Hello Peter, Rejected in Post auth mean that the authentication failed in PacketFence authorization.
The most likely issue with that (because Mac authentication ‘never' fail) points out to maybe a SNMP look up failing. Do you have the SNMP setting of that switch correctly config in PacketFence ? Thanks, Ludovic Zammit Product Support Engineer Principal Lead Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > On Jan 10, 2023, at 2:05 PM, Truax, Peter via PacketFence-users > <packetfence-users@lists.sourceforge.net> wrote: > > Hi Everyone, > > We upgraded from version 11.1 to 12.1 a few weeks ago and have experienced > strange behavior at times using Cisco 2960X switches. Wireless has been fine > as well as our legacy Dell switches. > > At seemingly random days, we experience outages with random Cisco 2960X > switches. Radius logs show the following: > > Jan 1 03:36:21 nac auth[1223977]: (247197) Rejected in post-auth: > [64167f000e86] (from client 10.10.0.38/32 port 60000 cli 64:16:7f:00:0e:86) > Jan 1 03:36:21 nac auth[1223977]: (247197) Login incorrect (rest: Request > failed: 28 - Timeout was reached): [64167f000e86] (from client 10.10.0.38/32 > port 60000 cli 64:16:7f:00:0e:86) > > A reboot of the Packetfence Services fixes the problem temporarily. Thinking > this is a login problem, we have re-entered the radius passwords on both the > switch side and the Packetfence side with no changes in behavior. > > Anyone else experience this behavior on 12.1.0? Version 11.1 was rock solid > for us. > > Regards, > > Peter Truax > Network Administrator > (360) 688-2240 > Saint Martin’s University > 5000 Abbey Way E > Lacey, WA 98503 > > <image003.jpg> > > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > <mailto:PacketFence-users@lists.sourceforge.net> > https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!Uv0o0yr3kYP3-wafIKlDafSRX6zPh0erJrKNquSnQ3pabkIs3lffH1C9BTJdACOJHumbruOMux0NwiQLTXoKqWMY-zBAQNWeqV_Mig$ > > <https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!Uv0o0yr3kYP3-wafIKlDafSRX6zPh0erJrKNquSnQ3pabkIs3lffH1C9BTJdACOJHumbruOMux0NwiQLTXoKqWMY-zBAQNWeqV_Mig$>
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
