Berlin, Amanda - Information Systems <berlina@...> writes:

> 
> That's awesome, thanks so much guys. I'm able to get v1 working just fine,
but still can't seem to get v3 up and
> going. I'll just keep changing settings until I can get it to work. At
least I kind of have an idea how it
> should be working now.
> 
> Amanda
> 
> -----Original Message-----
> From: Arthur Emerson III [mailto:Arthur.Emerson@...] 
> Sent: Tuesday, March 19, 2013 2:35 PM
> To: packetfence-users@...
> Subject: Re: [PacketFence-users] Unable to detect network connectivity.
> 
> <berlina@...> wrote:
> > 
> > So what interface should the snmp-server host be set to? The 
> > management one?
> 
> Yes!
> 
> > Does anyone have a 3750 config that works?
> 
> Here is a basic one that works for us.  Note that to keep things simple
for troubleshooting, it is using SNMPv1.
> Also note that it is based on the 2960 stack config, which works the same
on our 3750's:
> 
> [192.168.100.64]
> type=Cisco::Catalyst_2960
> mode=production
> vlans=2,11,12,302,303,304,305
> normalVlan=11
> registrationVlan=302
> isolationVlan=303
> macDetectionVlan=304
> guestVlan=305
> customVlan1=11
> customVlan2=2
> customVlan3=2
> customVlan4=11
> deauthMethod=SNMP
> cliTransport=SSH
> SNMPCommunityTrap=******
> SNMPUserNameTrap=
> SNMPAuthProtocolTrap=
> SNMPAuthPasswordTrap=
> SNMPPrivProtocolTrap=
> SNMPPrivPasswordTrap=
> SNMPCommunityRead=***public***
> SNMPCommunityWrite=******
> SNMPEngineID=
> SNMPUserNameRead=
> SNMPAuthProtocolRead=
> SNMPAuthPasswordRead=
> SNMPPrivProtocolRead=
> SNMPPrivPasswordRead=
> SNMPUserNameWrite=
> SNMPAuthProtocolWrite=
> SNMPAuthPasswordWrite=
> SNMPPrivProtocolWrite=
> SNMPPrivPasswordWrite=
> radiusSecret=******
> controllerIp=
> 
> Notice how little info it takes for this to work!  Once you have it
working for SNMPv1, you can then upgrade it
> to one of the more secure versions.
> 
> > I don¹t have a firewall between the two. If I send the traps to my 
> > management port I see the snmp string in my packet capture, but I 
> > still get nothing in my snmptrapd.log.
> 
> If you are using SNMPv1, it sounds like the strings you used on both ends
for SNMPCommunityTrap don't match.
> Don't forget to restart PF after editing any config file or making GUI
config changes!  When I was doing the
> initial testing here, I rebooted the server after every change just to
make sure that everything came back up...
> 
> -Arthur
> 
> -------------------------------------------------------------------------
> Arthur Emerson III                 Email:      emerson@...
> Network Administrator              InterNIC:   AE81
> Mount Saint Mary College           MaBell:     (845) 561-0800 Ext. 3109
> 330 Powell Ave.                    Fax:        (845) 562-6762
> Newburgh, NY  12550                SneakerNet: Aquinas Hall Room 11
> 
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_mar
> 


Hi Guys,

I've been going through your posts and i realize i face kind of the same
predicament, however my challenges begin from the initial configuration.

Currently users are on vlan 201 - access to internet

What confuses me is what vlan do i define as normal vlan and mac detection
vlan. Is normal vlan same as defaultVlan (as shown below)? 

What vlan should be set on the switch port for the user? I initially set it
to the registration vlan

Here is a summary of my configuration; 

[interface eth0]
ip=10.10.0.10
type=management
mask=255.255.255.240

[interface eth0.20]
enforcement=vlan
ip=10.6.1.10
type=internal
mask=255.255.255.0

[interface eth0.10]
enforcement=vlan
ip=10.4.1.10
type=internal
mask=255.255.255.0

x-----x-------------x---------x------

[10.2.1.20]
mode=production
triggerInline=
type=Cisco::Catalyst_2960
SNMPVersion=2c
SNMPPrivProtocolWrite=DES
SNMPPrivPasswordWrite=privpwdwrite
uplink=25,26
uplink_dynamic=0
defaultVlan=201
macDetectionVlan=20
isolationVlan=20
registrationVlan=10
SNMPVersionTrap=2c

Please advise me if i am on the right track and what i need to do to make it
work.

Regards,
Frank



------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to