> The RADIUS server in this schema is the same as the PF server, right? Correct.
Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________ From: Boris Epstein [[email protected]] Sent: Tuesday, April 14, 2015 8:54 AM To: [email protected] Subject: Re: [PacketFence-users] switch configuration: Cisco router with dot1x/MAB authentication Jake, Thank you very much, this is very helpful. The RADIUS server in this schema is the same as the PF server, right? Boris. On Mon, Apr 13, 2015 at 6:47 PM, Sallee, Jake <[email protected]<mailto:[email protected]>> wrote: Got you covered mate! http://permalink.gmane.org/gmane.comp.networking.packetfence.user/7483 That should be enough to get you squared away. Be aware that if you are using MAB with 802.1x you will have to wait for 802.1x to timeout if your device does not support it. This can take up to 60 seconds depending on your config. I would suggest setting the 802.1x timeout to something like 7 seconds; but thats an arbitrary number and you will probably need to play with it to suite your needs perfectly. Good luck! Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU<http://WWW.UMHB.EDU> 900 College St. Belton, Texas 76513 Fone: 254-295-4658<tel:254-295-4658> Phax: 254-295-4221<tel:254-295-4221> ________________________________ From: Boris Epstein [[email protected]<mailto:[email protected]>] Sent: Monday, April 13, 2015 5:00 PM To: [email protected]<mailto:[email protected]> Subject: [PacketFence-users] switch configuration: Cisco router with dot1x/MAB authentication Hello listmates, I have several Cisco switches which I am trying to configure to authenticate using dot1x. So far I am not having much luck; for one thing, I can't figure out how to tell it to defer the authentication to the correct server (IP address). Another issue is that I have a number of devices who may not be running a dot1x supplicant and for them I will need to do MAB authentication - and I have not succeeded in getting this going either. Hence any help with that would be appreciated. If you have a config like that and are willing to share it - that would be great too. Thanks in advance. Cheers, Boris. ------------------------------------------------------------------------------ BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF _______________________________________________ PacketFence-users mailing list [email protected]<mailto:[email protected]> https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
