Morris, Andi wrote: > Hi all, > > Firstly, can I apologise in advance, I don’t think this is actually a > packetfence issue, however other users of packetfence may have come > across this and might be able to help me resolve it. > > Since yesterday we are seeing our wired devices on our packetfence > controlled network being prompted for credentials each time they are > plugged in/turned on/rebooted, and often the credentials are being rejected. > > Radius debug logs show that Access-Accept is being sent to the device, > but the device is not ever getting onto the network. > > Enabling debug on my Cisco 2960 test switch I can see the error below: > %DOT1X_SWITCH-5-ERR_ADDING_ADDRESS: Unable to add address
Can you post a little more of the debug log? Are you sure that the proper VLAN is being returned to the switch? A simple access-accept isn't necessarily enough. If the vlan is not sent, or is invalid, the device gets blocked. > I’m not 100% convinced that this is the same error that we’re seeing on > our user switches, I’m waiting for some hits on other switches I’ve > enabled debugging on to confirm this. > > The reason I don’t think that this is a packetfence/radius issue is that > we’re not having any issues with wireless clients. In the radius log, you should have a log entry showing the accept and another one showing what vlan was sent back. You might also look at the packetfence log at the same time and see if there are any errors showing. > I don’t know yet whether it is affecting just Windows users or everyone, > I’m waiting for confirmation on this. If it's only Windows users, there's likely something else going on... > Has anyone seen this before? We saw something similar that ended up being a bug in packetfence. But, the returns were access rejects in our case. What version of packetfence are you running? > Cheers, > > Andi -- --------------------------- Jason 'XenoPhage' Frisvold [email protected] --------------------------- "Any sufficiently advanced magic is indistinguishable from technology.\" - Niven's Inverse of Clarke's Third Law ------------------------------------------------------------------------------ Shape the Mobile Experience: Free Subscription Software experts and developers: Be at the forefront of tech innovation. Intel(R) Software Adrenaline delivers strategic insight and game-changing conversations that shape the rapidly evolving mobile landscape. Sign up now. http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
