OK! So!  Due to our Cisco hardware not being capable of dynamic vlan assignment 
while in HREAP mode we will most likely not be able to use the vlan assignment 
feature in PF.  Cisco has stated that the ability may be available in the 
future but not now.

To that end we have devised a workaround that involves statically assigning the 
vlan based on the SSID.  We need to disable the vlan assignment feature in PF 
and we would also like to change the violation feature's behavior from placing 
the user into a isolation vlan (which is now impossible ... thanks to Cisco) to 
simply denying them access completely.

If any one has done something like this please share your experiences.

Jake Sallee
Godfather of Bandwidth
Network Engineer
University of Mary Hardin-Baylor

900 College St.
Belton, Texas
76513

Fone: 254-295-4658
Phax: 254-295-4221

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to