Hi everybody! I've gotten packetfence to work together with HP MSM760 in inline mode and most stuff works as expected.
One issue with the setup is that HP MSM760 won't send accounting correct (input/output will always be zero) if I'm not tunneling all traffic to the controller. I've tried to get MSM to work without inline, but got stuck since I had rewrite a lot with help from another thread in this mailinglist. I was able to get deauthentication with SOAP to work, but never the authentication part. Now when using inline (and not tunneling all traffic) both authentication and deauthentication (deregister node / manually apply bandwidth violation) works. The "last" thing I need, since this is why I'm trying to use PacketFence, is to get bandwidth violations to work when on inline mode. >From what I've understood, the graphs are made from radius accounting and so >is the Accounting:: trigger. Since I'm not able to get accounting to work when not tunneling all traffic to controller, and if I tunnel all taffic I can't get inline mode to work, the only two alternatives (as far as I can see it) are: * Make a violation trigger that uses the data from the inline_accounting table. (maybe isn't possible? Haven't found anything about it) * Make a script that magically exports inline_accounting to radacct or something like that (see my "thoughts" below) SELECT * FROM inline_accounting GROUP BY ip ORDER BY lastmodified DESC; select mac from iplog WHERE ip LIKE "<ip>"; SELECT * FROM radacct WHERE callingstationid LIKE "<mac>" ORDER BY radacctid DESC LIMIT 1; UPDATE radacct SET acctinputoctets=<inbytes>,acctoutputoctets=<outbytes> WHERE radacctid LIKE 18; * Get inline to work together with MSM when tunneling all traffic to controller and then to PacketFence Any ideas are really appreciated! Best regards, Simon Gottschlag
------------------------------------------------------------------------------
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
