Product and Software: This article applies to ArubaOS 3.3.2.18-rn-3.1.2 and Xsupplicant 1.2.4.
Xsupplicant 1.2.4 cannot complete the 802.1x negotiation with the Aruba Mobility Controller. The 'show auth-tracebuf' command shows the following error message repeatedly.
Sep 1 12:11:07 eapol-pkt-drop * 00:1e:4f:4e:f0:2d 00:0b:86:61:3a:9d - - received eapol-pkt before assos
The Aruba Mobility Controller drops all EAPOL packets that do not use the IEEE reserve MAC address, which is 01-80-C2-00-00-03.
The solution is to change the "destination" option in the xsupplicant.conf file.
To resolve the issue, change the destination option to multicast. The default setting is auto, which means that Xsupplicant responds to the source MAC address of the last packet seen.
Note that this is a global option.
Example:
###GLOBAL SECTION
destination=multicast
Note that Windows XP and MAC OS 802.1x work with the default option.