On version 4.0.4
I have a Cisco 5508 setup and working but when I run the pfcmd_vlan to
reevaluateAccess I get the following output which seems to indicate that it is
using SNMP to drop the node from the WLC instead of radius. Is this normal or
just a output error?
DEBUG on 2nd from the bottom line
Output from command below:
./pfcmd_vlan -reevaluateAccess -mac d8:a2:5e:1e:eb:e9 -verbose 4
DEBUG - instantiating new SwitchFactory object
INFO - re-evaluating access for node d8:a2:5e:1e:eb:e9 (pfcmd_vlan called)
TRACE - attempt #0 to run query locationlog_view_open_mac_sql from module
locationlog
DEBUG - Database statements not prepared, preparing...
DEBUG - Preparing pf::locationlog database queries
DEBUG - function pf::db::get_db_handle is calling db_connect
DEBUG - checking handle
DEBUG - (Re)Connecting to MySQL (thread id: 0)
DEBUG - connected
INFO - d8:a2:5e:1e:eb:e9 is currentlog connected at 10.1.1.57 ifIndex 13 in
VLAN 117
DEBUG - instantiating new pf::vlan object
DEBUG - creating new pf::SNMP::Cisco::WLC_5500 object
TRACE - attempt #0 to run query node_attributes_sql from module node
DEBUG - Database statements not prepared, preparing...
DEBUG - Preparing pf::node database queries
TRACE - attempt #0 to run query violation_count_trap_sql from module violation
DEBUG - Database statements not prepared, preparing...
DEBUG - Preparing pf::violation database queries
DEBUG - d8:a2:5e:1e:eb:e9 has 1 open violations(s) with action=trap; it might
belong into another VLAN (isolation or other).
TRACE - What is the highest priority violation for this host?
TRACE - attempt #0 to run query violation_view_top_sql from module violation
TRACE - attempt #0 to run query class_view_sql from module class
DEBUG - Database statements not prepared, preparing...
DEBUG - Preparing pf::class database queries
INFO - highest priority violation for d8:a2:5e:1e:eb:e9 is 1500020. Target VLAN
for violation: isolation (156)
INFO - VLAN reassignment required for d8:a2:5e:1e:eb:e9 (current VLAN = 117 but
should be in VLAN 156)
INFO - switch port for d8:a2:5e:1e:eb:e9 is 10.1.1.57 ifIndex 13 connection
type: WiFi MAC Auth
DEBUG - creating new pf::SNMP::PacketFence object
DEBUG - sending a local desAssociate trap to force deassociation (client will
reconnect getting a new VLAN)
Thanks
David Bulanda
Network Services Manager
[email protected]<mailto:[email protected]>
Indiana Tech<http://www.indianatech.edu/>
------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
