Hello Fabrice, thanks for the tip. I will contact the students and see if there is a complete flow.
Regards, Hubert Am 01.12.2015 um 01:56 schrieb Durand fabrice: > Hello Hubert, > > it looks like the disconnect is working but your status is still unreg. > > Nov 25 15:45:37 httpd.webservices(10860) INFO: [30:b5:c2:ed:1b:8f] > deauthenticating (pf::Switch::Cisco::Catalyst_2960::radiusDisconnect) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling > radius autz request: from switch_ip => (IP of switch), connection_type > => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => > [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" > (pf::radius::authorize) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status > unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) > Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of > switch) Returning ACCEPT with VLAN 207 and role > (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) > > > > Do you have the complete flow when you try to register ? (like first > radius connection, captive portal, disconnection and new radius connection). > > Regards > Fabrice > > Le 2015-11-27 03:48, Hubert Kupper a écrit : >> Hi, >> >> we have Packetfence ZEN 5.3.1 installed and running well. Since a few >> weeks some students devices doesn't access the working vlan after >> registration with an message "sorry, your network should be enabled in >> one or two minutes...." it doesn't. They are in the registration vlan. >> Packetfence.log shows fingerbank warnings. >> >> The switch, it belongs to is a cisco 2960S-TL. >> >> What can I do to solve this? Any ideas? >> >> Kind regards, >> Hubert >> >> ov 25 15:45:37 httpd.webservices(10860) INFO: [30:b5:c2:ed:1b:8f] >> deauthenticating (pf::Switch::Cisco::Catalyst_2960::radiusDisconnect) >> Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling >> radius autz request: from switch_ip => (IP of switch), connection_type >> => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => >> [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" >> (pf::radius::authorize) >> Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status >> unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) >> Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of >> switch) Returning ACCEPT with VLAN 207 and role >> (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) >> Nov 25 15:54:03 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:54:40 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:54:59 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:08 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:13 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:15 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:16 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:18 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling >> radius autz request: from switch_ip => (IP of switch), connection_type >> => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => >> [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" >> (pf::radius::authorize) >> Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status >> unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) >> Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of >> switch) Returning ACCEPT with VLAN 207 and role >> (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) >> Nov 26 13:56:19 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> [root@pfence3 logs]# less packetfence.log | grep 30:b5:c2:ed:1b:8f >> Nov 25 15:45:37 httpd.webservices(10860) INFO: [30:b5:c2:ed:1b:8f] >> deauthenticating (pf::Switch::Cisco::Catalyst_2960::radiusDisconnect) >> Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling >> radius autz request: from switch_ip => (IP of switch), connection_type >> => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => >> [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" >> (pf::radius::authorize) >> Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status >> unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) >> Nov 25 15:45:37 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of >> switch) Returning ACCEPT with VLAN 207 and role >> (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) >> Nov 25 15:54:03 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:54:40 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:54:59 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:08 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:13 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:15 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:16 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 25 15:55:18 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] handling >> radius autz request: from switch_ip => (IP of switch), connection_type >> => WIRED_MAC_AUTH,switch_mac => (2c:3e:cf:20:a7:04), mac => >> [30:b5:c2:ed:1b:8f], port => 10104, username => "30b5c2ed1b8f" >> (pf::radius::authorize) >> Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] is of status >> unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan) >> Nov 26 13:56:16 httpd.aaa(10837) INFO: [30:b5:c2:ed:1b:8f] (IP of >> switch) Returning ACCEPT with VLAN 207 and role >> (pf::Switch::Cisco::Catalyst_2960::returnRadiusAccessAccept) >> Nov 26 13:56:19 httpd.webservices(10860) WARN: Unable to perform a >> Fingerbank lookup for device with MAC address '30:b5:c2:ed:1b:8f' >> (pf::fingerbank::process) >> >> >> ------------------------------------------------------------------------------ >> _______________________________________________ >> PacketFence-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/packetfence-users > > ------------------------------------------------------------------------------ > Go from Idea to Many App Stores Faster with Intel(R) XDK > Give your users amazing mobile app experiences with Intel(R) XDK. > Use one codebase in this all-in-one HTML5 development environment. > Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs. > http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140 > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users -- _____________________________________________ Hubert Kupper Universitaetsrechenzentrum in Landau Fortstrasse 7, D-76829 Landau Tel: +49 6341/28031173 Fax: +49 6341/28031267 ------------------------------------------------------------------------------ Go from Idea to Many App Stores Faster with Intel(R) XDK Give your users amazing mobile app experiences with Intel(R) XDK. Use one codebase in this all-in-one HTML5 development environment. Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs. http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140 _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
