Re: [PacketFence-users] Issue Using vlan_filters.conf

Tue, 13 Nov 2018 20:05:16 -0800 

Ok found it.

it's 100$ ! ;-)
the unit test must be unique (like polycom_phones , security_cameras) but the rules too (you have 2 autoreg). 

My best practice is to use integer for the rules.

So try that:

[polycom_phones]
filter = node_info.mac
operator = regex
value = ^(00:04:f2|64:16:7f).*

[autoreg1:polycom_phones]
scope = IsPhone
role = voice

[security_cameras]
filter = node_info.mac
operator = regex
value = ^(18:68:cb|28:57:be|44:19:b6|44:47:cc|4c:bd:8f|54:c4:15|58:03:fb|64:db:8b|94:e1:ac|a4:14:37|b4:a3:82|bc:ad:28|c0:56:e3|c4:2f:90|f8:4d:fc).* 

[autoreg2:security_cameras]
scope = AutoRegister
role = Security

[info_security_autoreg:security_cameras]
scope = NodeInfoForAutoReg
role = Security

[2:security_cameras]
scope = RegisteredRole
role = Security
action = modify_node
action_param = mac = $mac, unregdate = 2030-12-0923:59:59

Regards

Fabrice


Le 18-11-13 à 22 h 51, Matthew Knott a écrit :


Yep,

[polycom_phones]

filter = node_info.mac

operator = regex

value = ^(00:04:f2|64:16:7f).*

[autoreg:polycom_phones]

scope = IsPhone

role = voice

[security_cameras]

filter = node_info.mac

operator = regex
value = ^(18:68:cb|28:57:be|44:19:b6|44:47:cc|4c:bd:8f|54:c4:15|58:03:fb|64:db:8b|94:e1:ac|a4:14:37|b4:a3:82|bc:ad:28|c0:56:e3|c4:2f:90|f8:4d:fc).* 

[autoreg:security_cameras]

scope = AutoRegister

role = Security

[info_security_autoreg:security_cameras]

scope = NodeInfoForAutoReg

role = Security

[2:security_cameras]

scope = RegisteredRole

role = Security

action = modify_node

action_param = mac = $mac, unregdate = 2030-12-0923:59:59

Thanks

Matthew

Matthew Knott
IT Network & Security Administrator
E. [email protected] <mailto:[email protected]>
JBS Australia <http://www.jbssa.com.au/>          
T.      07 3810 2269
M.      0477733185
F.      07 3816 0535

JBS Australia
1 Lock Way, Riverview QLD 4303
P.O. Box 139 Booval Qld 4304
jbssa.com.au <http://www.jbssa.com.au/> . LinkedIn <https://www.linkedin.com/company/jbs-australia> 

*From:*Durand fabrice [mailto:[email protected]]
*Sent:* Wednesday, 14 November 2018 1:49 PM
*To:* Matthew Knott <[email protected]>; [email protected] 
*Subject:* Re: [PacketFence-users] Issue Using vlan_filters.conf

Can you paste your current vlan_filters.conf ?

Le 18-11-13 à 22 h 38, Matthew Knott a écrit :

    Thanks Durand,

    Tried that as well,   Still not working .

    Matthew

    *Matthew Knott*

    /IT Network & Security Administrator/

    E. [email protected] <mailto:[email protected]>

    JBS Australia <http://www.jbssa.com.au/>

        

        

    T.

        

    07 3810 2269

    M.

        

    0477733185

    F.

        

    07 3816 0535

    JBS Australia

    1 Lock Way, Riverview QLD 4303

    P.O. Box 139 Booval Qld 4304

    jbssa.com.au <http://www.jbssa.com.au/>  . LinkedIn
    
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.linkedin.com_company_jbs-2Daustralia&d=DwMG-g&c=jqwZe_OwGxSy4yeji7eFFqcsG878Cbd3UT_ajroT5ho&r=iKyh1_LIxSAp0ekUXDh5LZq2hvWIOLBx4lDTG_VdVHY&m=kI7FWFGnLl4Ka-npMdThqFkif4m9Xrkysi_ZdMLepXk&s=1Y3d65o6ubGH9XK8XK8mWdhFPkxkL6xEBTvzn1w4D7s&e=>

    *From:*Durand fabrice via PacketFence-users
    [mailto:[email protected]]
    *Sent:* Wednesday, 14 November 2018 1:04 PM
    *To:* [email protected]
    <mailto:[email protected]>
    *Cc:* Durand fabrice <[email protected]> <mailto:[email protected]>
    *Subject:* Re: [PacketFence-users] Issue Using vlan_filters.conf

    Hello Matthew,

    try to define the mac address in lower case.

    That :

    [polycom_phones]

    filter = node_info.mac

    operator = regex

    value = ^(00:04:f2|64:16:7f).*

    instead of that:

    [polycom_phones]

    filter = node_info.mac

    operator = regex

    value = ^(00:04:F2|64:16:7f).*

    etc ...

    Regards

    Fabrice

    Le 18-11-13 à 20 h 38, Matthew Knott via PacketFence-users a écrit :

        Hi All,  Further to this,  Looks as tho the only reason that the Polycom Phones 
are working is because the RADIUS server is replying with a Cisco-AVPair = 
"device-traffic-class=voice" and so the Switch is putting it into the Voice 
Vlan.


        matthew


        Matthew Knott

        IT Network & Security Administrator

        [email protected]  
<mailto:[email protected]><mailto:[email protected]>  
<mailto:[email protected]>


        [JBS Australia]<http://www.jbssa.com.au/>  <http://www.jbssa.com.au/>

        T.      07 3810 2269

        M.      0477733185

        F.      07 3816 0535


        JBS Australia

        1 Lock Way, Riverview QLD 4303

        P.O. Box 139 Booval Qld 4304


        jbssa.com.au<http://www.jbssa.com.au/>  <http://www.jbssa.com.au/>   .  
LinkedIn<https://www.linkedin.com/company/jbs-australia>  
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.linkedin.com_company_jbs-2Daustralia&d=DwMG-g&c=jqwZe_OwGxSy4yeji7eFFqcsG878Cbd3UT_ajroT5ho&r=iKyh1_LIxSAp0ekUXDh5LZq2hvWIOLBx4lDTG_VdVHY&m=dZTTSwku9FbkqNFCnF27-uZ9RGCvmru9mlPjB0FFcT0&s=QM8_rjNk0NBX0fnqRB4HHEKyFpVVqxb9zAlAY8Mb7y0&e=>


        -----Original Message-----

        From: Nicolas Quiniou-Briand via PacketFence-users 
[mailto:[email protected]]

        Sent: Tuesday, 13 November 2018 10:07 PM

        To:[email protected]  
<mailto:[email protected]>

        Cc: Nicolas Quiniou-Briand<[email protected]>  <mailto:[email protected]>

        Subject: Re: [PacketFence-users] Issue Using vlan_filters.conf


        Hi Matthew,


        Just to be sure to understand: you didn't succeed to auto-register your 
Polycom VoIP phones ?


        In the packetfence.log you pasted, MAC address doesn't belong to a 
Polycom device. Could you paste log for a Polycom device ?

        --

        Nicolas Quiniou-Briand

        [email protected]  <mailto:[email protected]>   ::  +1.514.447.4918 *140  
::https://urldefense.proofpoint.com/v2/url?u=https-3A__inverse.ca&d=DwICAg&c=jqwZe_OwGxSy4yeji7eFFqcsG878Cbd3UT_ajroT5ho&r=iKyh1_LIxSAp0ekUXDh5LZq2hvWIOLBx4lDTG_VdVHY&m=fg84R87gr8ZGj04OoPoH7uLJIbbN8I_YxSiVJVfJ3DQ&s=bGG1StkzfBP04MNBSe-rouHx7oi3CrCyt93g-vDJ4Gk&e=

        Inverse inc. :: Leaders behind SOGo 
(https://urldefense.proofpoint.com/v2/url?u=https-3A__sogo.nu&d=DwICAg&c=jqwZe_OwGxSy4yeji7eFFqcsG878Cbd3UT_ajroT5ho&r=iKyh1_LIxSAp0ekUXDh5LZq2hvWIOLBx4lDTG_VdVHY&m=fg84R87gr8ZGj04OoPoH7uLJIbbN8I_YxSiVJVfJ3DQ&s=Xx8bf2Ypz3K3E7AY6qJnuXCdQHizuQxTf08SNGrp4mo&e=),
 PacketFence

        
(https://urldefense.proofpoint.com/v2/url?u=https-3A__packetfence.org&d=DwICAg&c=jqwZe_OwGxSy4yeji7eFFqcsG878Cbd3UT_ajroT5ho&r=iKyh1_LIxSAp0ekUXDh5LZq2hvWIOLBx4lDTG_VdVHY&m=fg84R87gr8ZGj04OoPoH7uLJIbbN8I_YxSiVJVfJ3DQ&s=JFmfrzKUkn4wpJXv9IT1dD_SGD6sQEFKFi562nFbuUI&e=)
 and Fingerbank 
(https://urldefense.proofpoint.com/v2/url?u=http-3A__fingerbank.org&d=DwICAg&c=jqwZe_OwGxSy4yeji7eFFqcsG878Cbd3UT_ajroT5ho&r=iKyh1_LIxSAp0ekUXDh5LZq2hvWIOLBx4lDTG_VdVHY&m=fg84R87gr8ZGj04OoPoH7uLJIbbN8I_YxSiVJVfJ3DQ&s=igxCEgc_dlH2zk0FsNNUJmIVpOaI6lvB07d49cRDw9c&e=)


        _______________________________________________

        PacketFence-users mailing list

        [email protected]  
<mailto:[email protected]>

        
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_packetfence-2Dusers&d=DwICAg&c=jqwZe_OwGxSy4yeji7eFFqcsG878Cbd3UT_ajroT5ho&r=iKyh1_LIxSAp0ekUXDh5LZq2hvWIOLBx4lDTG_VdVHY&m=fg84R87gr8ZGj04OoPoH7uLJIbbN8I_YxSiVJVfJ3DQ&s=TSfETrWWdyXw6b28jDKWh9ThhXuNVgPkPX-w3RiG6DE&e=

        ________________________________


        Important Notice:


        The contents of this electronic message and any attachments are 
intended only for the addressee and may contain legally privileged or 
confidential information. They may be only used for the purposes for which they 
were supplied. If you are not the addressee, you are notified that any 
transmission, distribution, downloading, printing or photocopying of the 
contents of this message or attachments is strictly prohibited. Any privilege 
and/or confidentiality attached to this message and attachments is not waived, 
lost or destroyed by reason of mistaken delivery to you. If you have received 
this message in error you should notify the sender by return e-mail or 
telephone +61 7 3810 2100, and destroy all copies of the message and any 
attachments.






        _______________________________________________

        PacketFence-users mailing list

        [email protected]  
<mailto:[email protected]>

        https://lists.sourceforge.net/lists/listinfo/packetfence-users  
<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_packetfence-2Dusers&d=DwMG-g&c=jqwZe_OwGxSy4yeji7eFFqcsG878Cbd3UT_ajroT5ho&r=iKyh1_LIxSAp0ekUXDh5LZq2hvWIOLBx4lDTG_VdVHY&m=dZTTSwku9FbkqNFCnF27-uZ9RGCvmru9mlPjB0FFcT0&s=1IS9nCFvY9gm4HvcxkWHEa6BqowlXQdBY54GiKdfZKs&e=>

    ------------------------------------------------------------------------


    Important Notice:

    The contents of this electronic message and any attachments are
    intended only for the addressee and may contain legally privileged
    or confidential information. They may be only used for the
    purposes for which they were supplied. If you are not the
    addressee, you are notified that any transmission, distribution,
    downloading, printing or photocopying of the contents of this
    message or attachments is strictly prohibited. Any privilege
    and/or confidentiality attached to this message and attachments is
    not waived, lost or destroyed by reason of mistaken delivery to
    you. If you have received this message in error you should notify
    the sender by return e-mail or telephone +61 7 3810 2100, and
    destroy all copies of the message and any attachments.

------------------------------------------------------------------------


Important Notice:
The contents of this electronic message and any attachments are intended only for the addressee and may contain legally privileged or confidential information. They may be only used for the purposes for which they were supplied. If you are not the addressee, you are notified that any transmission, distribution, downloading, printing or photocopying of the contents of this message or attachments is strictly prohibited. Any privilege and/or confidentiality attached to this message and attachments is not waived, lost or destroyed by reason of mistaken delivery to you. If you have received this message in error you should notify the sender by return e-mail or telephone +61 7 3810 2100, and destroy all copies of the message and any attachments. 


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users






















					Reply via email to