Ok, that makes sense. So yes pfdhcplistener is seeing other devices being
assigned an IP in the same subnet. For the most part it's working well but
for the sporadic problems. Digging through it I don't see a lot
of consistency between the error messages, things not showing up in
pfdhcplistener
and things not making it to ipset. I had one with the errors and no mention
in pfdhcplistener that was in Ipset at the time I looked. But I may not
have enough logs with deeper debugging yet.
On Thu, May 7, 2015 at 2:49 PM, Louis Munro <[email protected]> wrote:
> On May 7, 2015, at 13:18 , John Baker <[email protected]> wrote:
>
> We've had ongoing problems with users, particularly guest registrations,
> sporadically not getting put in ipset for some time. What happens is that
> somebody registers and then are never able to get past the "success" page.
> They show up as properly registered in the database but the mac and IP
> never get put in ipset. I just started finding the messages in the log when
> I updated and the symptoms seem to be showing up more than they used to.
>
> Why would locationlog show up as an error when we only use inline
> networks? We've been using packetfence inline for years and we've
> never configured vlan mode because it won't work with most
> of our equipment.
>
>
> Because the locationlog contains among other thing the connection type
> (e.g. “INLINE”) required to know if we need to change a VLAN or an ipset.
> So you need that entry to be correct. Locationlog does not imply VLAN
> enforcement.
>
> The pfdhcplistener log says nothing about though syslog dhcp entries do. I
> had wondered if perhaps pfdhcplistener got confused when they tried to
> switch networks. The other DHCP address came from an unaffiliated wireless
> device in the building and was not one of our networks.
>
>
> Is pfdhcplistener seeing other devices being assigned an IP in the same
> subnet as the problem one?
> pfdhcplistener needs to see something for that MAC to update the
> locationlog.
>
>
> Regards,
> --
> Louis Munro
> [email protected] :: www.inverse.ca
> +1.514.447.4918 x125 :: +1 (866) 353-6153 x125
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (
> www.packetfence.org)
>
>
> ------------------------------------------------------------------------------
> One dashboard for servers and applications across Physical-Virtual-Cloud
> Widest out-of-the-box monitoring support with 50+ applications
> Performance metrics, stats and reports that give you Actionable Insights
> Deep dive visibility with transaction tracing using APM Insight.
> http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
John Baker
Network Administrator
Marlboro College
Phone: 451-7551 Cell: 490-0066
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
