Hi, we have Packetfence ZEN 5.3.1 installed and running well. Since a few weeks some students devices doesn't access the working vlan after registration with an message "sorry, your network should be enabled in one or two minutes...." it doesn't. They are in the registration vlan. Packetfence.log shows fingerbank warnings.
The switch, it belongs to is a cisco 2960S-TL. What can I do to solve this? Any ideas? Kind regards, Hubert ov 25 15:45:37 httpd.webservices(10860) INFO: [30:b5:c2:ed:1b:8f] deauthenticating (pf::Switch::Cisco::Catalyst_2960::radiusDisconnect) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling radius autz request: from switch_ip => (IP of switch), connection_type => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" (pf::radius::authorize) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of switch) Returning ACCEPT with VLAN 207 and role (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) Nov 25 15:54:03 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:54:40 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:54:59 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:08 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:13 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:15 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:16 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:18 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling radius autz request: from switch_ip => (IP of switch), connection_type => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" (pf::radius::authorize) Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of switch) Returning ACCEPT with VLAN 207 and role (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) Nov 26 13:56:19 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) [root@pfence3 logs]# less packetfence.log | grep 30:b5:c2:ed:1b:8f Nov 25 15:45:37 httpd.webservices(10860) INFO: [30:b5:c2:ed:1b:8f] deauthenticating (pf::Switch::Cisco::Catalyst_2960::radiusDisconnect) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling radius autz request: from switch_ip => (IP of switch), connection_type => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" (pf::radius::authorize) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of switch) Returning ACCEPT with VLAN 207 and role (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) Nov 25 15:54:03 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:54:40 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:54:59 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:08 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:13 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:15 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:16 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 25 15:55:18 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling radius autz request: from switch_ip => (IP of switch), connection_type => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" (pf::radius::authorize) Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of switch) Returning ACCEPT with VLAN 207 and role (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) Nov 26 13:56:19 httpd.webservices(10860) WARN: Unable to perform a Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' (pf::fingerbank::process) ------------------------------------------------------------------------------ _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
