Quiet Period
This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.
Test Quiet Period In 802.1X Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX186/i/YL5xLz8BrCnm9nhre/VzT8y6+0nHffyZrfVD148qa3fvzphJINxwyPosuPd4gWgsJWtvPHg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.554 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.554/0.554/0.554/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX190P1EuC67cc+1vk7Ll24jO2w803NBNDTk= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
May 04 18:07:30.246243 osdx hostapd[48023]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. May 04 18:07:30.246266 osdx hostapd[48023]: eth2: RADIUS Authentication server 10.215.168.1:1812 May 04 18:07:30.246751 osdx hostapd[48023]: connect[radius]: Network is unreachable May 04 18:07:30.246345 osdx hostapd[48023]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2 May 04 18:07:30.246353 osdx hostapd[48023]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode May 04 18:07:30.262006 osdx hostapd[48023]: Discovery mode enabled on eth2 May 04 18:07:30.262061 osdx hostapd[48023]: eth2: interface state UNINITIALIZED->ENABLED May 04 18:07:30.262061 osdx hostapd[48023]: eth2: AP-ENABLED May 04 18:07:31.669759 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:33.504371 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added May 04 18:07:33.504388 osdx hostapd[48024]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode May 04 18:07:33.522068 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication May 04 18:07:33.522098 osdx hostapd[48024]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames May 04 18:07:33.522114 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA May 04 18:07:33.522123 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port May 04 18:07:33.522132 osdx hostapd[48024]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 04 18:07:33.522151 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 203) May 04 18:07:33.522439 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=203 len=10) from STA: EAP Response-Identity (1) May 04 18:07:33.522456 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' May 04 18:07:33.522481 osdx hostapd[48024]: eth2: RADIUS Authentication server 10.215.168.1:1812 May 04 18:07:33.525224 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.525270 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.525685 osdx hostapd[48024]: eth2: RADIUS Received 80 bytes from RADIUS server May 04 18:07:33.525698 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:33.525706 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:33.525761 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=204 len=22) from RADIUS server: EAP-Request-MD5 (4) May 04 18:07:33.525774 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 204) May 04 18:07:33.526182 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=204 len=6) from STA: EAP Response-unknown (3) May 04 18:07:33.526260 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.526293 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.526674 osdx hostapd[48024]: eth2: RADIUS Received 64 bytes from RADIUS server May 04 18:07:33.526685 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:33.526691 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:33.526742 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=205 len=6) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:33.526757 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 205) May 04 18:07:33.527704 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=205 len=194) from STA: EAP Response-PEAP (25) May 04 18:07:33.527819 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.527854 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.530271 osdx hostapd[48024]: eth2: RADIUS Received 1068 bytes from RADIUS server May 04 18:07:33.530289 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:33.530299 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:33.530340 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=206 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:33.530352 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 206) May 04 18:07:33.530601 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=206 len=6) from STA: EAP Response-PEAP (25) May 04 18:07:33.530639 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.530650 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.530770 osdx hostapd[48024]: eth2: RADIUS Received 229 bytes from RADIUS server May 04 18:07:33.530775 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:33.530778 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:33.530792 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=207 len=171) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:33.530797 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 207) May 04 18:07:33.533149 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=207 len=103) from STA: EAP Response-PEAP (25) May 04 18:07:33.533191 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.533201 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.533482 osdx hostapd[48024]: eth2: RADIUS Received 115 bytes from RADIUS server May 04 18:07:33.533492 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:33.533496 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:33.533519 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=208 len=57) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:33.533526 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 208) May 04 18:07:33.533767 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=208 len=6) from STA: EAP Response-PEAP (25) May 04 18:07:33.533805 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.533819 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.533939 osdx hostapd[48024]: eth2: RADIUS Received 98 bytes from RADIUS server May 04 18:07:33.533944 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:33.533947 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:33.533960 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=209 len=40) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:33.533966 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 209) May 04 18:07:33.534098 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=209 len=41) from STA: EAP Response-PEAP (25) May 04 18:07:33.534132 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.534144 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.534291 osdx hostapd[48024]: eth2: RADIUS Received 131 bytes from RADIUS server May 04 18:07:33.534296 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:33.534300 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:33.534314 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=210 len=73) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:33.534321 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 210) May 04 18:07:33.534548 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=210 len=95) from STA: EAP Response-PEAP (25) May 04 18:07:33.534581 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.534589 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.534760 osdx hostapd[48024]: eth2: RADIUS Received 104 bytes from RADIUS server May 04 18:07:33.534765 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:33.534769 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:33.534798 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=211 len=46) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:33.534811 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 211) May 04 18:07:33.535153 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=211 len=46) from STA: EAP Response-PEAP (25) May 04 18:07:33.535216 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:33.535236 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:33.787453 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:34.535330 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) May 04 18:07:34.535362 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds May 04 18:07:34.535529 osdx hostapd[48024]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:07:34.535532 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:34.535536 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:34.535583 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=211 len=4) from RADIUS server: EAP Failure May 04 18:07:34.535606 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 211) May 04 18:07:34.535617 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port May 04 18:07:34.535621 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 04 18:07:34.535624 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) May 04 18:07:34.535627 osdx hostapd[48024]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:07:34.535630 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:34.535632 osdx hostapd[48024]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
May 04 18:07:36.161518 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:38.253836 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:40.318312 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:42.384088 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:44.471172 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:46.586384 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:48.661956 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:50.732453 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:52.812404 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:07:54.540335 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication May 04 18:07:54.540347 osdx hostapd[48024]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 04 18:07:54.540378 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 11) May 04 18:07:54.540793 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=11 len=10) from STA: EAP Response-Identity (1) May 04 18:07:54.540804 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' May 04 18:07:54.540866 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.540889 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:54.541099 osdx hostapd[48024]: eth2: RADIUS Received 80 bytes from RADIUS server May 04 18:07:54.541104 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:54.541107 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:54.541126 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=12 len=22) from RADIUS server: EAP-Request-MD5 (4) May 04 18:07:54.541131 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 12) May 04 18:07:54.541358 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=12 len=6) from STA: EAP Response-unknown (3) May 04 18:07:54.541402 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.541415 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:54.541653 osdx hostapd[48024]: eth2: RADIUS Received 64 bytes from RADIUS server May 04 18:07:54.541657 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:54.541661 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:54.541676 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=13 len=6) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:54.541681 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 13) May 04 18:07:54.541988 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=13 len=194) from STA: EAP Response-PEAP (25) May 04 18:07:54.542026 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.542036 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:54.544346 osdx hostapd[48024]: eth2: RADIUS Received 1068 bytes from RADIUS server May 04 18:07:54.544352 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:54.544355 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:54.544375 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=14 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:54.544381 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 14) May 04 18:07:54.544532 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=14 len=6) from STA: EAP Response-PEAP (25) May 04 18:07:54.544566 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.544582 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:54.544690 osdx hostapd[48024]: eth2: RADIUS Received 229 bytes from RADIUS server May 04 18:07:54.544696 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:54.544699 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:54.544713 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=15 len=171) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:54.544719 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 15) May 04 18:07:54.545724 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=15 len=103) from STA: EAP Response-PEAP (25) May 04 18:07:54.545761 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.545771 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:54.546070 osdx hostapd[48024]: eth2: RADIUS Received 115 bytes from RADIUS server May 04 18:07:54.546078 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:54.546083 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:54.546100 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=16 len=57) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:54.546107 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 16) May 04 18:07:54.546300 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=16 len=6) from STA: EAP Response-PEAP (25) May 04 18:07:54.546332 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.546344 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:54.546446 osdx hostapd[48024]: eth2: RADIUS Received 98 bytes from RADIUS server May 04 18:07:54.546451 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:54.546454 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:54.546465 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=17 len=40) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:54.546470 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 17) May 04 18:07:54.546611 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=17 len=41) from STA: EAP Response-PEAP (25) May 04 18:07:54.546643 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.546653 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:54.546803 osdx hostapd[48024]: eth2: RADIUS Received 131 bytes from RADIUS server May 04 18:07:54.546808 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:54.546811 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:54.546822 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=18 len=73) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:54.546827 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 18) May 04 18:07:54.547027 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=18 len=95) from STA: EAP Response-PEAP (25) May 04 18:07:54.547053 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.547060 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:07:54.547223 osdx hostapd[48024]: eth2: RADIUS Received 104 bytes from RADIUS server May 04 18:07:54.547227 osdx hostapd[48024]: eth2: RADIUS Received RADIUS message May 04 18:07:54.547230 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:07:54.547242 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=19 len=46) from RADIUS server: EAP-Request-PEAP (25) May 04 18:07:54.547247 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 19) May 04 18:07:54.547437 osdx hostapd[48024]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=19 len=46) from STA: EAP Response-PEAP (25) May 04 18:07:54.547472 osdx hostapd[48024]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:07:54.547484 osdx hostapd[48024]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB Mode
Description
This scenario shows how to configure the quiet period in a device with MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+xk/78a3TOTTeapVkLOKqU18bKDJ5nyUlImoUrYecWE1yx07FjtC/x+BSpb/YxpJDjI1ff7DRX/w== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.409 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.409/0.409/0.409/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
May 04 18:08:02.620524 osdx hostapd[48603]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. May 04 18:08:02.620538 osdx hostapd[48603]: eth2: RADIUS Authentication server 10.215.168.1:1812 May 04 18:08:02.620867 osdx hostapd[48603]: connect[radius]: Network is unreachable May 04 18:08:02.620587 osdx hostapd[48603]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5 May 04 18:08:02.620591 osdx hostapd[48603]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode May 04 18:08:02.636447 osdx hostapd[48603]: Discovery mode enabled on eth2 May 04 18:08:02.636447 osdx hostapd[48603]: eth2: interface state UNINITIALIZED->ENABLED May 04 18:08:02.636447 osdx hostapd[48603]: eth2: AP-ENABLED May 04 18:08:05.873560 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:07.638727 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication May 04 18:08:07.638767 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added May 04 18:08:07.638779 osdx hostapd[48604]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode May 04 18:08:07.652369 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication May 04 18:08:07.652400 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 04 18:08:07.652414 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 04 18:08:07.654060 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 04 18:08:07.654070 osdx hostapd[48604]: eth2: RADIUS Authentication server 10.215.168.1:1812 May 04 18:08:07.654141 osdx hostapd[48604]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:07.654170 osdx hostapd[48604]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:08.654279 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) May 04 18:08:08.654323 osdx hostapd[48604]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds May 04 18:08:08.654606 osdx hostapd[48604]: eth2: RADIUS Received 20 bytes from RADIUS server May 04 18:08:08.654611 osdx hostapd[48604]: eth2: RADIUS Received RADIUS message May 04 18:08:08.654616 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:08.654621 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response May 04 18:08:08.654682 osdx hostapd[48604]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 04 18:08:08.654685 osdx hostapd[48604]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 04 18:08:08.654691 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) May 04 18:08:08.654695 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds May 04 18:08:08.654704 osdx hostapd[48604]: eth2: RADIUS Received 20 bytes from RADIUS server May 04 18:08:08.654707 osdx hostapd[48604]: eth2: RADIUS Received RADIUS message May 04 18:08:08.654710 osdx hostapd[48604]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
May 04 18:08:12.148871 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:16.416827 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:20.633019 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:24.807344 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:28.655657 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry May 04 18:08:28.655668 osdx hostapd[48604]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 04 18:08:28.655670 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB May 04 18:08:28.655672 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 04 18:08:28.655721 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 04 18:08:28.655754 osdx hostapd[48604]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 04 18:08:28.655772 osdx hostapd[48604]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:28.655799 osdx hostapd[48604]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB-Fallback Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode 802.1x-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+U0lQqMBhiTB55SknJ6kdZnnVuQkuhLW+l5JxFPr5kv03et2shqSgol4FVD4NQd8f2heu45XPZbw== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.465 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.465/0.465/0.465/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1+Hkx7xeELTWtv/stFBs7etmQgDUSxZDhs= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
May 04 18:08:35.378998 osdx hostapd[49154]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. May 04 18:08:35.379312 osdx hostapd[49154]: connect[radius]: Network is unreachable May 04 18:08:35.379020 osdx hostapd[49154]: eth2: RADIUS Authentication server 10.215.168.1:1812 May 04 18:08:35.379059 osdx hostapd[49154]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 May 04 18:08:35.379062 osdx hostapd[49154]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode May 04 18:08:35.394906 osdx hostapd[49154]: Discovery mode enabled on eth2 May 04 18:08:35.395013 osdx hostapd[49154]: eth2: interface state UNINITIALIZED->ENABLED May 04 18:08:35.395013 osdx hostapd[49154]: eth2: AP-ENABLED May 04 18:08:38.811212 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added May 04 18:08:38.811225 osdx hostapd[49155]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode May 04 18:08:38.830896 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication May 04 18:08:38.830920 osdx hostapd[49155]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames May 04 18:08:38.830924 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response May 04 18:08:38.830927 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response May 04 18:08:38.830938 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response May 04 18:08:38.830940 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA May 04 18:08:38.830946 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 04 18:08:38.830954 osdx hostapd[49155]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 04 18:08:38.830973 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 48) May 04 18:08:38.831223 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=48 len=10) from STA: EAP Response-Identity (1) May 04 18:08:38.831233 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' May 04 18:08:38.831251 osdx hostapd[49155]: eth2: RADIUS Authentication server 10.215.168.1:1812 May 04 18:08:38.833492 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.833518 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:38.833751 osdx hostapd[49155]: eth2: RADIUS Received 80 bytes from RADIUS server May 04 18:08:38.833757 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:38.833762 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:38.833782 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=49 len=22) from RADIUS server: EAP-Request-MD5 (4) May 04 18:08:38.833789 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 49) May 04 18:08:38.834012 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=49 len=6) from STA: EAP Response-unknown (3) May 04 18:08:38.834063 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.834078 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:38.834276 osdx hostapd[49155]: eth2: RADIUS Received 64 bytes from RADIUS server May 04 18:08:38.834282 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:38.834285 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:38.834309 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=6) from RADIUS server: EAP-Request-PEAP (25) May 04 18:08:38.834315 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 50) May 04 18:08:38.834645 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=50 len=194) from STA: EAP Response-PEAP (25) May 04 18:08:38.834685 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.834700 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:38.835904 osdx hostapd[49155]: eth2: RADIUS Received 1068 bytes from RADIUS server May 04 18:08:38.835912 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:38.835917 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:38.835953 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 04 18:08:38.835963 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 51) May 04 18:08:38.836257 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=51 len=6) from STA: EAP Response-PEAP (25) May 04 18:08:38.836339 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.836372 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:38.836541 osdx hostapd[49155]: eth2: RADIUS Received 229 bytes from RADIUS server May 04 18:08:38.836545 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:38.836548 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:38.836565 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=52 len=171) from RADIUS server: EAP-Request-PEAP (25) May 04 18:08:38.836571 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 52) May 04 18:08:38.838254 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=52 len=103) from STA: EAP Response-PEAP (25) May 04 18:08:38.838302 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.838311 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:38.838586 osdx hostapd[49155]: eth2: RADIUS Received 115 bytes from RADIUS server May 04 18:08:38.838590 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:38.838594 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:38.838607 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=57) from RADIUS server: EAP-Request-PEAP (25) May 04 18:08:38.838612 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 53) May 04 18:08:38.838819 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=53 len=6) from STA: EAP Response-PEAP (25) May 04 18:08:38.838866 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.838877 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:38.838993 osdx hostapd[49155]: eth2: RADIUS Received 98 bytes from RADIUS server May 04 18:08:38.838998 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:38.839001 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:38.839017 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=54 len=40) from RADIUS server: EAP-Request-PEAP (25) May 04 18:08:38.839023 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 54) May 04 18:08:38.839172 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=54 len=41) from STA: EAP Response-PEAP (25) May 04 18:08:38.839213 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.839224 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:38.839342 osdx hostapd[49155]: eth2: RADIUS Received 131 bytes from RADIUS server May 04 18:08:38.839346 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:38.839349 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:38.839361 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=55 len=73) from RADIUS server: EAP-Request-PEAP (25) May 04 18:08:38.839366 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 55) May 04 18:08:38.839571 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=55 len=95) from STA: EAP Response-PEAP (25) May 04 18:08:38.839599 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.839606 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:38.839752 osdx hostapd[49155]: eth2: RADIUS Received 104 bytes from RADIUS server May 04 18:08:38.839756 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:38.839759 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:38.839769 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=56 len=46) from RADIUS server: EAP-Request-PEAP (25) May 04 18:08:38.839773 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 56) May 04 18:08:38.839923 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=56 len=46) from STA: EAP Response-PEAP (25) May 04 18:08:38.839952 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:38.839961 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:39.153750 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:39.840053 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) May 04 18:08:39.840083 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds May 04 18:08:39.840230 osdx hostapd[49155]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:08:39.840233 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:39.840237 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:39.840277 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=56 len=4) from RADIUS server: EAP Failure May 04 18:08:39.840302 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 56) May 04 18:08:39.840313 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 04 18:08:39.840317 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 04 18:08:39.840320 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately May 04 18:08:39.840324 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 04 18:08:39.840353 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 04 18:08:39.840360 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 04 18:08:39.840373 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:08:39.840382 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:08:39.840394 osdx hostapd[49155]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:08:39.840397 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:39.840400 osdx hostapd[49155]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet May 04 18:08:40.840467 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) May 04 18:08:40.840494 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds May 04 18:08:40.840646 osdx hostapd[49155]: eth2: RADIUS Received 20 bytes from RADIUS server May 04 18:08:40.840649 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:40.840653 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:08:40.840657 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response May 04 18:08:40.840700 osdx hostapd[49155]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 04 18:08:40.840703 osdx hostapd[49155]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 04 18:08:40.840705 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) May 04 18:08:40.840707 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds May 04 18:08:40.840713 osdx hostapd[49155]: eth2: RADIUS Received 20 bytes from RADIUS server May 04 18:08:40.840715 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:08:40.840717 osdx hostapd[49155]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
May 04 18:08:45.428187 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:49.662922 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:53.852401 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:08:58.011217 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:09:00.841189 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry May 04 18:09:00.841199 osdx hostapd[49155]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 04 18:09:00.841202 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X May 04 18:09:00.841205 osdx hostapd[49155]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames May 04 18:09:00.841213 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 04 18:09:00.841218 osdx hostapd[49155]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 04 18:09:00.841250 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 43) May 04 18:09:00.841719 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=43 len=10) from STA: EAP Response-Identity (1) May 04 18:09:00.841731 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' May 04 18:09:00.841799 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.841823 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:00.842110 osdx hostapd[49155]: eth2: RADIUS Received 80 bytes from RADIUS server May 04 18:09:00.842117 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:00.842120 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:00.842158 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=44 len=22) from RADIUS server: EAP-Request-MD5 (4) May 04 18:09:00.842166 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 44) May 04 18:09:00.842413 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=44 len=6) from STA: EAP Response-unknown (3) May 04 18:09:00.842460 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.842481 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:00.842683 osdx hostapd[49155]: eth2: RADIUS Received 64 bytes from RADIUS server May 04 18:09:00.842688 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:00.842691 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:00.842707 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=45 len=6) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:00.842713 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 45) May 04 18:09:00.843052 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=45 len=194) from STA: EAP Response-PEAP (25) May 04 18:09:00.843098 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.843114 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:00.844431 osdx hostapd[49155]: eth2: RADIUS Received 1068 bytes from RADIUS server May 04 18:09:00.844437 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:00.844441 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:00.844464 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=46 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:00.844472 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 46) May 04 18:09:00.844686 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=46 len=6) from STA: EAP Response-PEAP (25) May 04 18:09:00.844727 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.844741 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:00.844888 osdx hostapd[49155]: eth2: RADIUS Received 229 bytes from RADIUS server May 04 18:09:00.844893 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:00.844896 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:00.844909 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=47 len=171) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:00.844915 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 47) May 04 18:09:00.846364 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=47 len=103) from STA: EAP Response-PEAP (25) May 04 18:09:00.846410 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.846423 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:00.846730 osdx hostapd[49155]: eth2: RADIUS Received 115 bytes from RADIUS server May 04 18:09:00.846735 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:00.846738 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:00.846754 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=48 len=57) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:00.846759 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 48) May 04 18:09:00.846986 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=48 len=6) from STA: EAP Response-PEAP (25) May 04 18:09:00.847027 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.847042 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:00.847176 osdx hostapd[49155]: eth2: RADIUS Received 98 bytes from RADIUS server May 04 18:09:00.847181 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:00.847184 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:00.847198 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=49 len=40) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:00.847204 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 49) May 04 18:09:00.847366 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=49 len=41) from STA: EAP Response-PEAP (25) May 04 18:09:00.847396 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.847407 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:00.847553 osdx hostapd[49155]: eth2: RADIUS Received 131 bytes from RADIUS server May 04 18:09:00.847557 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:00.847560 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:00.847572 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=73) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:00.847577 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 50) May 04 18:09:00.847830 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=50 len=95) from STA: EAP Response-PEAP (25) May 04 18:09:00.847863 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.847871 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:00.848061 osdx hostapd[49155]: eth2: RADIUS Received 104 bytes from RADIUS server May 04 18:09:00.848065 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:00.848068 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:00.848078 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=46) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:00.848083 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 51) May 04 18:09:00.848220 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=51 len=46) from STA: EAP Response-PEAP (25) May 04 18:09:00.848245 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:00.848252 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:01.848759 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) May 04 18:09:01.848793 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds May 04 18:09:01.848802 osdx hostapd[49155]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:09:01.848806 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:01.848809 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:01.848861 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=51 len=4) from RADIUS server: EAP Failure May 04 18:09:01.848888 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 51) May 04 18:09:01.848902 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 04 18:09:01.848906 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 04 18:09:01.848910 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately May 04 18:09:01.848916 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 04 18:09:01.848940 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 04 18:09:01.848948 osdx hostapd[49155]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 04 18:09:01.848962 osdx hostapd[49155]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:01.848972 osdx hostapd[49155]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:01.848986 osdx hostapd[49155]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:09:01.848989 osdx hostapd[49155]: eth2: RADIUS Received RADIUS message May 04 18:09:01.848991 osdx hostapd[49155]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Test Quiet Period In MAB-First Mode
Description
This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode MAB-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19vq5LfExWTvZ/ZdL3K+NlMY8iONxHgdH2IQ2EJ8ilEGbSQ2CutjX9iX7cixwxDulGVFFAZxGQxkw== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.313 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.313/0.313/0.313/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX182hG+KmOXUTK4gHBCAQap1SiHkSNnFdlM= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
May 04 18:09:09.162722 osdx hostapd[49716]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. May 04 18:09:09.162733 osdx hostapd[49716]: eth2: RADIUS Authentication server 10.215.168.1:1812 May 04 18:09:09.162956 osdx hostapd[49716]: connect[radius]: Network is unreachable May 04 18:09:09.162774 osdx hostapd[49716]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 May 04 18:09:09.162777 osdx hostapd[49716]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode May 04 18:09:09.198652 osdx hostapd[49716]: Discovery mode enabled on eth2 May 04 18:09:09.198812 osdx hostapd[49716]: eth2: interface state UNINITIALIZED->ENABLED May 04 18:09:09.198812 osdx hostapd[49716]: eth2: AP-ENABLED May 04 18:09:12.440949 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added May 04 18:09:12.440967 osdx hostapd[49717]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode May 04 18:09:12.454633 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication May 04 18:09:12.454660 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query May 04 18:09:12.454673 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 May 04 18:09:12.456339 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 May 04 18:09:12.456348 osdx hostapd[49717]: eth2: RADIUS Authentication server 10.215.168.1:1812 May 04 18:09:12.456418 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:12.456444 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:12.456478 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA May 04 18:09:12.720617 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:09:13.456552 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) May 04 18:09:13.456592 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds May 04 18:09:13.456811 osdx hostapd[49717]: eth2: RADIUS Received 20 bytes from RADIUS server May 04 18:09:13.456815 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.456820 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.456825 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response May 04 18:09:13.456880 osdx hostapd[49717]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled May 04 18:09:13.456883 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X May 04 18:09:13.456887 osdx hostapd[49717]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames May 04 18:09:13.456890 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started May 04 18:09:13.456898 osdx hostapd[49717]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 04 18:09:13.456915 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 34) May 04 18:09:13.456993 osdx hostapd[49717]: eth2: RADIUS Received 20 bytes from RADIUS server May 04 18:09:13.456996 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.456999 osdx hostapd[49717]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet May 04 18:09:13.457317 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=34 len=10) from STA: EAP Response-Identity (1) May 04 18:09:13.457328 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' May 04 18:09:13.457388 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.457408 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:13.457637 osdx hostapd[49717]: eth2: RADIUS Received 80 bytes from RADIUS server May 04 18:09:13.457645 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.457650 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.457688 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=35 len=22) from RADIUS server: EAP-Request-MD5 (4) May 04 18:09:13.457697 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 35) May 04 18:09:13.457955 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=35 len=6) from STA: EAP Response-unknown (3) May 04 18:09:13.458007 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.458023 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:13.458290 osdx hostapd[49717]: eth2: RADIUS Received 64 bytes from RADIUS server May 04 18:09:13.458303 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.458307 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.458333 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=36 len=6) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:13.458342 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 36) May 04 18:09:13.458756 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=36 len=194) from STA: EAP Response-PEAP (25) May 04 18:09:13.458806 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.458820 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:13.460245 osdx hostapd[49717]: eth2: RADIUS Received 1068 bytes from RADIUS server May 04 18:09:13.460254 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.460259 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.460289 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=37 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:13.460298 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 37) May 04 18:09:13.460570 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=37 len=6) from STA: EAP Response-PEAP (25) May 04 18:09:13.460623 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.460639 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:13.460831 osdx hostapd[49717]: eth2: RADIUS Received 229 bytes from RADIUS server May 04 18:09:13.460842 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.460849 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.460897 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=38 len=171) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:13.460906 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 38) May 04 18:09:13.462729 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=38 len=103) from STA: EAP Response-PEAP (25) May 04 18:09:13.462786 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.462802 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:13.463134 osdx hostapd[49717]: eth2: RADIUS Received 115 bytes from RADIUS server May 04 18:09:13.463140 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.463144 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.463169 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=39 len=57) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:13.463177 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 39) May 04 18:09:13.463440 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=39 len=6) from STA: EAP Response-PEAP (25) May 04 18:09:13.463485 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.463500 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:13.463682 osdx hostapd[49717]: eth2: RADIUS Received 98 bytes from RADIUS server May 04 18:09:13.463688 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.463691 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.463707 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=40 len=40) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:13.463713 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 40) May 04 18:09:13.463926 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=40 len=41) from STA: EAP Response-PEAP (25) May 04 18:09:13.463966 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.463979 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:13.464170 osdx hostapd[49717]: eth2: RADIUS Received 131 bytes from RADIUS server May 04 18:09:13.464175 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.464178 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.464191 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=41 len=73) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:13.464196 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 41) May 04 18:09:13.464466 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=41 len=95) from STA: EAP Response-PEAP (25) May 04 18:09:13.464504 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.464517 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:13.464716 osdx hostapd[49717]: eth2: RADIUS Received 104 bytes from RADIUS server May 04 18:09:13.464721 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:13.464724 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:13.464738 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=42 len=46) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:13.464744 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 42) May 04 18:09:13.464960 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=42 len=46) from STA: EAP Response-PEAP (25) May 04 18:09:13.464996 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:13.465008 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:14.465106 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) May 04 18:09:14.465145 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds May 04 18:09:14.465311 osdx hostapd[49717]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:09:14.465316 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:14.465325 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:14.465376 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=42 len=4) from RADIUS server: EAP Failure May 04 18:09:14.465405 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 42) May 04 18:09:14.465419 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 04 18:09:14.465434 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 04 18:09:14.465441 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) May 04 18:09:14.465447 osdx hostapd[49717]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:09:14.465450 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:14.465453 osdx hostapd[49717]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
May 04 18:09:18.976215 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:09:23.141799 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:09:27.333390 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:09:31.519195 osdx OSDxCLI[4873]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. May 04 18:09:34.473909 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication May 04 18:09:34.473921 osdx hostapd[49717]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication May 04 18:09:34.473956 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 71) May 04 18:09:34.474336 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=71 len=10) from STA: EAP Response-Identity (1) May 04 18:09:34.474349 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' May 04 18:09:34.474425 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.474450 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:34.474693 osdx hostapd[49717]: eth2: RADIUS Received 80 bytes from RADIUS server May 04 18:09:34.474698 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:34.474701 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:34.474719 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=72 len=22) from RADIUS server: EAP-Request-MD5 (4) May 04 18:09:34.474726 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 72) May 04 18:09:34.474903 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=72 len=6) from STA: EAP Response-unknown (3) May 04 18:09:34.474942 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.474955 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:34.475088 osdx hostapd[49717]: eth2: RADIUS Received 64 bytes from RADIUS server May 04 18:09:34.475094 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:34.475098 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:34.475116 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=73 len=6) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:34.475122 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 73) May 04 18:09:34.475365 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=73 len=194) from STA: EAP Response-PEAP (25) May 04 18:09:34.475398 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.475409 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:34.476354 osdx hostapd[49717]: eth2: RADIUS Received 1068 bytes from RADIUS server May 04 18:09:34.476360 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:34.476363 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:34.476379 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=74 len=1004) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:34.476384 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 74) May 04 18:09:34.476541 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=74 len=6) from STA: EAP Response-PEAP (25) May 04 18:09:34.476576 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.476586 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:34.476694 osdx hostapd[49717]: eth2: RADIUS Received 229 bytes from RADIUS server May 04 18:09:34.476699 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:34.476702 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:34.476713 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=75 len=171) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:34.476718 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 75) May 04 18:09:34.477700 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=75 len=103) from STA: EAP Response-PEAP (25) May 04 18:09:34.477739 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.477751 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:34.477995 osdx hostapd[49717]: eth2: RADIUS Received 115 bytes from RADIUS server May 04 18:09:34.478000 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:34.478003 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:34.478017 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=76 len=57) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:34.478022 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 76) May 04 18:09:34.478214 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=76 len=6) from STA: EAP Response-PEAP (25) May 04 18:09:34.478243 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.478252 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:34.478345 osdx hostapd[49717]: eth2: RADIUS Received 98 bytes from RADIUS server May 04 18:09:34.478349 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:34.478352 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:34.478362 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=77 len=40) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:34.478367 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 77) May 04 18:09:34.478505 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=77 len=41) from STA: EAP Response-PEAP (25) May 04 18:09:34.478529 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.478538 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:34.478632 osdx hostapd[49717]: eth2: RADIUS Received 131 bytes from RADIUS server May 04 18:09:34.478637 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:34.478639 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:34.478649 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=78 len=73) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:34.478654 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 78) May 04 18:09:34.478852 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=78 len=95) from STA: EAP Response-PEAP (25) May 04 18:09:34.478884 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.478893 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:34.479030 osdx hostapd[49717]: eth2: RADIUS Received 104 bytes from RADIUS server May 04 18:09:34.479034 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:34.479037 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:34.479047 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=79 len=46) from RADIUS server: EAP-Request-PEAP (25) May 04 18:09:34.479051 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 79) May 04 18:09:34.479179 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=79 len=46) from STA: EAP Response-PEAP (25) May 04 18:09:34.479209 osdx hostapd[49717]: eth2: RADIUS Sending RADIUS message to authentication server May 04 18:09:34.479219 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds May 04 18:09:35.479306 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) May 04 18:09:35.479339 osdx hostapd[49717]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds May 04 18:09:35.479505 osdx hostapd[49717]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:09:35.479509 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:35.479512 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec May 04 18:09:35.479556 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=79 len=4) from RADIUS server: EAP Failure May 04 18:09:35.479580 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 79) May 04 18:09:35.479592 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port May 04 18:09:35.479595 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) May 04 18:09:35.479597 osdx hostapd[49717]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) May 04 18:09:35.479601 osdx hostapd[49717]: eth2: RADIUS Received 44 bytes from RADIUS server May 04 18:09:35.479604 osdx hostapd[49717]: eth2: RADIUS Received RADIUS message May 04 18:09:35.479606 osdx hostapd[49717]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet