I solved the VLAN issue.
On the xen hypervisor, you have to use a custom script (during loading of
the vm), which sets the proper VLANs fort he PF vm. (see /etc/xen/scripts)
using open-vswitch.
More specifically, I changed
do_or_die ovs-vsctl --timeout=30 \
-- --if-exists del-port $dev \
-- add-port "$bridge" $dev $tag_arg $trunk_arg $vif_details
into
do_or_die ovs-vsctl --timeout=30 \
-- --if-exists del-port $dev \
-- add-port "$bridge" $dev $tag_arg $trunk_arg $vif_details \
-- set port $dev vlan_mode=native-untagged tag=1
JG
> -----Oorspronkelijk bericht-----
> Van: frm frm [mailto:[email protected]]
> Verzonden: maandag 6 juni 2016 20:26
> Aan: [email protected]
> Onderwerp: Re: [PacketFence-users] Installation problems with PF 6 on
> debian jessie
>
> > Did you experienced this with the latest version (6.0.3)? I tried a
> > fresh
> install
> > on Jessie and did not experienced this issue.
> Yes, 6.0.3.
> I must say I created the xen vm using xen-create-image which seems to
> install only the bare minimum debian jessie.
> >
> > Although I am running this VM host on vmware.
> >
> > Did you see any error when installing packetfence?
> >
> > apt-get install libswitch-perl
> >
> > Can you give us the version of libswitch-perl installed?
> 2.17-2
> >
> > After installing libswitch-perl manually, was packetfence able to
> > start
> the
> > httpd process by itself with a systemctl start packetfence, if not was
> > it
> the
> > same error?
> A bit weird.
> First time, it did not start automatically.
> Once I completed the installation wizard, it starts automatically.
> At least, I have now a management interface.
>
> >
> > Any luck in /usr/local/pf/logs/httpd.admin.{log/error} when the you
> > lost
> your
> > connection while adding vlan?
> My guess is that something is wrong with the VLAN setup.
> I can not ping any vlan interface, except vlan interface, which is
untagged.
> The cause can either be on the hypervisor side or on the PF vm side.
>
> At the hypervisor side, the vlan setup is at follows:
> Port "vif27.0"
> tag: 1
> trunks: [12, 13, 20, 30, 40, 50, 60]
> Interface "vif27.0"
>
> At the PF side, the VLAN is generated by the wizard and is it follows:
> auto lo
> iface lo inet loopback
>
> auto eth0
> iface eth0 inet static
> address 192.168.1.11
> netmask 255.255.255.0
> gateway 192.168.1.1
>
> auto eth0.12
> iface eth0.12 inet static
> address 192.168.12.11
> netmask 255.255.255.0
>
>
> auto eth0.13
> iface eth0.13 inet static
> address 192.168.13.11
> netmask 255.255.255.0
>
>
> auto eth0.20
> iface eth0.20 inet static
> address 192.168.20.45
> netmask 255.255.255.0
>
>
> auto eth0.40
> iface eth0.40 inet static
> address 192.168.40.45
> netmask 255.255.255.0
>
>
> auto eth0.50
> iface eth0.50 inet static
> address 192.168.50.45
> netmask 255.255.255.0
>
> Is this correct?
>
> Best,
>
> JG
>
> >
> > However, all the services start, except httpd.portal.
> >
> > Anything in /usr/local/pf/logs/httpd.portal... or
> > /usr/local/pf/logs/packetfence.log ?
> >
> > By the way: what should be filled in at the virtual IP field?
> >
> > This is in case you want to use a VIP, to setup a cluster for instance.
> >
> > Thank you
> >
> > On 06/05/2016 03:21 PM, frm frm wrote:
> > > Hi,
> > >
> > > I experience problems with installing packetfence 6 on debian jessie:
> > > A vanilla debian jessie is used on a vm with VLAN 1 untagged and the
> > > other VLANs as trunk.
> > > The vm host runs open-vswitch and xen.
> > >
> > > 1. Installation
> > > In addition to a vanilla debian guest, I installed:
> > > - vlan package
> > > - bridge-utils package
> > >
> > > After installation of packetfence 6 with apt-get, Apache does not
> > > start correctly. It starts, but after a few seconds stops.
> > > If I start Apache manually with
> > >
> > > /usr/sbin/apache2 -f /usr/local/pf/var/conf/httpd.conf.d/httpd.admin
> > > -Ddebian &
> > >
> > > the following error is raised:
> > > AH00526: Syntax error on line 104 of
> > > /usr/local/pf/var/conf/httpd.conf.d/httpd.admin:
> > > Can't locate Switch.pm in @INC (you may need to install the Switch
> > > module) (@INC contains: /usr/local/pf/html/captive-portal/lib
> > > /usr/local/pf/conf /usr/local/fingerbank/lib /usr/local/pf/lib
> > > /usr/local/pf/html/pfappserver/lib /etc/perl
> > > /usr/local/lib/x86_64-linux-gnu/perl/5.20.2
> > > /usr/local/share/perl/5.20.2
> > > /usr/lib/x86_64-linux-gnu/perl5/5.20 /usr/share/perl5
> > > /usr/lib/x86_64-linux-gnu/perl/5.20 /usr/share/perl/5.20
> > > /usr/local/lib/site_perl . /etc/apache2) at
> > > /usr/local/pf/html/pfappserver/lib/pfappserver/PacketFence/Controlle
> > > r/ Violat ion.pm line 29.\nBEGIN failed--compilation aborted at
> > > /usr/local/pf/html/pfappserver/lib/pfappserver/PacketFence/Controlle
> > > r/ Violat ion.pm line 29.\nCompilation failed in require at
> > > /usr/share/perl5/Module/Runtime.pm line 317.\nBEGIN
> > > failed--compilation aborted at
> > > /usr/local/pf/html/pfappserver/lib/pfappserver/Controller/Violation.
> > > pm line 15.\nCompilation failed in require at
> > > /usr/share/perl5/Catalyst/Utils.pm
> > > line 308.\nCompilation failed in require at (eval 2) line 2.\n
> > >
> > > No web-wizard of course.
> > >
> > > After
> > > apt-get install libswitch-perl
> > > apache starts, although manually.
> > >
> > > 2. Web wizard crashes on adding a number of VLANs If I add VLANs in
> > > the first step of the wizard, the first three VLANs go well, but the
> > > fifth VLAN results in a full disconnect of the machine (not pingable
> > > anymore via one of the management VLAN 1).To my understanding, I
> > > entered the fifth VLAN the same as with VLAN four, only a different
> > > subnet. My vlan setup:
> > > - VLAN 1: offered untagged on the vm host
> > > - VLAN 12: Registration
> > > - VLAN 13: Isolation
> > > - VLAN 20: Other
> > > - VLAN 30: Other
> > > Network connectivity tot the packetfence host is lost on adding VLAN
30.
> > >
> > > By the way: what should be filled in at the virtual IP field?
> > >
> > > 3. Web wizard does not complete
> > > After only filling in a few VLANs (those for registration and
> > > isolation), the wizard continues until the last step, which should
> > > start
> the
> > services.
> > > However, all the services start, except httpd.portal.
> > > Because the wizard does not finalize, I can not access the
> > > management portal. If I try do so, the wizard starts from the
beginning.
> > >
> > > Help would be appreciated.
> > >
> > > Best,
> > >
> > > -- JG
> > >
> > >
> > > --------------------------------------------------------------------
> > > --
> > > -------- What NetFlow Analyzer can do for you? Monitors network
> > > bandwidth and traffic patterns at an interface-level. Reveals which
> > > users, apps, and protocols are consuming the most bandwidth.
> > > Provides multi-vendor support for NetFlow, J-Flow, sFlow and other
> > > flows. Make informed decisions using capacity planning reports.
> > > https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> > > _______________________________________________
> > > PacketFence-users mailing list
> > > [email protected]
> > > https://lists.sourceforge.net/lists/listinfo/packetfence-users
> >
> > --
> > Antoine Amacher
> > [email protected] :: +1.514.447.4918 *130 :: www.inverse.ca
> > Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
> > (www.packetfence.org)
> >
> >
> >
>
----------------------------------------------------------------------------
> --
> > What NetFlow Analyzer can do for you? Monitors network bandwidth and
> > traffic patterns at an interface-level. Reveals which users, apps, and
> > protocols
> are
> > consuming the most bandwidth. Provides multi-vendor support for
> > NetFlow, J-Flow, sFlow and other flows. Make informed decisions using
> > capacity planning reports.
> > https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> > _______________________________________________
> > PacketFence-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
----------------------------------------------------------------------------
--
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic patterns at an interface-level. Reveals which users, apps, and
> protocols are consuming the most bandwidth. Provides multi-vendor support
> for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using
> capacity planning reports.
> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
