Quiet Period
This scenario shows how to configure the quiet period in a device with 802.1x/MAB authentication.
Test Quiet Period In 802.1X Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1x authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX18Ri2IWaHfL3fW5cpuHNvMV/x8MWNcb23v52wEyONZVvneaqeAP+oYG9Qtv13UvK5z6Fj3cD73wTQ== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.588 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.588/0.588/0.588/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX1/hV1OA5dyzQbI/CQHzsLfrYHEaVMhif6I= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Jun 04 16:17:54.477198 osdx hostapd[685546]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 04 16:17:54.477218 osdx hostapd[685546]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:17:54.477506 osdx hostapd[685546]: connect[radius]: Network is unreachable Jun 04 16:17:54.477277 osdx hostapd[685546]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X, eap_server=0, eap_quiet_period=20, eap_max_retrans=2 Jun 04 16:17:54.477281 osdx hostapd[685546]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 04 16:17:54.504985 osdx hostapd[685546]: Discovery mode enabled on eth2 Jun 04 16:17:54.505094 osdx hostapd[685546]: eth2: interface state UNINITIALIZED->ENABLED Jun 04 16:17:54.505094 osdx hostapd[685546]: eth2: AP-ENABLED Jun 04 16:17:56.016430 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:17:57.829448 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: New STA de:ad:be:ef:6c:12 added Jun 04 16:17:57.829462 osdx hostapd[685547]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 04 16:17:57.849027 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: start authentication Jun 04 16:17:57.849064 osdx hostapd[685547]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 04 16:17:57.849084 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAPOL-Start from STA Jun 04 16:17:57.849098 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Jun 04 16:17:57.849108 osdx hostapd[685547]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:17:57.849137 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 116) Jun 04 16:17:57.849521 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=116 len=10) from STA: EAP Response-Identity (1) Jun 04 16:17:57.849533 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Jun 04 16:17:57.849561 osdx hostapd[685547]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:17:57.852011 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.852046 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:57.852337 osdx hostapd[685547]: eth2: RADIUS Received 80 bytes from RADIUS server Jun 04 16:17:57.852344 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:57.852349 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:57.852371 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=117 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 04 16:17:57.852379 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 117) Jun 04 16:17:57.852615 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=117 len=6) from STA: EAP Response-unknown (3) Jun 04 16:17:57.852684 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.852706 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:57.852935 osdx hostapd[685547]: eth2: RADIUS Received 64 bytes from RADIUS server Jun 04 16:17:57.852943 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:57.852948 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:57.852974 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=118 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:17:57.852982 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 118) Jun 04 16:17:57.853357 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=118 len=194) from STA: EAP Response-PEAP (25) Jun 04 16:17:57.853406 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.853422 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:57.854380 osdx hostapd[685547]: eth2: RADIUS Received 1068 bytes from RADIUS server Jun 04 16:17:57.854386 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:57.854391 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:57.854412 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=119 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:17:57.854419 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 119) Jun 04 16:17:57.854586 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=119 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:17:57.854626 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.854636 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:57.854783 osdx hostapd[685547]: eth2: RADIUS Received 229 bytes from RADIUS server Jun 04 16:17:57.854789 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:57.854794 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:57.854811 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=120 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:17:57.854818 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 120) Jun 04 16:17:57.856762 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=120 len=103) from STA: EAP Response-PEAP (25) Jun 04 16:17:57.856821 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.856841 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:57.857212 osdx hostapd[685547]: eth2: RADIUS Received 115 bytes from RADIUS server Jun 04 16:17:57.857220 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:57.857224 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:57.857250 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=121 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:17:57.857258 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 121) Jun 04 16:17:57.857532 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=121 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:17:57.857576 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.857587 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:57.857747 osdx hostapd[685547]: eth2: RADIUS Received 98 bytes from RADIUS server Jun 04 16:17:57.857752 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:57.857762 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:57.857776 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=122 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:17:57.857782 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 122) Jun 04 16:17:57.857964 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=122 len=41) from STA: EAP Response-PEAP (25) Jun 04 16:17:57.858000 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.858019 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:57.858164 osdx hostapd[685547]: eth2: RADIUS Received 131 bytes from RADIUS server Jun 04 16:17:57.858169 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:57.858172 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:57.858185 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=123 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:17:57.858189 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 123) Jun 04 16:17:57.858488 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=123 len=95) from STA: EAP Response-PEAP (25) Jun 04 16:17:57.858529 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.858539 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:57.858722 osdx hostapd[685547]: eth2: RADIUS Received 104 bytes from RADIUS server Jun 04 16:17:57.858730 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:57.858740 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:57.858763 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=124 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:17:57.858771 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 124) Jun 04 16:17:57.858968 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=124 len=46) from STA: EAP Response-PEAP (25) Jun 04 16:17:57.859013 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:17:57.859027 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:17:58.161406 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:17:58.859125 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Resending RADIUS message (id=8) Jun 04 16:17:58.859159 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:17:58.859318 osdx hostapd[685547]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:17:58.859321 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:58.859325 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:17:58.859372 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=4 id=124 len=4) from RADIUS server: EAP Failure Jun 04 16:17:58.859397 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 124) Jun 04 16:17:58.859408 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: unauthorizing port Jun 04 16:17:58.859411 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 04 16:17:58.859414 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jun 04 16:17:58.859418 osdx hostapd[685547]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:17:58.859420 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:17:58.859423 osdx hostapd[685547]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Jun 04 16:18:00.675959 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:02.773070 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:04.866149 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:06.936127 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:09.007468 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:11.098510 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:13.180095 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:15.270387 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:17.366972 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:18.867798 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Jun 04 16:18:18.867811 osdx hostapd[685547]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:18:18.867851 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 107) Jun 04 16:18:18.868618 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=107 len=10) from STA: EAP Response-Identity (1) Jun 04 16:18:18.868632 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: STA identity 'wrong' Jun 04 16:18:18.868707 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.868735 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:18.868965 osdx hostapd[685547]: eth2: RADIUS Received 80 bytes from RADIUS server Jun 04 16:18:18.868971 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:18:18.868975 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:18.868996 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=108 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 04 16:18:18.869002 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 108) Jun 04 16:18:18.869218 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=108 len=6) from STA: EAP Response-unknown (3) Jun 04 16:18:18.869256 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.869267 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:18.869478 osdx hostapd[685547]: eth2: RADIUS Received 64 bytes from RADIUS server Jun 04 16:18:18.869483 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:18:18.869488 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:18.869503 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=109 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:18:18.869509 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 109) Jun 04 16:18:18.869838 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=109 len=194) from STA: EAP Response-PEAP (25) Jun 04 16:18:18.869873 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.869884 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:18.870874 osdx hostapd[685547]: eth2: RADIUS Received 1068 bytes from RADIUS server Jun 04 16:18:18.870881 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:18:18.870885 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:18.870903 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=110 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:18:18.870911 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 110) Jun 04 16:18:18.871125 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=110 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:18:18.871188 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.871207 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:18.871365 osdx hostapd[685547]: eth2: RADIUS Received 229 bytes from RADIUS server Jun 04 16:18:18.871372 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:18:18.871376 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:18.871393 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=111 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:18:18.871401 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 111) Jun 04 16:18:18.872456 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=111 len=103) from STA: EAP Response-PEAP (25) Jun 04 16:18:18.872519 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.872536 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:18.872849 osdx hostapd[685547]: eth2: RADIUS Received 115 bytes from RADIUS server Jun 04 16:18:18.872858 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:18:18.872861 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:18.872883 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=112 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:18:18.872890 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 112) Jun 04 16:18:18.873179 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=112 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:18:18.873226 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.873238 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:18.873387 osdx hostapd[685547]: eth2: RADIUS Received 98 bytes from RADIUS server Jun 04 16:18:18.873392 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:18:18.873395 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:18.873409 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=113 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:18:18.873414 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 113) Jun 04 16:18:18.873599 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=113 len=41) from STA: EAP Response-PEAP (25) Jun 04 16:18:18.873652 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.873667 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:18.873830 osdx hostapd[685547]: eth2: RADIUS Received 131 bytes from RADIUS server Jun 04 16:18:18.873836 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:18:18.873840 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:18.873858 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=114 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:18:18.873864 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 114) Jun 04 16:18:18.874161 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=114 len=95) from STA: EAP Response-PEAP (25) Jun 04 16:18:18.874205 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.874222 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:18.874400 osdx hostapd[685547]: eth2: RADIUS Received 104 bytes from RADIUS server Jun 04 16:18:18.874406 osdx hostapd[685547]: eth2: RADIUS Received RADIUS message Jun 04 16:18:18.874411 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:18.874429 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: decapsulated EAP packet (code=1 id=115 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:18:18.874435 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: Sending EAP Packet (identifier 115) Jun 04 16:18:18.874610 osdx hostapd[685547]: eth2: STA de:ad:be:ef:6c:12 IEEE 802.1X: received EAP packet (code=2 id=115 len=46) from STA: EAP Response-PEAP (25) Jun 04 16:18:18.874649 osdx hostapd[685547]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:18.874704 osdx hostapd[685547]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB Mode
Description
This scenario shows how to configure the quiet period in a device with MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode only-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX18T0qRzl8SnvybPQbBtKwNqtrjvKw8aUIDS/pbNJWArb9eBBOVUk5iajJPu3+5t5hNRbb+oK6zXiA== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.335 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.335/0.335/0.335/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Jun 04 16:18:27.604778 osdx hostapd[686126]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 04 16:18:27.604796 osdx hostapd[686126]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:18:27.605041 osdx hostapd[686126]: connect[radius]: Network is unreachable Jun 04 16:18:27.604839 osdx hostapd[686126]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-only, eap_server=0, eap_quiet_period=20, eap_max_retrans=5 Jun 04 16:18:27.604843 osdx hostapd[686126]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 04 16:18:27.624692 osdx hostapd[686126]: Discovery mode enabled on eth2 Jun 04 16:18:27.624770 osdx hostapd[686126]: eth2: interface state UNINITIALIZED->ENABLED Jun 04 16:18:27.624770 osdx hostapd[686126]: eth2: AP-ENABLED Jun 04 16:18:30.899444 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:32.626524 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 DRIVER: Device discovered, triggering MAB authentication Jun 04 16:18:32.626564 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jun 04 16:18:32.626572 osdx hostapd[686127]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 04 16:18:32.640712 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-only mode: Starting MAB authentication Jun 04 16:18:32.640754 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 04 16:18:32.640780 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 04 16:18:32.643705 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 04 16:18:32.643722 osdx hostapd[686127]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:18:32.643828 osdx hostapd[686127]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:32.643865 osdx hostapd[686127]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:18:33.643971 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jun 04 16:18:33.644010 osdx hostapd[686127]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:18:33.644284 osdx hostapd[686127]: eth2: RADIUS Received 20 bytes from RADIUS server Jun 04 16:18:33.644289 osdx hostapd[686127]: eth2: RADIUS Received RADIUS message Jun 04 16:18:33.644293 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:18:33.644298 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jun 04 16:18:33.644349 osdx hostapd[686127]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 04 16:18:33.644352 osdx hostapd[686127]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 04 16:18:33.644356 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Jun 04 16:18:33.644361 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Jun 04 16:18:37.109726 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:41.299847 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:45.466262 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:49.640182 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:18:53.644487 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Jun 04 16:18:53.644497 osdx hostapd[686127]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 04 16:18:53.644500 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first/only mode: Quiet period expired, retrying MAB Jun 04 16:18:53.644504 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 04 16:18:53.644569 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 04 16:18:53.644623 osdx hostapd[686127]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 04 16:18:53.644647 osdx hostapd[686127]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:18:53.644677 osdx hostapd[686127]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds
Test Quiet Period In MAB-Fallback Mode
Description
This scenario shows how to configure the quiet period in a device with 802.1X/MAB authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode 802.1x-MAB set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX1+B4lhHl9esSeBxdNutHRRSrl/ma46VqN2FGAlO4VsbITLqIbp9eHXQCqXXd7c5HAEjsSw6bA+6kg== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.254 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.254/0.254/0.254/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX183PE7VKI4lm0fixKGTKA6KrC743Xheuhg= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
MAB: Authentication failed, entering held stateShow output
Jun 04 16:19:00.729279 osdx hostapd[686675]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 04 16:19:00.729298 osdx hostapd[686675]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:19:00.729559 osdx hostapd[686675]: connect[radius]: Network is unreachable Jun 04 16:19:00.729349 osdx hostapd[686675]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=802.1X+MAB-fallback, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Jun 04 16:19:00.729353 osdx hostapd[686675]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 04 16:19:00.753169 osdx hostapd[686675]: Discovery mode enabled on eth2 Jun 04 16:19:00.753274 osdx hostapd[686675]: eth2: interface state UNINITIALIZED->ENABLED Jun 04 16:19:00.753274 osdx hostapd[686675]: eth2: AP-ENABLED Jun 04 16:19:03.982662 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jun 04 16:19:03.982678 osdx hostapd[686676]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 04 16:19:03.997198 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: start authentication Jun 04 16:19:03.997229 osdx hostapd[686676]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 04 16:19:03.997234 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB fallback mode: Scheduling MAB trigger in 30 seconds if no 802.1X response Jun 04 16:19:03.997237 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Timeout registered, will trigger if no 802.1X response Jun 04 16:19:03.997253 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Cancelled MAB trigger - received 802.1X response Jun 04 16:19:03.997256 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Jun 04 16:19:03.997269 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 04 16:19:03.997279 osdx hostapd[686676]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:19:03.997309 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 2) Jun 04 16:19:03.997611 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=2 len=10) from STA: EAP Response-Identity (1) Jun 04 16:19:03.997626 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jun 04 16:19:03.997655 osdx hostapd[686676]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:19:03.999439 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:03.999465 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:03.999716 osdx hostapd[686676]: eth2: RADIUS Received 80 bytes from RADIUS server Jun 04 16:19:03.999721 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:03.999725 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:03.999744 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=3 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 04 16:19:03.999752 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 3) Jun 04 16:19:03.999975 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=3 len=6) from STA: EAP Response-unknown (3) Jun 04 16:19:04.000034 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:04.000050 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:04.000230 osdx hostapd[686676]: eth2: RADIUS Received 64 bytes from RADIUS server Jun 04 16:19:04.000235 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:04.000238 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:04.000254 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=4 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:04.000260 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 4) Jun 04 16:19:04.000664 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=4 len=194) from STA: EAP Response-PEAP (25) Jun 04 16:19:04.000720 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:04.000736 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:04.001779 osdx hostapd[686676]: eth2: RADIUS Received 1068 bytes from RADIUS server Jun 04 16:19:04.001787 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:04.001796 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:04.001828 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=5 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:04.001838 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 5) Jun 04 16:19:04.002103 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=5 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:19:04.002152 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:04.002165 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:04.002291 osdx hostapd[686676]: eth2: RADIUS Received 229 bytes from RADIUS server Jun 04 16:19:04.002298 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:04.002302 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:04.002318 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=6 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:04.002325 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 6) Jun 04 16:19:04.003779 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=6 len=103) from STA: EAP Response-PEAP (25) Jun 04 16:19:04.003828 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:04.003842 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:04.004131 osdx hostapd[686676]: eth2: RADIUS Received 115 bytes from RADIUS server Jun 04 16:19:04.004137 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:04.004141 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:04.004159 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=7 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:04.004165 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 7) Jun 04 16:19:04.004435 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=7 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:19:04.004475 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:04.004485 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:04.004652 osdx hostapd[686676]: eth2: RADIUS Received 98 bytes from RADIUS server Jun 04 16:19:04.004658 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:04.004663 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:04.004679 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=8 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:04.004686 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 8) Jun 04 16:19:04.004893 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=8 len=41) from STA: EAP Response-PEAP (25) Jun 04 16:19:04.004958 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:04.004976 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:04.005147 osdx hostapd[686676]: eth2: RADIUS Received 131 bytes from RADIUS server Jun 04 16:19:04.005153 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:04.005158 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:04.005176 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=9 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:04.005184 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 9) Jun 04 16:19:04.005460 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=9 len=95) from STA: EAP Response-PEAP (25) Jun 04 16:19:04.005504 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:04.005519 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:04.005694 osdx hostapd[686676]: eth2: RADIUS Received 104 bytes from RADIUS server Jun 04 16:19:04.005700 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:04.005704 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:04.005721 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=10 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:04.005729 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 10) Jun 04 16:19:04.005954 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=10 len=46) from STA: EAP Response-PEAP (25) Jun 04 16:19:04.006000 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:04.006016 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:04.304323 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:05.006113 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Jun 04 16:19:05.006152 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:19:05.006326 osdx hostapd[686676]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:19:05.006331 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:05.006337 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:05.006389 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=10 len=4) from RADIUS server: EAP Failure Jun 04 16:19:05.006418 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 10) Jun 04 16:19:05.006491 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 04 16:19:05.006495 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 04 16:19:05.006499 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Jun 04 16:19:05.006505 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 04 16:19:05.006537 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 04 16:19:05.006546 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 04 16:19:05.006561 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:05.006575 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:05.006589 osdx hostapd[686676]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:19:05.006593 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:05.006596 osdx hostapd[686676]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet Jun 04 16:19:06.006674 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jun 04 16:19:06.006714 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:19:06.006897 osdx hostapd[686676]: eth2: RADIUS Received 20 bytes from RADIUS server Jun 04 16:19:06.006901 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:06.006906 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:06.006912 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jun 04 16:19:06.006972 osdx hostapd[686676]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 04 16:19:06.006975 osdx hostapd[686676]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 04 16:19:06.006979 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Authentication failed, entering held state (quiet period 20 sec) Jun 04 16:19:06.006982 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Retry timeout registered for 20 seconds Jun 04 16:19:06.006991 osdx hostapd[686676]: eth2: RADIUS Received 20 bytes from RADIUS server Jun 04 16:19:06.006994 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:06.006997 osdx hostapd[686676]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Jun 04 16:19:10.670551 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:14.847369 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:19.005344 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:23.174830 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:26.008017 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Quiet period expired, attempting retry Jun 04 16:19:26.008036 osdx hostapd[686676]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 04 16:19:26.008039 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-fallback mode: Quiet period expired, retrying 802.1X Jun 04 16:19:26.008043 osdx hostapd[686676]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 04 16:19:26.008054 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 04 16:19:26.008061 osdx hostapd[686676]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:19:26.008110 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 82) Jun 04 16:19:26.008740 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=82 len=10) from STA: EAP Response-Identity (1) Jun 04 16:19:26.008756 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jun 04 16:19:26.008832 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.009033 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:26.009264 osdx hostapd[686676]: eth2: RADIUS Received 80 bytes from RADIUS server Jun 04 16:19:26.009272 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:26.009277 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:26.009323 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=83 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 04 16:19:26.009332 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 83) Jun 04 16:19:26.009664 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=83 len=6) from STA: EAP Response-unknown (3) Jun 04 16:19:26.009719 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.009770 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:26.009961 osdx hostapd[686676]: eth2: RADIUS Received 64 bytes from RADIUS server Jun 04 16:19:26.009965 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:26.009970 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:26.009989 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=84 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:26.009995 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 84) Jun 04 16:19:26.010479 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=84 len=194) from STA: EAP Response-PEAP (25) Jun 04 16:19:26.010543 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.010564 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:26.011958 osdx hostapd[686676]: eth2: RADIUS Received 1068 bytes from RADIUS server Jun 04 16:19:26.011966 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:26.011969 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:26.011997 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=85 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:26.012005 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 85) Jun 04 16:19:26.012641 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=85 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:19:26.012702 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.012718 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:26.012908 osdx hostapd[686676]: eth2: RADIUS Received 229 bytes from RADIUS server Jun 04 16:19:26.012915 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:26.012919 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:26.012945 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=86 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:26.012953 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 86) Jun 04 16:19:26.014155 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=86 len=103) from STA: EAP Response-PEAP (25) Jun 04 16:19:26.014206 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.014220 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:26.014609 osdx hostapd[686676]: eth2: RADIUS Received 115 bytes from RADIUS server Jun 04 16:19:26.014615 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:26.014618 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:26.014637 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=87 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:26.014645 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 87) Jun 04 16:19:26.014927 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=87 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:19:26.014974 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.014988 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:26.015177 osdx hostapd[686676]: eth2: RADIUS Received 98 bytes from RADIUS server Jun 04 16:19:26.015183 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:26.015187 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:26.015205 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=88 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:26.015212 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 88) Jun 04 16:19:26.015419 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=88 len=41) from STA: EAP Response-PEAP (25) Jun 04 16:19:26.015461 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.015472 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:26.015655 osdx hostapd[686676]: eth2: RADIUS Received 131 bytes from RADIUS server Jun 04 16:19:26.015662 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:26.015667 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:26.015695 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=89 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:26.015703 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 89) Jun 04 16:19:26.016082 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=89 len=95) from STA: EAP Response-PEAP (25) Jun 04 16:19:26.016134 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.016196 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:26.016364 osdx hostapd[686676]: eth2: RADIUS Received 104 bytes from RADIUS server Jun 04 16:19:26.016370 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:26.016376 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:26.016401 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=90 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:26.016410 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 90) Jun 04 16:19:26.019570 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=90 len=46) from STA: EAP Response-PEAP (25) Jun 04 16:19:26.019637 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:26.019696 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:27.019817 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Jun 04 16:19:27.019859 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:19:27.020057 osdx hostapd[686676]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:19:27.020062 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:27.020067 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:27.020120 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=90 len=4) from RADIUS server: EAP Failure Jun 04 16:19:27.020150 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 90) Jun 04 16:19:27.020165 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 04 16:19:27.020170 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 04 16:19:27.020174 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: 802.1X authentication failed, triggering MAB fallback immediately Jun 04 16:19:27.020179 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 04 16:19:27.020242 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 04 16:19:27.020251 osdx hostapd[686676]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 04 16:19:27.020266 osdx hostapd[686676]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:27.020277 osdx hostapd[686676]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:27.020290 osdx hostapd[686676]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:19:27.020293 osdx hostapd[686676]: eth2: RADIUS Received RADIUS message Jun 04 16:19:27.020296 osdx hostapd[686676]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet
Test Quiet Period In MAB-First Mode
Description
This scenario shows how to configure the quiet period in a device with MAB/802.1X authentication.
Scenario
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address 10.215.168.64/24 set interfaces ethernet eth2 address 192.168.100.1/24 set interfaces ethernet eth2 authenticator 802.1x max-retransmissions 2 set interfaces ethernet eth2 authenticator aaa authentication list1 set interfaces ethernet eth2 authenticator log-level debug set interfaces ethernet eth2 authenticator mode MAB-802.1x set interfaces ethernet eth2 authenticator quiet-period 20 set interfaces ethernet eth2 authenticator reauth-period 0 set system aaa group radius radgroup1 server serv1 set system aaa list list1 method 1 group radius radgroup1 set system aaa server radius serv1 address 10.215.168.1 set system aaa server radius serv1 encrypted-key U2FsdGVkX19biiYtmu+yXsOPJfEv3WIUlIskhVbV9EN+efx2tuKxb1FIkduoIboeq0yyjwNs7SHjNRWlT8iE0g== set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 2: Ping IP address 10.215.168.1 from DUT0:
admin@DUT0$ ping 10.215.168.1 count 1 size 56 timeout 1Show output
PING 10.215.168.1 (10.215.168.1) 56(84) bytes of data. 64 bytes from 10.215.168.1: icmp_seq=1 ttl=64 time=0.624 ms --- 10.215.168.1 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.624/0.624/0.624/0.000 ms
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth2 address 192.168.100.2/24 set interfaces ethernet eth2 mac '00:11:22:33:44:55' set interfaces ethernet eth2 supplicant encrypted-password U2FsdGVkX18lDGXEw4CMVcD7QXolkW03xxSZbX0wNK8= set interfaces ethernet eth2 supplicant username wrong set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
Step 4: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Authentication failed, enforcing quiet periodShow output
Jun 04 16:19:34.345849 osdx hostapd[687236]: eth2: IEEE 802.11 Fetching hardware channel/rate support not supported. Jun 04 16:19:34.345864 osdx hostapd[687236]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:19:34.346179 osdx hostapd[687236]: connect[radius]: Network is unreachable Jun 04 16:19:34.345913 osdx hostapd[687236]: eth2: IEEE 802.1X Initializing IEEE 802.1X: mode=MAB-first, eap_server=0, eap_quiet_period=20, eap_max_retrans=2, mab_timeout=30 Jun 04 16:19:34.345916 osdx hostapd[687236]: eth2: IEEE 802.1X IEEE 802.1X: Enabling packet capture discovery mode Jun 04 16:19:34.377715 osdx hostapd[687236]: Discovery mode enabled on eth2 Jun 04 16:19:34.377825 osdx hostapd[687236]: eth2: interface state UNINITIALIZED->ENABLED Jun 04 16:19:34.377825 osdx hostapd[687236]: eth2: AP-ENABLED Jun 04 16:19:37.556182 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: New STA 00:11:22:33:44:55 added Jun 04 16:19:37.556196 osdx hostapd[687237]: eth2: IEEE 802.1X IEEE 802.1X: Disabling packet capture discovery mode Jun 04 16:19:37.581744 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: Starting MAB authentication Jun 04 16:19:37.581774 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Starting RADIUS query Jun 04 16:19:37.581788 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Name = 00:11:22:33:44:55 Jun 04 16:19:37.583486 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: User-Password = 00:11:22:33:44:55 Jun 04 16:19:37.583497 osdx hostapd[687237]: eth2: RADIUS Authentication server 10.215.168.1:1812 Jun 04 16:19:37.583579 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:37.583609 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:37.583639 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAPOL-Start from STA Jun 04 16:19:37.849789 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:38.583688 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=128) Jun 04 16:19:38.583722 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:19:38.583905 osdx hostapd[687237]: eth2: RADIUS Received 20 bytes from RADIUS server Jun 04 16:19:38.583910 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.583913 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.583917 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB: Processing RADIUS response Jun 04 16:19:38.583963 osdx hostapd[687237]: eth2: IEEE 802.1X IEEE 802.1X: Discovery already disabled Jun 04 16:19:38.583965 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first mode: MAB failed, transitioning to 802.1X Jun 04 16:19:38.583968 osdx hostapd[687237]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: disabling transmission of periodic EAP-Request frames Jun 04 16:19:38.583970 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: MAB-first: 802.1X authentication started Jun 04 16:19:38.583976 osdx hostapd[687237]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:19:38.583988 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 79) Jun 04 16:19:38.584001 osdx hostapd[687237]: eth2: RADIUS Received 20 bytes from RADIUS server Jun 04 16:19:38.584004 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.584011 osdx hostapd[687237]: eth2: RADIUS No matching RADIUS request found (type=0 id=128) - dropping packet Jun 04 16:19:38.584342 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=79 len=10) from STA: EAP Response-Identity (1) Jun 04 16:19:38.584363 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jun 04 16:19:38.584437 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.584454 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:38.584703 osdx hostapd[687237]: eth2: RADIUS Received 80 bytes from RADIUS server Jun 04 16:19:38.584710 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.584714 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.584743 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=80 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 04 16:19:38.584750 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 80) Jun 04 16:19:38.584989 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=80 len=6) from STA: EAP Response-unknown (3) Jun 04 16:19:38.585033 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.585045 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:38.585229 osdx hostapd[687237]: eth2: RADIUS Received 64 bytes from RADIUS server Jun 04 16:19:38.585235 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.585240 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.585257 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=81 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:38.585264 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 81) Jun 04 16:19:38.585619 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=81 len=194) from STA: EAP Response-PEAP (25) Jun 04 16:19:38.585680 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.585692 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:38.586986 osdx hostapd[687237]: eth2: RADIUS Received 1068 bytes from RADIUS server Jun 04 16:19:38.586993 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.586996 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.587025 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=82 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:38.587033 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 82) Jun 04 16:19:38.587277 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=82 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:19:38.587323 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.587339 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:38.587498 osdx hostapd[687237]: eth2: RADIUS Received 229 bytes from RADIUS server Jun 04 16:19:38.587505 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.587510 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.587535 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=83 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:38.587543 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 83) Jun 04 16:19:38.589594 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=83 len=103) from STA: EAP Response-PEAP (25) Jun 04 16:19:38.589670 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.589691 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:38.590158 osdx hostapd[687237]: eth2: RADIUS Received 115 bytes from RADIUS server Jun 04 16:19:38.590165 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.590170 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.590190 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=84 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:38.590198 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 84) Jun 04 16:19:38.590578 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=84 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:19:38.590634 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.590715 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:38.590826 osdx hostapd[687237]: eth2: RADIUS Received 98 bytes from RADIUS server Jun 04 16:19:38.590832 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.590836 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.590854 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=85 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:38.590861 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 85) Jun 04 16:19:38.591115 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=85 len=41) from STA: EAP Response-PEAP (25) Jun 04 16:19:38.591156 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.591176 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:38.591369 osdx hostapd[687237]: eth2: RADIUS Received 131 bytes from RADIUS server Jun 04 16:19:38.591375 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.591378 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.591394 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=86 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:38.591401 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 86) Jun 04 16:19:38.591692 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=86 len=95) from STA: EAP Response-PEAP (25) Jun 04 16:19:38.591731 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.591745 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:38.591965 osdx hostapd[687237]: eth2: RADIUS Received 104 bytes from RADIUS server Jun 04 16:19:38.591971 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:38.591974 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:38.591991 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=87 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:38.591998 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 87) Jun 04 16:19:38.592194 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=87 len=46) from STA: EAP Response-PEAP (25) Jun 04 16:19:38.592229 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:38.592241 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:39.592342 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=8) Jun 04 16:19:39.592378 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:19:39.592518 osdx hostapd[687237]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:19:39.592522 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:39.592526 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:39.592569 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=87 len=4) from RADIUS server: EAP Failure Jun 04 16:19:39.592593 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 87) Jun 04 16:19:39.592605 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 04 16:19:39.592620 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 04 16:19:39.592627 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jun 04 16:19:39.592634 osdx hostapd[687237]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:19:39.592636 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:39.592639 osdx hostapd[687237]: eth2: RADIUS No matching RADIUS request found (type=0 id=8) - dropping packet
Step 5: Run command system journal show | grep "osdx hostapd" at DUT0 and check if output contains the following tokens:
Quiet period expiredShow output
Jun 04 16:19:44.280146 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:48.458171 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:52.654599 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:56.814394 osdx OSDxCLI[655633]: User 'admin' executed a new command: 'system journal show | grep "osdx hostapd"'. Jun 04 16:19:59.601517 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Quiet period expired (20 seconds), restarting authentication Jun 04 16:19:59.601528 osdx hostapd[687237]: eth2: STA 01:80:c2:00:00:03 IEEE 802.1X: Trying RADIUS authentication Jun 04 16:19:59.601563 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 129) Jun 04 16:19:59.601996 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=129 len=10) from STA: EAP Response-Identity (1) Jun 04 16:19:59.602008 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: STA identity 'wrong' Jun 04 16:19:59.602070 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.602091 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:59.602326 osdx hostapd[687237]: eth2: RADIUS Received 80 bytes from RADIUS server Jun 04 16:19:59.602332 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:59.602335 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:59.602355 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=130 len=22) from RADIUS server: EAP-Request-MD5 (4) Jun 04 16:19:59.602362 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 130) Jun 04 16:19:59.602578 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=130 len=6) from STA: EAP Response-unknown (3) Jun 04 16:19:59.602619 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.602652 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:59.602803 osdx hostapd[687237]: eth2: RADIUS Received 64 bytes from RADIUS server Jun 04 16:19:59.602808 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:59.602811 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:59.602831 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=131 len=6) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:59.602838 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 131) Jun 04 16:19:59.603161 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=131 len=194) from STA: EAP Response-PEAP (25) Jun 04 16:19:59.603209 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.603224 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:59.604180 osdx hostapd[687237]: eth2: RADIUS Received 1068 bytes from RADIUS server Jun 04 16:19:59.604185 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:59.604188 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:59.604208 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=132 len=1004) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:59.604214 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 132) Jun 04 16:19:59.604381 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=132 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:19:59.604418 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.604429 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:59.604557 osdx hostapd[687237]: eth2: RADIUS Received 229 bytes from RADIUS server Jun 04 16:19:59.604566 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:59.604569 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:59.604585 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=133 len=171) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:59.604592 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 133) Jun 04 16:19:59.606046 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=133 len=103) from STA: EAP Response-PEAP (25) Jun 04 16:19:59.606084 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.606098 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:59.606374 osdx hostapd[687237]: eth2: RADIUS Received 115 bytes from RADIUS server Jun 04 16:19:59.606379 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:59.606381 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:59.606395 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=134 len=57) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:59.606401 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 134) Jun 04 16:19:59.606648 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=134 len=6) from STA: EAP Response-PEAP (25) Jun 04 16:19:59.606685 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.606697 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:59.606810 osdx hostapd[687237]: eth2: RADIUS Received 98 bytes from RADIUS server Jun 04 16:19:59.606814 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:59.606817 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:59.606832 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=135 len=40) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:59.606838 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 135) Jun 04 16:19:59.607007 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=135 len=41) from STA: EAP Response-PEAP (25) Jun 04 16:19:59.607043 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.607054 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:59.607197 osdx hostapd[687237]: eth2: RADIUS Received 131 bytes from RADIUS server Jun 04 16:19:59.607202 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:59.607204 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:59.607217 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=136 len=73) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:59.607222 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 136) Jun 04 16:19:59.607464 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=136 len=95) from STA: EAP Response-PEAP (25) Jun 04 16:19:59.607500 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.607510 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:19:59.607662 osdx hostapd[687237]: eth2: RADIUS Received 104 bytes from RADIUS server Jun 04 16:19:59.607667 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:19:59.607670 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:19:59.607685 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=1 id=137 len=46) from RADIUS server: EAP-Request-PEAP (25) Jun 04 16:19:59.607690 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 137) Jun 04 16:19:59.607851 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: received EAP packet (code=2 id=137 len=46) from STA: EAP Response-PEAP (25) Jun 04 16:19:59.607908 osdx hostapd[687237]: eth2: RADIUS Sending RADIUS message to authentication server Jun 04 16:19:59.607923 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 1 seconds Jun 04 16:20:00.608008 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Resending RADIUS message (id=17) Jun 04 16:20:00.608040 osdx hostapd[687237]: eth2: RADIUS Next RADIUS client retransmit in 2 seconds Jun 04 16:20:00.608183 osdx hostapd[687237]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:20:00.608186 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:20:00.608190 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec Jun 04 16:20:00.608231 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: decapsulated EAP packet (code=4 id=137 len=4) from RADIUS server: EAP Failure Jun 04 16:20:00.608255 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Sending EAP Packet (identifier 137) Jun 04 16:20:00.608270 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: unauthorizing port Jun 04 16:20:00.608274 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: authentication failed - EAP type: 25 (PEAP) Jun 04 16:20:00.608277 osdx hostapd[687237]: eth2: STA 00:11:22:33:44:55 IEEE 802.1X: Authentication failed, enforcing quiet period (20 seconds) Jun 04 16:20:00.608281 osdx hostapd[687237]: eth2: RADIUS Received 44 bytes from RADIUS server Jun 04 16:20:00.608283 osdx hostapd[687237]: eth2: RADIUS Received RADIUS message Jun 04 16:20:00.608286 osdx hostapd[687237]: eth2: RADIUS No matching RADIUS request found (type=0 id=17) - dropping packet