Hello Chinmay, just disable NAT on your access point and it will work.
Regards Fabrice Le 2015-09-17 06:38, Chinmay Mahata a écrit : > Hi PF Users, > I am new to this group and also novice to PacketFence. Though a newbie > I successfully setup PF (version 5.3.1), inline enforcement, in Ubuntu > (12.04.2 LTS), and all services are running. Below I am describing the > problem I am facing, forgive me if it is a repetition. > > Topology: > Internet<--> Modem/Router <-->(eth1)PF_Server(eth0) <--> multiple Wifi > APs<:::::::>nodes > > I created one guest using the admin gui, generated the password for > it, also successfully registered using those guest credentials from a > node. But in the admin GUI I can see the registered user as the AP, > MAC addr and IP addr (not the node). And all other nodes are > successfully going through the PF server without registration. (My APs > are cheap and of entry level, doing NAT) > > My objective is to implement network access control for the nodes. > Please help me how can I do that. Below the configuration details. Let > me know if you need any more info. > > > Thanks in advance. > --Chinmay > > > Config: > > [general] > # > # general.domain > # > # Domain name of PacketFence system. > domain=rd.foobar.in > # > # general.hostname > # > # Hostname of PacketFence system. This is concatenated with the > domain in Apache rewriting rules and therefore must be resolvable by > clients. > hostname=PF > > [registration] > # > # registration.device_registration_role > # > # The role to assign to gaming devices. If none is specified, the role > of the registrant is used. > device_registration_role=guest > > [alerting] > # > # alerting.emailaddr > # > # Email address to which notifications of rogue DHCP servers, > violations with an action of "email", or any other > # PacketFence-related message goes to. > [email protected] > > [database] > # > # database.pass > # > # Password for the mysql database used by PacketFence. > pass=xxxxxxxx > > [interface eth0] > enforcement=inlinel2 > ip=192.168.12.254 > type=internal > mask=255.255.255.0 > > [interface eth1] > ip=192.168.11.3 > type=management > mask=255.255.255.0 > > > > <https://sigads.rediff.com/RealMedia/ads/click_nx.ads/www.rediffmail.com/signatureline.htm@Middle?> > > Get your own *FREE* website, *FREE* domain & *FREE* mobile app with > Company email. > *Know More >* > <http://track.rediff.com/click?url=___http://businessemail.rediff.com?sc_cid=sign-1-10-13___&cmp=host&lnk=sign-1-10-13&nsrv1=host> > > > > > ------------------------------------------------------------------------------ > Monitor Your Dynamic Infrastructure at Any Scale With Datadog! > Get real-time metrics from all of your servers, apps and tools > in one place. > SourceForge users - Click here to start your Free Trial of Datadog now! > http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140 > > > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Fabrice Durand [email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org)
0xF78F957E.asc
Description: application/pgp-keys
------------------------------------------------------------------------------ Monitor Your Dynamic Infrastructure at Any Scale With Datadog! Get real-time metrics from all of your servers, apps and tools in one place. SourceForge users - Click here to start your Free Trial of Datadog now! http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
