Controller Based WLANs

Why is Xsupplicant unable to complete the EAPOL negotiation with the Aruba controller?

Aruba Employee

Product and Software: This article applies to ArubaOS 3.3.2.18-rn-3.1.2 and Xsupplicant 1.2.4.

 

 

Xsupplicant 1.2.4 cannot complete the 802.1x negotiation with the Aruba Mobility Controller. The 'show auth-tracebuf' command shows the following error message repeatedly.

 

Sep 1 12:11:07 eapol-pkt-drop * 00:1e:4f:4e:f0:2d 00:0b:86:61:3a:9d - - received eapol-pkt before assos

 

 

The Aruba Mobility Controller drops all EAPOL packets that do not use the IEEE reserve MAC address, which is 01-80-C2-00-00-03.

 

 

The solution is to change the "destination" option in the xsupplicant.conf file.

 

 

To resolve the issue, change the destination option to multicast. The default setting is auto, which means that Xsupplicant responds to the source MAC address of the last packet seen.

 

 

Note that this is a global option.

 

 

Example:

###GLOBAL SECTION

destination=multicast

 

 

Note that Windows XP and MAC OS 802.1x work with the default option.

 

Version history
Revision #:
1 of 1
Last update:
‎07-05-2014 03:37 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.