd[1099242]: eth2: RADIUS Received 131 bytes from RADIUS server
Apr 16 23:54:07.161737 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.161741 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.161756 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=103 len=73) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:07.161762 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 103)
Apr 16 23:54:07.162058 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=103 len=95) from STA: EAP Response-PEAP (25)
Apr 16 23:54:07.162114 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.162128 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:07.162360 osdx hostapd[1099242]: eth2: RADIUS Received 104 bytes from RADIUS server
Apr 16 23:54:07.162371 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:07.162376 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:07.162403 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=104 len=46) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:07.162411 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 104)
Apr 16 23:54:07.162656 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=104 len=46) from STA: EAP Response-PEAP (25)
Apr 16 23:54:07.162705 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:07.162775 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:08.162891 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8)
Apr 16 23:54:08.162935 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Apr 16 23:54:08.163781 osdx hostapd[1099242]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:54:08.163789 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:08.163793 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:08.163833 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=104 len=4) from RADIUS server: EAP Failure
Apr 16 23:54:08.163862 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 104)
Apr 16 23:54:08.163877 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Apr 16 23:54:08.163889 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Apr 16 23:54:08.163891 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)

Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:

Quiet period expired

Show output

Apr 16 23:54:12.643271 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:54:16.851728 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:54:21.074921 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:54:25.264816 osdx OSDxCLI[1043131]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'.
Apr 16 23:54:28.170319 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication
Apr 16 23:54:28.170333 osdx hostapd[1099242]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication
Apr 16 23:54:28.170383 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 138)
Apr 16 23:54:28.170888 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=138 len=10) from STA: EAP Response-Identity (1)
Apr 16 23:54:28.170921 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong'
Apr 16 23:54:28.171016 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.171044 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:28.171361 osdx hostapd[1099242]: eth2: RADIUS Received 80 bytes from RADIUS server
Apr 16 23:54:28.171368 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:28.171372 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:28.171397 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=139 len=22) from RADIUS server: EAP-Request-MD5 (4)
Apr 16 23:54:28.171404 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 139)
Apr 16 23:54:28.171718 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=139 len=6) from STA: EAP Response-unknown (3)
Apr 16 23:54:28.171773 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.171785 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:28.172000 osdx hostapd[1099242]: eth2: RADIUS Received 64 bytes from RADIUS server
Apr 16 23:54:28.172009 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:28.172013 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:28.172031 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=140 len=6) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:28.172038 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 140)
Apr 16 23:54:28.172442 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=140 len=194) from STA: EAP Response-PEAP (25)
Apr 16 23:54:28.172488 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.172502 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:28.173969 osdx hostapd[1099242]: eth2: RADIUS Received 1068 bytes from RADIUS server
Apr 16 23:54:28.173977 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:28.173982 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:28.174014 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=141 len=1004) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:28.174024 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 141)
Apr 16 23:54:28.174267 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=141 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:54:28.174322 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.174336 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:28.174507 osdx hostapd[1099242]: eth2: RADIUS Received 229 bytes from RADIUS server
Apr 16 23:54:28.174515 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:28.174519 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:28.174536 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=142 len=171) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:28.174543 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 142)
Apr 16 23:54:28.176170 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=142 len=103) from STA: EAP Response-PEAP (25)
Apr 16 23:54:28.176218 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.176231 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:28.176657 osdx hostapd[1099242]: eth2: RADIUS Received 115 bytes from RADIUS server
Apr 16 23:54:28.176664 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:28.176668 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:28.176694 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=143 len=57) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:28.176702 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 143)
Apr 16 23:54:28.177001 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=143 len=6) from STA: EAP Response-PEAP (25)
Apr 16 23:54:28.177052 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.177093 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:28.177291 osdx hostapd[1099242]: eth2: RADIUS Received 98 bytes from RADIUS server
Apr 16 23:54:28.177301 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:28.177306 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:28.177333 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=144 len=40) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:28.177342 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 144)
Apr 16 23:54:28.177581 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=144 len=41) from STA: EAP Response-PEAP (25)
Apr 16 23:54:28.177634 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.177817 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:28.177866 osdx hostapd[1099242]: eth2: RADIUS Received 131 bytes from RADIUS server
Apr 16 23:54:28.177871 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:28.177875 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:28.177905 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=145 len=73) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:28.177914 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 145)
Apr 16 23:54:28.178268 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=145 len=95) from STA: EAP Response-PEAP (25)
Apr 16 23:54:28.178319 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.178333 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:28.178556 osdx hostapd[1099242]: eth2: RADIUS Received 104 bytes from RADIUS server
Apr 16 23:54:28.178561 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:28.178565 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:28.178584 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=146 len=46) from RADIUS server: EAP-Request-PEAP (25)
Apr 16 23:54:28.178595 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 146)
Apr 16 23:54:28.178864 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=146 len=46) from STA: EAP Response-PEAP (25)
Apr 16 23:54:28.178915 osdx hostapd[1099242]: eth2: RADIUS Sending RADIUS message to authentication server
Apr 16 23:54:28.178982 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Apr 16 23:54:29.179091 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17)
Apr 16 23:54:29.179293 osdx hostapd[1099242]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds
Apr 16 23:54:29.179404 osdx hostapd[1099242]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:54:29.179409 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:29.179417 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Apr 16 23:54:29.179468 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=146 len=4) from RADIUS server: EAP Failure
Apr 16 23:54:29.179500 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 146)
Apr 16 23:54:29.179516 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port
Apr 16 23:54:29.179520 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)
Apr 16 23:54:29.179524 osdx hostapd[1099242]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds)
Apr 16 23:54:29.179530 osdx hostapd[1099242]: eth2: RADIUS Received 44 bytes from RADIUS server
Apr 16 23:54:29.179533 osdx hostapd[1099242]: eth2: RADIUS Received RADIUS message
Apr 16 23:54:29.179536 osdx hostapd[1099242]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet

---