First of all I would like to thank the Packetfence team for a great
product.
I have a question and I am wondering if this may be feature request or bug.
I have a large network with many remote sites. Every site is connected to
our core network for access to the local resources and access to the
internet.
We have our own dhcp servers already setup so I do not want DHCP from PF,
and I believe this is core of my issue.
PF is setup in the core of the network and there are no user access in the
core. I have setup the three interfaces for management, registration, and
isolation and the appropriate VLAN's and subnets. I configured PF not to
manage DHCP but I do have ip-helper commands setup to sent the requests to
PF still so its listeners can catch the DHCP conversations I got the
switch configuration correctly setup and since I have Cisco 6509's I am
using the port-security method for the switches.
I was having a slight issue of getting the remote registration subnet to
talk appropriately to the PF box. After much frustration for a few days,
reading the lists and diagnosing the issue, I found the problem.
I believe that since I am not useing PF for DHCP, it is not putting in the
required routes for the remote subnets. After putting in the routes
manually using "route add ...", I got communications. So I have to
manually add the route out the appropriate interface (registration,
isolation).
i.e: route add -net 10.10.20.0/255 gw 10.1.20.1 dev eth0.2
I have my routed networks defined in the networks.conf file. So am I
missing a step or is it that I am not using DHCP the issue or could it be
something else.
Although I can add the routes manually, I am trying to make it so other
admins of my network who are not linux friendly, can just use the web
interface.
Lupe Silva
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
