Hello Hubert, it looks like the disconnect is working but your status is still unreg.
Nov 25 15:45:37 httpd.webservices(10860) INFO: [30:b5:c2:ed:1b:8f] deauthenticating (pf::Switch::Cisco::Catalyst_2960::radiusDisconnect) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling radius autz request: from switch_ip => (IP of switch), connection_type => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" (pf::radius::authorize) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of switch) Returning ACCEPT with VLAN 207 and role (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) Do you have the complete flow when you try to register ? (like first radius connection, captive portal, disconnection and new radius connection). Regards Fabrice Le 2015-11-27 03:48, Hubert Kupper a écrit : > Hi, > > we have Packetfence ZEN 5.3.1 installed and running well. Since a few > weeks some students devices doesn't access the working vlan after > registration with an message "sorry, your network should be enabled in > one or two minutes...." it doesn't. They are in the registration vlan. > Packetfence.log shows fingerbank warnings. > > The switch, it belongs to is a cisco 2960S-TL. > > What can I do to solve this? Any ideas? > > Kind regards, > Hubert > > ov 25 15:45:37 httpd.webservices(10860) INFO: [30:b5:c2:ed:1b:8f] > deauthenticating (pf::Switch::Cisco::Catalyst_2960::radiusDisconnect) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling > radius autz request: from switch_ip => (IP of switch), connection_type > => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => > [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" > (pf::radius::authorize) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status > unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of > switch) Returning ACCEPT with VLAN 207 and role > (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) > Nov 25 15:54:03 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:54:40 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:54:59 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:08 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:13 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:15 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:16 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:18 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling > radius autz request: from switch_ip => (IP of switch), connection_type > => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => > [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" > (pf::radius::authorize) > Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status > unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) > Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of > switch) Returning ACCEPT with VLAN 207 and role > (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) > Nov 26 13:56:19 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > [root@pfence3 logs]# less packetfence.log | grep 30:b5:c2:ed:1b:8f > Nov 25 15:45:37 httpd.webservices(10860) INFO: [30:b5:c2:ed:1b:8f] > deauthenticating (pf::Switch::Cisco::Catalyst_2960::radiusDisconnect) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling > radius autz request: from switch_ip => (IP of switch), connection_type > => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => > [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" > (pf::radius::authorize) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status > unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of > switch) Returning ACCEPT with VLAN 207 and role > (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) > Nov 25 15:54:03 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:54:40 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:54:59 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:08 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:13 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:15 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:16 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 25 15:55:18 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling > radius autz request: from switch_ip => (IP of switch), connection_type > => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => > [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" > (pf::radius::authorize) > Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status > unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) > Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of > switch) Returning ACCEPT with VLAN 207 and role > (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) > Nov 26 13:56:19 httpd.webservices(10860) WARN: Unable to perform a > Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' > (pf::fingerbank::process) > > > ------------------------------------------------------------------------------ > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ Go from Idea to Many App Stores Faster with Intel(R) XDK Give your users amazing mobile app experiences with Intel(R) XDK. Use one codebase in this all-in-one HTML5 development environment. Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs. http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140 _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
