<div dir="ltr"><div><div>Hi,<br><br></div><br><div></div><div>With 802.1x EAP-FAST authentication , After an EAP failure ,sometimes the hostapd server is not replying to EAP-Identity response messages, for long durations of time.(Sniffer snippet below)<br><br><br><br>No.    Time          Source               Destination          Protocol Length Info<br> 39156 381.550810000 AirgoNet_95:da:b0    Epigram_09:1d:cd     TLSv1   133   Change Cipher Spec, Encrypted Handshake Message<br> 39158 381.565063000 Epigram_09:1d:cd     AirgoNet_95:da:b0    TLSv1   180   Application Data, Application Data<br> 39160 381.570683000 AirgoNet_95:da:b0    Epigram_09:1d:cd     TLSv1   175   Application Data<br> 39162 381.584312000 Epigram_09:1d:cd     AirgoNet_95:da:b0    TLSv1   212   Application Data, Application Data<br> 39164 381.586559000 AirgoNet_95:da:b0    Epigram_09:1d:cd     TLSv1   111   Application Data<br> 39167 381.596189000 Epigram_09:1d:cd     AirgoNet_95:da:b0    TLSv1   212   Application Data, Application Data<br> 39169 381.599442000 AirgoNet_95:da:b0    Epigram_09:1d:cd     TLSv1   175   Application Data<br> 39171 381.607438000 Epigram_09:1d:cd     AirgoNet_95:da:b0    TLSv1   308   Application Data, Application Data<br> 39173 381.610944000 AirgoNet_95:da:b0    Epigram_09:1d:cd     TLSv1   127   Application Data<br> 39176 381.623056000 Epigram_09:1d:cd     AirgoNet_95:da:b0    EAP     72    Failure<br>.<br>.<br>.<br>.<br> 39967 394.500445000 AirgoNet_95:da:b0    Epigram_09:1d:cd     EAPOL   68    Start<br> 39983 394.521195000 Epigram_09:1d:cd     AirgoNet_95:da:b0    EAP     73    Request, Identity<br> 39989 394.528570000 AirgoNet_95:da:b0    Epigram_09:1d:cd     EAP     82    Response, Identity<br> 41524 425.561573000 AirgoNet_95:da:b0    Epigram_09:1d:cd     EAPOL   68    Start<br> 41773 428.554224000 AirgoNet_95:da:b0    Epigram_09:1d:cd     EAPOL   68    Start<br> 41775 428.563452000 Epigram_09:1d:cd     AirgoNet_95:da:b0    EAP     73    Request, Identity<br> 41777 428.565825000 AirgoNet_95:da:b0    Epigram_09:1d:cd     EAP     82    Response, Identity<br> 42347 441.395074000 Epigram_09:1d:cd     AirgoNet_95:da:b0    EAP     73    Request, Identity<br> 42349 441.398819000 AirgoNet_95:da:b0    Epigram_09:1d:cd     EAP     82    Response, Identity<br> 42351 441.406568000 Epigram_09:1d:cd     AirgoNet_95:da:b0    TLSv1   86    Ignored Unknown Record<br><br></div><div>As seen here, after the EAP-Failure , when the supplicant again sends an EAPOL start followed by EAP Request Identity/Respose, the server is not responding with the EAP-Request Method Frame(Ignored Unknown Record) for almost 50 seconds.<br><br>Sometimes this time exceeds 60 seconds.<br><br></div><div>What could be the reason?<br></div><div><br><br></div>Regards<br></div>Neelansh<br><div><div><div><div><div class="gmail_signature"><br></div></div>
</div></div></div></div>