Why is Xsupplicant unable to complete the EAPOL negotiation with the Aruba controller?
Product and Software: This article applies to ArubaOS 22.214.171.124-rn-3.1.2 and Xsupplicant 1.2.4.
Xsupplicant 1.2.4 cannot complete the 802.1x negotiation with the Aruba Mobility Controller. The 'show auth-tracebuf' command shows the following error message repeatedly.
Sep 1 12:11:07 eapol-pkt-drop * 00:1e:4f:4e:f0:2d 00:0b:86:61:3a:9d - - received eapol-pkt before assos
The Aruba Mobility Controller drops all EAPOL packets that do not use the IEEE reserve MAC address, which is 01-80-C2-00-00-03.
The solution is to change the "destination" option in the xsupplicant.conf file.
To resolve the issue, change the destination option to multicast. The default setting is auto, which means that Xsupplicant responds to the source MAC address of the last packet seen.
Note that this is a global option.
Note that Windows XP and MAC OS 802.1x work with the default option.