Re: [PacketFence-users] Ruckus APs and COA

[Thirunavukkarasu Palanisamy via PacketFence-users]

Please visit the following link
May be helpful for you, but Aruba devices used in the example

https://www.ospimenta.com/artigos/packetfence-part2/
https://www.ospimenta.com/artigos/packetfence-part3/
Regards
Thirunavukkarasu

-- 
_-_
*_TANUVAS_*
*The contents of this message are confidential and are not be 
shared with outside parties without prior permission*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] How to set MS-CHAP-Use-NTLM-Auth := No in the control items

[Thirunavukkarasu Palanisamy via PacketFence-users]

Hi Team,
Greetings of the day
If there is a cleartext password available, how to set *MS-CHAP-Use-NTLM-Auth
:= No* in the control items for the eduroam users?
The mschap module should do the authentication itself, without calling
ntlm_auth.
Thanks & Regards,
Thirunavukkarasu

-- 
_-_
*_TANUVAS_*
*The contents of this message are confidential and are not be 
shared with outside parties without prior permission*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] jabang konate via PacketFence-users

[Thirunavukkarasu Palanisamy via PacketFence-users]

Hi Jabang,
Can you please ping me?
Thanks & Regards,
Thirunavukkarasu


jabangkon...@gmail.com

-- 
_-_
*_TANUVAS_*
*The contents of this message are confidential and are not be 
shared with outside parties without prior permission*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Eduroam - Configuration - Regarding

[Thirunavukkarasu Palanisamy via PacketFence-users]

Hi Team,

Greetings of the day

In the documentation the following information are provided for the eduroam
configuration
Installation Guide (packetfence.org)


---



*13.3.1. Local authenticationInternal Eduroam authentication The controller
sends the RADIUS authentication to PacketFence on port 11812.**a. My
question is, is the port number correct? *
In that case we need to configure the "PF as authentication server" in WLC
with port number 11812


*13.3.2. Configure the Eduroam source**Associate the Radius sources you
previously configured in 'Eduroam RADIUS AUTH' section, define the radius
listening port and keep the type to Keyed Balance.*
By default the 11812 defined as port in the configuration page
*b .Is changing the port required or can we leave it as 11812? *
*-*
*13.3.3. Create the connection profile to authenticate external students*

*Create a connection profile named External Eduroam authentication Check
Automatically register devices then create a Realm filter eduroam. Make
sure to add the previously created Eduroam source to match on the external
users.*
*c. Can we configure the following?*
Filters all
SSID -- eduroam
Realm -- eduroam
-
*d. Will the requests coming from FLR listen only on the Management IP
(RADIUS) of the PF or by the additional interface with RADIUS option? or
both will listen?*

Thanks & Regards,
Thirunavukkarasu

-- 
_-_
*_TANUVAS_*
*The contents of this message are confidential and are not be 
shared with outside parties without prior permission*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] OpenID implementation of Azure AD in PacketFence

[Thirunavukkarasu Palanisamy via PacketFence-users]

Hi Team,
Can anyone plz share the details of configuring the OpenID implementation
of Azure AD in the PacketFence?

PF recommended using the OpenID implementation of Azure AD for
captive-portal

I couldn't find resources for the configuration

Installation Guide (packetfence.org)

Thanks in advance
Regards,
Thirunavukkarasu

-- 
_-_
*_TANUVAS_*
*The contents of this message are confidential and are not be 
shared with outside parties without prior permission*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] How to change the host name in PF?

[Thirunavukkarasu Palanisamy via PacketFence-users]

Hi Team,
Greetings of the day
I tried to change the hostname of the PF in web-admin.
Even after the change the hostname is shown as 'packetfence"
How to change it?
Thanks & Regards,
Thirunavukkarasu

-- 
_-_
*_TANUVAS_*
*The contents of this message are confidential and are not be 
shared with outside parties without prior permission*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] No internet in the Registration vlan

[Thirunavukkarasu Palanisamy via PacketFence-users]

Hi Team,
Plz go thro the configuration
Registration vlan 2
Isolation vlan 3

There is no internet in the registration vlan












*root@packetfence:~# routeKernel IP routing tableDestination Gateway
  Genmask Flags Metric RefUse Ifacedefault
172.16.10.2 0.0.0.0 UG0  00 eth0100.64.0.0
 0.0.0.0 255.255.255.0   U 0  00 docker0link-local
 0.0.0.0 255.255.255.252 U 0  00
TANUVASAD-b172.16.2.0  0.0.0.0 255.255.255.0   U 0  0
 0 eth1.2172.16.3.0  0.0.0.0 255.255.255.0   U 0  0
   0 eth1.3172.16.10.0 0.0.0.0 255.255.255.0   U 0
 00 eth0172.16.11.0 0.0.0.0 255.255.255.0   U 0
 00 eth1172.16.30.0 0.0.0.0 255.255.255.0   U 0
 00 eth1.30*









*root@packetfence:~# ip route showdefault via 172.16.10.2 dev eth0
onlink100.64.0.0/24  dev docker0 proto kernel scope
link src 100.64.0.1169.254.0.0/30  dev TANUVASAD-b
proto kernel scope link src 169.254.0.2172.16.2.0/24 
dev eth1.2 proto kernel scope link src 172.16.2.1172.16.3.0/24
 dev eth1.3 proto kernel scope link src
172.16.3.1172.16.10.0/24  dev eth0 proto kernel
scope link src 172.16.10.103172.16.11.0/24  dev eth1
proto kernel scope link src 172.16.11.10172.16.30.0/24
 dev eth1.30 proto kernel scope link src 172.16.30.2*

IP assigned by the PF DHCP to the clients in the registration vlan.
any help would be greatly appreciated
--
Thanks & Regards,
Thirunavukkarasu

-- 
_-_
*_TANUVAS_*
*The contents of this message are confidential and are not be 
shared with outside parties without prior permission*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Issue after upgrading the packetfence - Regarding

[Thirunavukkarasu Palanisamy via PacketFence-users]

Hi Team,
Greetings of the day

After upgrading the packetfence to Version 11.2.0 the following message I
got in freeradius -X








*Ready to process requestsIgnoring request to auth address * port 1812
bound to server default from unknown client 172.16.20.210 port 55029 proto
udpReady to process requestsIgnoring request to auth address * port 1812
bound to server default from unknown client 172.16.20.210 port 55029 proto
udpReady to process requestsIgnoring request to auth address * port 1812
bound to server default from unknown client 172.16.20.210 port 55029 proto
udpReady to process requestsIgnoring request to auth address * port 1812
bound to server default from unknown client 172.16.20.210 port 55029 proto
udpReady to process requests*

The client details are as follows





















*client localhost {ipaddr = 127.0.0.1
require_message_authenticator = nosecret = <<< secret >>>
nas_type = "other"proto = "*"  limit {max_connections = 16
  lifetime = 0idle_timeout = 30  } } client localhost_ipv6 {
ipv6addr = ::1require_message_authenticator = nosecret
= <<< secret >>>  limit {max_connections = 16lifetime = 0
  idle_timeout = 30  } }*
How to resolve the issue?
Regards,
Thirunavukkarasu

-- 
_-_
*_TANUVAS_*
*The contents of this message are confidential and are not be 
shared with outside parties without prior permission*
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users