Loius: Sorry, its been so long in getting back with you. I decided to use a test server to finish our testing with since putting our production server in debug mode was going to generate insane amounts of logs only a small percentage of which we would be interested in.
Currently I am getting 15-20 authorizations a second (and that's a slow period) ... debug mode would have been ... interesting. So! New server, in debug mode : ) Saw this line in the packetfence.log file: Sep 29 11:06:06 httpd.aaa(4076) WARN: (10.11.40.252) Sending REJECT since switch is unsupported (pf::radius::_switchUnsupportedReply) ... how do I tell PF to use RADIUS with this device. Here is my switches.conf [10.11.40.252] type=Aruba radiusSecret=[REDACTED] guestVlan=112 defaultRole=default defaultVlan=111 deauthMethod=RADIUS AccessListMap=N gamingRole=gaming type=Aruba::Controller_200 guestRole=guest gamingVlan=112 I have tried both aruba switch types with no luck. How do I force PF to use RADIUS with these APs? Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________ From: Louis Munro [[email protected]] Sent: Monday, September 28, 2015 3:22 PM To: [email protected] Subject: Re: [PacketFence-users] PF sending out SNMP De-Auth when set to RADIUS On Sep 28, 2015, at 14:47 , Sallee, Jake <[email protected]<mailto:[email protected]>> wrote: I did some more testing and we cannot see any RADIUS messages on any port other than access-request, access-accept, account-request, and accounting-response. Hi Jake, Just to be sure, there is nothing at all going out from that server on port 3799? Not even going to the wrong IP for the controller or AP? Could you show me the switches.conf's section for that AP? Try changing the loglevel to the httpd.portal and httpd.webservices to “DEBUG”. That should give us additional insight into what is going on. Regards, -- Louis Munro [email protected]<mailto:[email protected]> :: www.inverse.ca<http://www.inverse.ca> +1.514.447.4918 x125 :: +1 (866) 353-6153 x125 Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and PacketFence (www.packetfence.org<http://www.packetfence.org>) ------------------------------------------------------------------------------ _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
