Julien,

I added the MAC in the whitelist area however the result was the same.  I added 
"-A input-internal-inline-if -s 10.10.0.2/32 --jump ACCEPT" to the iptables 
config and it is now allowed to pass through.

-Chris

From: Julien Semaan [mailto:[email protected]]
Sent: Monday, September 15, 2014 8:32 AM
To: [email protected]
Subject: Re: [PacketFence-users] iptables exception

Hi Chris,

You can manually register the device MAC address in the administration 
interface.

Regards,
On 14-09-12 12:42 PM, Chris Heighway wrote:
Group,

I have an AP that needs "cloud access" but is also on the "filtered" side of 
our inline pf configuration for captive portal access (4.3.0 on CentOS 6.5).  
Since the AP cannot sign-in I need to allow it unfettered access to the 
internet though it is in the "Trapping" range.  I have tried adding the MAC of 
the Ethernet port to the whitelist with no luck.  My next step is to modify the 
iptables file however I do not completely understand the relationship between 
the /usr/local/pf/conf/iptables.conf and /etc/sysconfig/iptables.

Where do I add the "permit" for the AP?

Thank you,
Chris Heighway





------------------------------------------------------------------------------

Want excitement?

Manually upgrade your production database.

When you want reliability, choose Perforce

Perforce version control. Predictably reliable.

http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk




_______________________________________________

PacketFence-users mailing list

[email protected]<mailto:[email protected]>

https://lists.sourceforge.net/lists/listinfo/packetfence-users



--

Julien Semaan

[email protected]<mailto:[email protected]>  ::  +1.514.447.4918 *155  ::  
www.inverse.ca<http://www.inverse.ca>

Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and 
PacketFence (www.packetfence.org<http://www.packetfence.org>)
------------------------------------------------------------------------------
Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to