Hi Jose,
1) I got PF running correctly some time ago but now it's only working
in the ports it already knows the MAC addresses of the connected
devices, if i connect these or new devices to a new switch port, the
switch generates the port-security traps, but PF does nothing and the
new nodes doesn't appear on the wed GUI. No entry in packetfence log
neither.
Do you receive the trap on the packetfence server? Maybe you have some
wrong iptables rules or a firewall somewhere that blocks the trap. If
PF does not receive the SNMP traps, it will do nothing...
2)I edited custom.pm <http://custom.pm> file in order to asign vlans
that correspon exactly with the name of the categories (that will be
the vlan numbers), so i don't need to edit the customs vlans in
switches.conf neither write a lot of "ifs" in the code, one for each
category.
The new code is:
my $correctVlan=1;
if (ref($node_info) eq 'HASH' && defined($node_info->{'category'}) &&
lc($node_info->{'category'}) > 1) {
$correctVlan = lc($node_info->{'category'});
}
return $correctVlan;
The provided code is wrong. Did you even look the example provided in
the default file? No need to verify that node_info is a HASH, and
categories are sent using the string name, not the id. See the example
in the code :
# # custom example: admin category
# # return customVlan5 to nodes in the admin category
# if (defined($node_info->{'category'}) &&
lc($node_info->{'category'}) eq "admin") {
# return $switch->getVlanByName('customVlan5');
# }
3) I would also like to know if it's possible to delete a node in the
web GUI that it is not connected anymore.
Yes, but under some circumstances. The node must be inactive in PF and
all iplog, locationlog entries need to be closed. Basically, it does
not happen very often. Just keep it there and edit the note field with
"NOT CONNECTED" instead.
Thanks a lot for your help!
José
------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Francois Gaudreault, ing. jr
[email protected] :: +1.514.447.4918 (x130) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)
------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
