Raymond Samonte <[email protected]> wrote: > > 1. Why is it the guest pc is asking an IP Address on the Normal > VLAN dhcp server while on the 10 minute grace period for email > activation? is it how packetfence works?
Yes, this is normal. PF gives 10 minutes of "live" access so that the guest can retrieve their external e-mail to get the validation link. The only reason for this e-mail that I can think of is to validate the guest provided their correct e-mail address, and didn't just make something up to get access. > 2. When I confirm the email and activate the guest access, > it does not re-assign to guest vlan but stays on the normal vlan. Did you un-comment the guest VLAN code in lib/pf/vlan/custom.pm ??? I believe that this is the code where VLAN decisions are made, and it needs slight customization to use the guest and custom VLANs. > 3. I configured the guest access to 30mins but it doesn't block > the internet access after the 30 mins period. Packetfence cut the > access to 40mins before going again to the registration vlan. The VLAN behavior is what happened here as well out of the box when a guest timed out and didn't validate. [I have since made a few changes to the PF code so that any guest account that expires (whether validated or not) has a 30-day violation set so that the device cannot be re-registered again. In other words, a device can be a guest more than once per month, which eliminates perpetual guests who just keep re-registering as they expire.] Timing-wise, I believe that the PF task that expires nodes does not run every minute. The node stays live until the next expire run cycle after the node expires, which drove me crazy when I was testing expirations anticipating stopwatch accuracy... -Arthur ------------------------------------------------------------------------- Arthur Emerson III Email: [email protected] Network Administrator InterNIC: AE81 Mount Saint Mary College MaBell: (845) 561-0800 Ext. 3109 330 Powell Ave. Fax: (845) 562-6762 Newburgh, NY 12550 SneakerNet: Aquinas Hall Room 11 ------------------------------------------------------------------------------ Try New Relic Now & We'll Send You this Cool Shirt New Relic is the only SaaS-based application performance monitoring service that delivers powerful full stack analytics. Optimize and monitor your browser, app, & servers with just a few lines of code. Try New Relic and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
