Some log output:
>From switch:
Nov 19 18:20:11 PST: %AUTHMGR-5-START: Starting 'dot1x' for client
(1234.5678.1234) on Interface Gi3/46
Nov 19 18:20:12 PST: %DOT1X-5-SUCCESS: Authentication successful for client
(1234.5678.1234) on Interface Gi3/46
Nov 19 18:20:12 PST: %AUTHMGR-7-RESULT: Authentication result 'success' from
'dot1x' for client (1234.5678.1234) on Interface Gi3/46
Nov 19 18:20:12 PST: %AUTHMGR-5-FAIL: Authorization failed for client
(1234.5678.1234) on Interface Gi3/46
Nov 19 18:20:12 PST: %DOT1X_SWITCH-SP-5-ERR_VLAN_ON_ROUTED_PORT: Attempt to
assign VLAN 151 to routed 802.1x port GigabitEthernet3/46
Nov 19 18:20:12 PST: %DOT1X_SWITCH-SPSTBY-5-ERR_VLAN_ON_ROUTED_PORT: Attempt to
assign VLAN 151 to routed 802.1x port GigabitEthernet3/46
Nov 19 18:20:23 PST: %DOT1X-5-FAIL: Authentication failed for client
(1234.5678.1234) on Interface Gi3/46
Nov 19 18:20:23 PST: %AUTHMGR-7-RESULT: Authentication result 'timeout' from
'dot1x' for client (1234.5678.1234) on Interface Gi3/46
Nov 19 18:20:33 PST: %DOT1X-5-FAIL: Authentication failed for client (Unknown
MAC) on Interface Gi3/46
Nov 19 18:20:33 PST: %AUTHMGR-7-RESULT: Authentication result 'no-response'
from 'dot1x' for client (Unknown MAC) on Interface Gi3/46
Nov 19 18:20:33 PST: %AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client
(Unknown MAC) on Interface Gi3/46
from packetfence:
Nov 19 18:30:53 pf::WebAPI(908) INFO: handling radius autz request: from
switch_ip => 10.0.0.1, connection_type => Ethernet-EAP mac =>
12:34:56:78:12:34, port => 50346, username => [username] (pf::radius::authorize)
Nov 19 18:30:53 pf::WebAPI(908) INFO: autoregister a node that is already
registered, do nothing. (pf::node::node_register)
Nov 19 18:30:53 pf::WebAPI(908) INFO: Found a match
(CN=[username],DC=domain,DC=com)
(pf::Authentication::Source::LDAPSource::match_in_subclass)
Nov 19 18:30:53 pf::WebAPI(908) INFO: Matched rule ([username]) in source
domain.com, returning actions. (pf::Authentication::Source::match)
Nov 19 18:30:53 pf::WebAPI(908) INFO: Username was defined '[username]' -
returning user based role 'rolename' (pf::vlan::custom::getNormalVlan)
Nov 19 18:30:53 pf::WebAPI(908) INFO: MAC: 12:34:56:78:12:34, PID: [username],
Status: reg. Returned VLAN: 5 (pf::vlan::fetchVlanForNode)
Nov 19 18:30:53 pf::WebAPI(908) WARN: Role-based Network Access Control is not
supported on network device type pf::SNMP::Cisco::Catalyst_6500.
(pf::SNMP::supportsRoleBasedEnforcement)
From: Thomas Tsai [mailto:[email protected]]
Sent: Tuesday, November 19, 2013 6:27 PM
To: [email protected]
Subject: [PacketFence-users] 802.1x support on a Cisco Catalyst 6500 platform
I see 802.1x isn't supported on a Cisco 6500 platform.
http://www.packetfence.org/about/supported_switches_and_aps.html
But... has anyone had any luck on doing this? Has anyone tried using the 4500
series module or some other fashion?
Its disheartening that most other platforms don't seem to have this limitation,
but then again, I reckon not a lot of people have 6500 chassis used in prod for
endpoint connectivity...
**********************************************
Email Disclaimer:
This email, including attachments, may contain
proprietary, confidential or privileged information. If you
are not the intended recipient, please (i) do not use,
disclose, save or retransmit this message or any
attachments, (ii) alert the sender by reply email and (iii)
destroy or delete this message and any attachments.
Delivery of this email to a person other than the intended
recipient(s) shall not constitute a waiver of privilege or
confidentiality.
CP Investments, member FINRA and SIPC, serves as
placement agent for investment products advised by
Canyon Capital Advisors LLC. This email is not intended to
be an offer to sell or a solicitation of an offer to buy any
security in any jurisdiction. We review and retain
electronic communications traveling through our network.
**********************************************
------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing
conversations that shape the rapidly evolving mobile landscape. Sign up now.
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
