Only 802.1X
This scenario shows how to configure the only-802.1x
authentication mode.
Test Successful 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 uses the correct username and password.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19wEjby8eZtNfoZx6Abx2aIv8vTbBGWbjgHOQ+m5SB9IYYwBUvH1PrglCKaecsmdEaYY3KScLzfbQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.468 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.468/0.468/0.468/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX19CBlKX9a0pvZNU98OW173I/e/HGdoZbBs= set interfaces ethernet eth2 supplicant username testing set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 supplicant show status at DUT1 and check if output contains the following tokens:
AuthorizedShow output
--------------------------------------------------- Field Value --------------------------------------------------- EAP State SUCCESS EAP TLS Cipher ECDHE-RSA-AES256-GCM-SHA384 EAP TLS Version TLSv1.2 PAE State AUTHENTICATED Supplicant Port Status Authorized WPA State COMPLETED
Step 5: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+AuthorizedShow output
------------------------------- Field Value ------------------------------- EAPoL Frames (Rx) 11 EAPoL Frames (Tx) 11 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Authorized Req Frames (Rx) 9 Req ID Frames (Rx) 1 Resp Frames (Tx) 10 Start Frames (Tx) 1
Step 6: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
Authentication Successes\s+1 Authentication Mode\s+802\.1XShow output
--------------------------------------------- Field Value --------------------------------------------- Access Challenges 9 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode 802.1X Authentication Status Authorized (802.1X) Authentication Successes 1 EAPoL frames (Rx) 11 EAPoL frames (Tx) 11 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name testing
Step 7: Ping IP address 192.168.100.1 from DUT1:
admin@DUT1$ ping 192.168.100.1 count 1 size 56 timeout 1Show output
PING 192.168.100.1 (192.168.100.1) 56(84) bytes of data. 64 bytes from 192.168.100.1: icmp_seq=1 ttl=64 time=0.729 ms --- 192.168.100.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.729/0.729/0.729/0.000 ms
Step 8: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: authenticated - EAP type: 25 (PEAP)Show output
Jun 04 16:26:15.138524 osdx hostapd[698250]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 04 16:26:15.138540 osdx hostapd[698250]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:26:15.138730 osdx hostapd[698250]: connect[radius]: Network is unreachable Jun 04 16:26:15.138575 osdx hostapd[698250]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Jun 04 16:26:15.138579 osdx hostapd[698250]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 04 16:26:15.162436 osdx hostapd[698250]: Discovery mode enabled on eth2 Jun 04 16:26:15.162489 osdx hostapd[698250]: eth2: interface state UNINITIALIZED->ENABLED Jun 04 16:26:15.162489 osdx hostapd[698250]: eth2: AP-ENABLED Jun 04 16:26:18.276983 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Jun 04 16:26:18.277004 osdx hostapd[698251]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 04 16:26:18.290495 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Jun 04 16:26:18.290523 osdx hostapd[698251]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 04 16:26:18.290535 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Jun 04 16:26:18.290545 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Jun 04 16:26:18.290556 osdx hostapd[698251]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:26:18.290587 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 66) Jun 04 16:26:18.290935 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=66 len=12) from STA: EAP Response-Identity (1) Jun 04 16:26:18.290948 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'testing' Jun 04 16:26:18.290977 osdx hostapd[698251]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:26:18.293132 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.293163 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.293438 osdx hostapd[698251]: eth2: RADIUS Received 80 bytes from RADIUS server Jun 04 16:26:18.293443 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.293448 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.293468 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=67 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 04 16:26:18.293475 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 67) Jun 04 16:26:18.293664 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=67 len=6) from STA: EAP Response-unknown (3) Jun 04 16:26:18.293710 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.293723 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.293884 osdx hostapd[698251]: eth2: RADIUS Received 64 bytes from RADIUS server Jun 04 16:26:18.293889 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.293893 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.293906 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=68 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:18.293912 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 68) Jun 04 16:26:18.294228 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=68 len=194) from STA: EAP Response-PEAP (25) Jun 04 16:26:18.294269 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.294280 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.295241 osdx hostapd[698251]: eth2: RADIUS Received 1068 bytes from RADIUS server Jun 04 16:26:18.295247 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.295250 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.295281 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=69 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:18.295288 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 69) Jun 04 16:26:18.295479 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=69 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:26:18.295524 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.295537 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.295673 osdx hostapd[698251]: eth2: RADIUS Received 229 bytes from RADIUS server Jun 04 16:26:18.295678 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.295682 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.295697 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=70 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:18.295703 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 70) Jun 04 16:26:18.297007 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=70 len=103) from STA: EAP Response-PEAP (25) Jun 04 16:26:18.297057 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.297071 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.297391 osdx hostapd[698251]: eth2: RADIUS Received 115 bytes from RADIUS server Jun 04 16:26:18.297396 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.297399 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.297416 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=71 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:18.297422 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 71) Jun 04 16:26:18.297642 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=71 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:26:18.297696 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.297710 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.297836 osdx hostapd[698251]: eth2: RADIUS Received 98 bytes from RADIUS server Jun 04 16:26:18.297841 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.297845 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.297859 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=72 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:18.297865 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 72) Jun 04 16:26:18.298027 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=72 len=43) from STA: EAP Response-PEAP (25) Jun 04 16:26:18.298058 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.298068 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.298204 osdx hostapd[698251]: eth2: RADIUS Received 131 bytes from RADIUS server Jun 04 16:26:18.298209 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.298212 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.298224 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=73 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:18.298229 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 73) Jun 04 16:26:18.298432 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=73 len=97) from STA: EAP Response-PEAP (25) Jun 04 16:26:18.298462 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.298471 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.298616 osdx hostapd[698251]: eth2: RADIUS Received 140 bytes from RADIUS server Jun 04 16:26:18.298621 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.298624 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.298636 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=74 len=82) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:18.298642 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 74) Jun 04 16:26:18.298788 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=74 len=37) from STA: EAP Response-PEAP (25) Jun 04 16:26:18.298817 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.298826 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.298960 osdx hostapd[698251]: eth2: RADIUS Received 104 bytes from RADIUS server Jun 04 16:26:18.298965 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.298968 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.298980 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=75 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:18.298986 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 75) Jun 04 16:26:18.299106 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=75 len=46) from STA: EAP Response-PEAP (25) Jun 04 16:26:18.299135 osdx hostapd[698251]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:18.299145 osdx hostapd[698251]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:18.299290 osdx hostapd[698251]: eth2: RADIUS Received 175 bytes from RADIUS server Jun 04 16:26:18.299295 osdx hostapd[698251]: eth2: RADIUS Received RADIUS message Jun 04 16:26:18.299298 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:18.299318 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: old identity 'testing' updated with User-Name from Access-Accept 'testing' Jun 04 16:26:18.299322 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=3 id=75 len=4) from RADIUS server: EAP Success Jun 04 16:26:18.299336 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 75) Jun 04 16:26:18.299350 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authorizing port Jun 04 16:26:18.299353 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 RADIUS: starting accounting session 69786E3709219D89 Jun 04 16:26:18.299357 osdx hostapd[698251]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authenticated - EAP type: 25 (PEAP)
Test Unsuccessful 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 uses an incorrect username.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+aIceq6yN8gYyv3Ggr+QJPIRZJmZgU9gWAzVGXTsU+HVXNgvgFkrV7Ay+z3zF0jDfXASo9g8kRNw== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.317 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.317/0.317/0.317/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX18mteFM6SrE3J2PWwK7CBSkJp/7waq0Qx4= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 0 EAPoL Frames (Tx) 0 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 0 Req ID Frames (Rx) 0 Resp Frames (Tx) 0 Start Frames (Tx) 0
Step 5: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 9 EAPoL Frames (Tx) 10 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 8 Req ID Frames (Rx) 1 Resp Frames (Tx) 9 Start Frames (Tx) 1
Step 6: Run command interfaces ethernet eth2 supplicant show stats at DUT1 and check if output matches the following regular expressions:
Port Status\s+UnauthorizedShow output
--------------------------------- Field Value --------------------------------- EAPoL Frames (Rx) 10 EAPoL Frames (Tx) 10 Invalid Frames (Rx) 0 Logoff Frames (Tx) 0 Port Status Unauthorized Req Frames (Rx) 8 Req ID Frames (Rx) 1 Resp Frames (Tx) 9 Start Frames (Tx) 1
Step 7: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
Authentication Failures\s+[1-9]\d?Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 8 Authentication Backend RADIUS Authentication Failures 1 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 10 EAPoL frames (Tx) 10 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 8: Expect a failure in the following command:
Ping IP address 192.168.100.1 from DUT1:
admin@DUT1$ ping 192.168.100.1 count 1 size 56 timeout 1Show output
PING 192.168.100.1 (192.168.100.1) 56(84) bytes of data. --- 192.168.100.1 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms
Step 9: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: authentication failed - EAP type: 25 (PEAP)Show output
Jun 04 16:26:25.443418 osdx hostapd[698767]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 04 16:26:25.443434 osdx hostapd[698767]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:26:25.443731 osdx hostapd[698767]: connect[radius]: Network is unreachable Jun 04 16:26:25.443477 osdx hostapd[698767]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Jun 04 16:26:25.443480 osdx hostapd[698767]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 04 16:26:25.467333 osdx hostapd[698767]: Discovery mode enabled on eth2 Jun 04 16:26:25.467423 osdx hostapd[698767]: eth2: interface state UNINITIALIZED->ENABLED Jun 04 16:26:25.467423 osdx hostapd[698767]: eth2: AP-ENABLED Jun 04 16:26:28.773812 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Jun 04 16:26:28.773827 osdx hostapd[698768]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 04 16:26:28.795395 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Jun 04 16:26:28.795422 osdx hostapd[698768]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 04 16:26:28.795440 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Jun 04 16:26:28.795451 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Jun 04 16:26:28.795464 osdx hostapd[698768]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:26:28.795496 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 45) Jun 04 16:26:28.795872 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=45 len=10) from STA: EAP Response-Identity (1) Jun 04 16:26:28.795881 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Jun 04 16:26:28.795907 osdx hostapd[698768]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:26:28.797851 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.797883 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:28.798305 osdx hostapd[698768]: eth2: RADIUS Received 80 bytes from RADIUS server Jun 04 16:26:28.798311 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:28.798314 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:28.798339 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=46 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 04 16:26:28.798347 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 46) Jun 04 16:26:28.798621 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=46 len=6) from STA: EAP Response-unknown (3) Jun 04 16:26:28.798676 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.798689 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:28.798877 osdx hostapd[698768]: eth2: RADIUS Received 64 bytes from RADIUS server Jun 04 16:26:28.798881 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:28.798884 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:28.798897 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=47 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:28.798902 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 47) Jun 04 16:26:28.799253 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=47 len=194) from STA: EAP Response-PEAP (25) Jun 04 16:26:28.799305 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.799315 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:28.800562 osdx hostapd[698768]: eth2: RADIUS Received 1068 bytes from RADIUS server Jun 04 16:26:28.800569 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:28.800573 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:28.800605 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=48 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:28.800613 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 48) Jun 04 16:26:28.800843 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=48 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:26:28.800896 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.800912 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:28.801067 osdx hostapd[698768]: eth2: RADIUS Received 229 bytes from RADIUS server Jun 04 16:26:28.801074 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:28.801077 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:28.801105 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=49 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:28.801112 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 49) Jun 04 16:26:28.802553 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=49 len=103) from STA: EAP Response-PEAP (25) Jun 04 16:26:28.802610 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.802625 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:28.803052 osdx hostapd[698768]: eth2: RADIUS Received 115 bytes from RADIUS server Jun 04 16:26:28.803058 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:28.803061 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:28.803076 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=50 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:28.803082 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 50) Jun 04 16:26:28.803431 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=50 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:26:28.803480 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.803643 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:28.803680 osdx hostapd[698768]: eth2: RADIUS Received 98 bytes from RADIUS server Jun 04 16:26:28.803684 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:28.803687 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:28.803707 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=51 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:28.803713 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 51) Jun 04 16:26:28.803952 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=51 len=41) from STA: EAP Response-PEAP (25) Jun 04 16:26:28.804006 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.804057 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:28.804258 osdx hostapd[698768]: eth2: RADIUS Received 131 bytes from RADIUS server Jun 04 16:26:28.804268 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:28.804273 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:28.804299 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=52 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:28.804307 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 52) Jun 04 16:26:28.804657 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=52 len=95) from STA: EAP Response-PEAP (25) Jun 04 16:26:28.804707 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.804722 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:28.804951 osdx hostapd[698768]: eth2: RADIUS Received 104 bytes from RADIUS server Jun 04 16:26:28.804959 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:28.804963 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:28.804983 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=53 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:26:28.804990 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 53) Jun 04 16:26:28.805202 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=53 len=46) from STA: EAP Response-PEAP (25) Jun 04 16:26:28.805245 osdx hostapd[698768]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:26:28.805263 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:26:29.805372 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) Jun 04 16:26:29.805415 osdx hostapd[698768]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:26:29.805633 osdx hostapd[698768]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:26:29.805638 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:29.805643 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:26:29.805695 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=53 len=4) from RADIUS server: EAP Failure Jun 04 16:26:29.805727 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 53) Jun 04 16:26:29.805742 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Jun 04 16:26:29.805747 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 04 16:26:29.805751 osdx hostapd[698768]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (60 seconds) Jun 04 16:26:29.805756 osdx hostapd[698768]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:26:29.805759 osdx hostapd[698768]: eth2: RADIUS Received RADIUS message Jun 04 16:26:29.805762 osdx hostapd[698768]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Test Unsupported 802.1x Authentication
Description
This scenario shows how to configure 802.1x-only authentication. DUT1 does not support 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 60 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX18Ewdb4pUbEmqZ8CcFAcbH+b691On/B/K3baGfx8RvCCqUkvBN4gVo4JJtI1uw0sbd2XhdCAR4LBA== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.207 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.207/0.207/0.207/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 2 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 5: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 3 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 6: Run command interfaces ethernet eth2 authenticator show stats at DUT0 and check if output matches the following regular expressions:
EAPoL frames \(Rx\)\s+0 EAPoL frames \(Tx\)\s+[1-9]+[0-9]*Show output
------------------------------------------- Field Value ------------------------------------------- Access Challenges 0 Authentication Backend RADIUS Authentication Failures 0 Authentication Mode N/A Authentication Status Unauthorized Authentication Successes 0 EAPoL frames (Rx) 0 EAPoL frames (Tx) 3 Quiet Period 60 Reauthenticate FALSE Reauthenticate Period 0 Session Time 0 Session User MAC de:ad:be:ef:6c:12 Session User Name N/A
Step 7: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
IEEE 802.1X: EAP authentication timeoutShow output
Jun 04 16:26:39.224022 osdx hostapd[699287]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 04 16:26:39.224033 osdx hostapd[699287]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:26:39.224238 osdx hostapd[699287]: connect[radius]: Network is unreachable Jun 04 16:26:39.224063 osdx hostapd[699287]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=60, eap_max_retrans=2 Jun 04 16:26:39.224065 osdx hostapd[699287]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 04 16:26:39.243951 osdx hostapd[699287]: Discovery mode enabled on eth2 Jun 04 16:26:39.244024 osdx hostapd[699287]: eth2: interface state UNINITIALIZED->ENABLED Jun 04 16:26:39.244024 osdx hostapd[699287]: eth2: AP-ENABLED Jun 04 16:26:44.244700 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 DRIVER: Device discovered, triggering MAB authentication Jun 04 16:26:44.244743 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Jun 04 16:26:44.244752 osdx hostapd[699288]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 04 16:26:44.260010 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Jun 04 16:26:44.260036 osdx hostapd[699288]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 04 16:26:44.260052 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Jun 04 16:26:44.260060 osdx hostapd[699288]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:26:44.260088 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 56) Jun 04 16:26:47.262825 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 56) Jun 04 16:26:51.854891 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:26:53.266849 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 56) Jun 04 16:27:00.165893 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:27:05.276855 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: aborting authentication Jun 04 16:27:05.276870 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: EAP authentication timeout - enforcing 60 second quiet period before retrying Jun 04 16:27:05.276884 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 MLME: MLME-DEAUTHENTICATE.indication(de:ad:be:ef:6c:12, 2) Jun 04 16:27:05.276888 osdx hostapd[699288]: eth2: STA de:ad:be:ef:6c:12 MLME: MLME-DELETEKEYS.request(de:ad:be:ef:6c:12)