Hi Brent,

> As you can see, they are identical. The MACs for all of the devices are
> registered in packetfence, and the MACs for the phones are identified as
> VOIP devices. Which brings up another question. I have the VOIP phones
> autoregistering based upon their Vendor MAC prefix. Is it possible to
> auto-classify them as VOIP devices as well?

Override pf::vlan's getNodeInfoForAutoReg in pf::vlan::custom and in 
there, do a MAC VENDOR regexp and if it matches, set
         $node_info{'voip'} = VOIP;

>
> I will refer to the devices as Host_A, Phone_A, Host_B, Phone_B, and
> replace the MACs accordingly for the purpose of clarity and security.
> Host_A is connected to port Gi5/44, and Host B is connected to Gi4/45.
>
snip
>
> Mar 24 11:24:05 pf::WebAPI(22979) INFO: handling radius autz request:
> from switch_ip => switchip, connection_type => Ethernet-NoEAP mac =>
> phone_a_mac, port => 50544, username => phoneamac (pf::radius::authorize)
>
> Mar 24 11:24:05 pf::WebAPI(22979) WARN: database query failed with:
> Column 'port' cannot be null. (errno: 1048), will try again
> (pf::db::db_query_execute)
>
> Mar 24 11:24:05 pf::WebAPI(22979) WARN: Unable to insert a locationlog
> entry. (pf::locationlog::locationlog_synchronize)
>
> rad_recv: Access-Request packet from host SwitchIP port 1645, id=36,
> length=208
>
snip
> rlm_perl: PacketFence NO RESULT VLAN
>
> rlm_perl: PacketFence RESULT RESPONSE CODE: 2 (2 means OK)
snip
> Sending Access-Accept of id 36 to SwitchIP port 1645
>
> Cisco-AVPair = "device-traffic-class=voice"
>
snip
> Phone_B (not working):
>
> Mar 24 11:36:50 pf::WebAPI(22970) INFO: handling radius autz request:
> from switch_ip => SwitchIP, connection_type => Ethernet-NoEAP mac =>
> Phone_B_MAC, port => 50445, username => phonebmac (pf::radius::authorize)
>
> Mar 24 11:36:50 pf::WebAPI(22970) INFO: autoregister a node that is
> already registered, do nothing. (pf::node::node_register)
>
> Mar 24 11:36:50 pf::WebAPI(22970) FATAL: radius authorize failed with
> error: Can't call method "NasPortToIfIndex" on an undefined value at
> /usr/local/pf/lib/pf/radius.pm line 395. (PFAPI::radius_authorize)
>
snip
>
> rlm_perl: PacketFence DENIED CONNECTION because of SOAP error see syslog
> for details.
>
snip
>
> ++[perl] returns fail
>
> Sorry if I have sent excessive information, but trying to be as complete
> as possible. Let me know what else might be needed.

Ok, the second request says that it can't do a method call because the 
object is no longer valid.. Since you have errors in both requests, I 
think that the first request trashes the object for the second request..

Walking through the code I found a problem..

I'll file a ticket, do a patch and come back to you this afternoon with 
a patch to try.

Thanks,
-- 
Olivier Bilodeau
[email protected]  ::  +1.514.447.4918 *115  ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to