Hello,
Good news.
There are a problem in packetfence/Cisco with Filter-Id atrribute (AVS).
Cisco do not accept character "." at Filter-Id atrribute.
Troubleshooting:
modify file lib/pf/Switch/Cisco/Catalyst_2960.pm and delete ".in" at
this sentence.
Return the specific role attribute of the switch.
=cut
sub returnRoleAttributes {
my ($self, $role) = @_;
return ($self->returnRoleAttribute() => $role.".in");
El 02/01/2017 a las 14:41, ROMEN QUINTANA MARTÍNEZ escribió:
>
> Hi,
>
>
> I?m trying to configure dot1x/mab witch Packetfence and Cisco 2960. I
> can configurate an auto-register node with dot1x but the mab fail at the
> authorization, the switch drop the cisco port.
>
> I would like to assign the vlan register and launch the packetfence
> portal with mab authentication.
>
>
> Any idea?
>
>
> #show authentication sessions int fastEthernet 0/1
> Interface: FastEthernet0/1
> MAC Address: 3c97.0e97.d496
> IP Address: Unknown
> User-Name: 3c970e97d496
> Status: Authz Failed
> Domain: DATA
> Oper host mode: multi-domain
> Oper control dir: both
> Authorized By: Authentication Server
> Vlan Policy: N/A
> Session timeout: 10800s (local), Remaining: 10659s
> Timeout action: Reauthenticate
> Idle timeout: N/A
> Common Session ID: 0A91AF85000000190093EAF6
> Acct Session ID: 0x00000021
> Handle: 0x1D00001A
>
> Runnable methods list:
> Method State
> mab Authc Success
> dot1x Not run
> -------------
>
> Jan 2 11:38:25: %AUTHMGR-7-RESULT: Authentication result 'success' from
> 'mab' for client (3c97.0e97.d496) on Interface Fa0/1 AuditSessionID
> 0A91AF85000000190093EAF6
> Jan 2 11:38:25: %AUTHMGR-5-VLANASSIGN: VLAN 997 assigned to Interface
> Fa0/1 AuditSessionID 0A91AF85000000190093EAF6
> Jan 2 11:38:25: %AUTHMGR-5-FAIL: Authorization failed or unapplied for
> client (3c97.0e97.d496) on Interface Fa0/1 AuditSessionID
> 0A91AF85000000190093EAF6
> Jan 2 11:38:25: %AUTHMGR-5-SUCCESS: Authorization succeeded for client
> (3c97.0e97.d496) on Interface Fa0/1 AuditSessionID
> 0A91AF85000000190093EAF6
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
