Why is Xsupplicant unable to complete the EAPOL negotiation with the Aruba controller?

Aruba Employee
Aruba Employee

Product and Software: This article applies to ArubaOS and Xsupplicant 1.2.4.



Xsupplicant 1.2.4 cannot complete the 802.1x negotiation with the Aruba Mobility Controller. The 'show auth-tracebuf' command shows the following error message repeatedly.


Sep 1 12:11:07 eapol-pkt-drop * 00:1e:4f:4e:f0:2d 00:0b:86:61:3a:9d - - received eapol-pkt before assos



The Aruba Mobility Controller drops all EAPOL packets that do not use the IEEE reserve MAC address, which is 01-80-C2-00-00-03.



The solution is to change the "destination" option in the xsupplicant.conf file.



To resolve the issue, change the destination option to multicast. The default setting is auto, which means that Xsupplicant responds to the source MAC address of the last packet seen.



Note that this is a global option.








Note that Windows XP and MAC OS 802.1x work with the default option.


Version history
Revision #:
1 of 1
Last update:
‎07-05-2014 03:37 AM
Updated by:
Labels (1)