Hi Francis,
thank you for your support.
Im afraid its still doesnt work as expected..., same behavior. Heres
the packetfence.log.
For a Reg or Unreg Status:
"
May 23 09:40:21 httpd.admin(0) INFO: loading Net::MAC::Vendor cache from
/usr/local/pf/conf/oui.txt (pf::util::load_oui)
May 23 09:42:43 httpd.admin(0) INFO: loading Net::MAC::Vendor cache from
/usr/local/pf/conf/oui.txt (pf::util::load_oui)
May 23 09:42:50 httpd.admin(0) INFO: re-evaluating access for node
00:0b:5d:23:02:4d (manage_deregister called)
(pf::enforcement::reevaluate_access)
May 23 09:42:50 httpd.admin(0) INFO: 00:0b:5d:23:02:4d is currentlog
connected at 10.2.253.2 ifIndex 10115 in VLAN 223
(pf::enforcement::_should_we_reassign_vlan)
May 23 09:42:51 httpd.admin(0) INFO: MAC: 00:0b:5d:23:02:4d is of status
unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
May 23 09:42:51 httpd.admin(0) INFO: VLAN reassignment required for
00:0b:5d:23:02:4d (current VLAN = 223 but should be in VLAN 333)
(pf::enforcement::_should_we_reassign_vlan)
May 23 09:42:51 httpd.admin(0) INFO: switch port for 00:0b:5d:23:02:4d is
10.2.253.2 ifIndex 10115 connection type: Wired MAC Auth
(pf::enforcement::_vlan_reevaluation)
May 23 09:42:54 pfsetvlan(21) INFO: local (127.0.0.1) trap for switch
10.2.253.2 (main::parseTrap)
May 23 09:42:54 pfsetvlan(1) INFO: nb of items in queue: 1; nb of threads
running: 0 (main::startTrapHandlers)
May 23 09:42:54 pfsetvlan(1) INFO: reAssignVlan trap received on
10.2.253.2 ifIndex 10115 (main::handleTrap)
May 23 09:42:54 pfsetvlan(1) WARN: Until CoA is implemented we will bounce
the port on VLAN re-assignment traps for MAC-Auth
(pf::SNMP::handleReAssignVlanTrapForWiredMacAuth)
May 23 09:42:59 pfsetvlan(1) INFO: finished (main::cleanupAfterThread)
May 23 09:43:16 pf::WebAPI(2466) INFO: handling radius autz request: from
switch_ip => 10.2.253.2, connection_type => Ethernet-NoEAP mac =>
00:0b:5d:23:02:4d, port => 50015, username => 000b5d23024d
(pf::radius::authorize)
May 23 09:43:16 pf::WebAPI(2466) INFO: MAC: 00:0b:5d:23:02:4d is of status
unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
May 23 09:43:16 pf::WebAPI(2466) WARN: Role-based Network Access Control
is not supported on network device type pf::SNMP::Cisco::Catalyst_3560G.
(pf::SNMP::supportsRoleBasedEnforcement) "
For Pending or Grace status:
Only this
" May 23 09:44:17 httpd.admin(0) INFO: loading Net::MAC::Vendor cache from
/usr/local/pf/conf/oui.txt (pf::util::load_oui) "
Cheers,
LT
Citando Francis Lachapelle <flachape...@inverse.ca>: > Hi Luis
On 2013-05-20, at 7:03 AM, luis torres <luistor...@netc.pt> wrote:
trought the browser , in nodes section, I can only enforce vlans on
a specific node , between Register or Unregiste, Grace and Pending
doesnt do nothing..., however if I give the cmd
(/usr/local/pf/bin/pfcmd node edit 00:0b:5d:23:02:4d
pid=admin,status="grace") on the linux with root user, it works
perfectly.
I committed a fix yesterday :
https://github.com/inverse-inc/packetfence/commit/27ca8615999265099dc5e00b4fe5cd4c33991ddd
It will be integrated to 4.0.2.
Thanks,
Francis
--
flachape...@inverse.ca :: +1.514.755.3640 :: http://www.inverse.ca
Inverse :: Leaders behind SOGo (http://sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
