Hi Ian,
I think it's all about the hostapd.sh script on the openwrt.
We use packetfence with a custom openwrt firmware based on Barrier Breaker
(14.07) and we had to replace the hostapd.sh to enable radius-based MAC-auth on
open SSID.
If you edit the original hostapd.sh provided by openwrt, you will see that all
the radius configuration is not used when there is no encryption protocol.
You should probably use the hostapd.sh provided by packetfence
(https://github.com/inverse-inc/packetfence/blob/devel/addons/hostapd/hostapd-14.07.sh)
and try to make it work with openwrt 15.05.
hope this help.
----- Mail original -----
> De: "Ian MacDonald" <[email protected]>
> À: [email protected]
> Envoyé: Lundi 29 Février 2016 23:26:58
> Objet: [PacketFence-users] PF 5.7 / Hostapd - Progess w/ 2 Radius
> Questions
> Further to our last post, we are trying to get Packetfence working
> with OpenWRT 15.05 hostapd.
> We have read all the following sources in addition to Google and
> Mailing List searches on information related to Hostapd integration:
> PacketFence_Administration_Guide-5.7.0.pdf
> PacketFence_Network_Devices_Configuration_Guide-5.7.0.pdf
> PacketFence_Inline_Deployment_Quick_Guide_ZEN-5.7.0.pdf
> PacketFence_OpenWrt-Hostapd_Quick_Install_Guide.asciidoc
> OpenWRT Dynamic VLAN Hostapd Explanation
> In our recent post to the list we had a number of questions related
> to the correct configuration of OpenWRT to get dynamic vlans working
> with Packetfence. These were answered on the OpenWRT Dynamic VLAN
> wiki page referenced in Earl Robinson's post , linked above.
> We are at the point where a RADIUS Session is established between
> OpenWRT and Packetfence for secure SSIDs, but nothing is happening
> when connecting clients to our open SSID.
> Q1) Does OpenWRT setup a Radius connection for the open SSIDs? (we
> think it should)
> Q2) Do we need to pre-bind the open SSIDs to the registration VLAN
> (we don't think so, and expect hostapd to do that with a
> Tunnel-Private-Group-ID parameter via radius)
> We are expecting a radius session for the open SSID to program
> OpenWRT with the registration vlan, however we are seeing no
> activity, and it appears that radius is only being setup for the
> secure SSIDs.
> (...)
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
