Brent, Can you try to manually trigger a re-authentication straight with snmpset?
Use : snmpset -v2c -c [string] [switch_ip] 1.0.8802.1.1.1.1.1.2.1.5.[ifIndex] i 1 Are we sure that the ifIndex is properly mapped to the right port? > FG: We are using the IEEE8021-PAE MIB for the dot1xReauthentication, you can > check if this OID is reachable : 1.0.8802.1.1.1.1.1.2.1.5 (I am pretty sure > it is on this monster tho :) > I can browse to it, yeah. > > FG: Can you try this command, and let me know what is the output : > FG: cd /usr/local/pf/bin; > FG: ./pfcmd_vlan -deauthenticateDot1x -switch [switch_ip] -ifIndex > [index_of_port] -verbose 4 > > DEBUG - instantiating new SwitchFactory object > DEBUG - reading config file /usr/local/pf/conf/switches.conf > DEBUG - creating new pf::SNMP::Cisco::Catalyst_4500 object > DEBUG - start handling 'deauthenticateDot1x' command > INFO - wired deauthentication of a 802.1x MAC > ERROR - got an SNMP error trying to force 802.1x re-authentication: Received > commitFailed(14) error-status at error-index 1 > DEBUG - finished handling 'deauthenticateDot1x' command > > FG: Also, make sure the SNMP strings are properly set in switches.conf. > Can I assume since they can do VLAN setting operations, that they must be > right? I also tried a different string, and while it could also do other > "set" operations, this still failed. > > Thanks, > Brent > > > ------------------------------------------------------------------------------ > Enable your software for Intel(R) Active Management Technology to meet the > growing manageability and security demands of your customers. Businesses > are taking advantage of Intel(R) vPro (TM) technology - will your software > be a part of the solution? Download the Intel(R) Manageability Checker > today! http://p.sf.net/sfu/intel-dev2devmar > _______________________________________________ > Packetfence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Francois Gaudreault, ing. jr [email protected] :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Enable your software for Intel(R) Active Management Technology to meet the growing manageability and security demands of your customers. Businesses are taking advantage of Intel(R) vPro (TM) technology - will your software be a part of the solution? Download the Intel(R) Manageability Checker today! http://p.sf.net/sfu/intel-dev2devmar _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
