Hello Stuart,
Le 19-04-04 à 13 h 38, Stuart Gendron via PacketFence-users a écrit :
Just getting started with PacketFence and am struggling with something.
So I'm using a Cisco SG300 as my test switch, and it does both 802.1x
and MAC address authentication (MAB).
I'm finding that once I get authenticated using 802.1x credentials I
can then pop around to other switch ports and get through without
needing to provide credentials again (I assume because the MAC address
is authenticated?).
You need to check if when you unplug/plug packetfence receive a new
radius request.
If it's not the case then it's not normal.
Also you need to see what kind of authentication is made each time, is
it 802.1x or mac auth ?
This is fine, however when I set the device to unauthorized, I don't
receive a prompt for username/password again. I believe what happens
is the MAC gets sent first, PacketFence then sets the request as
Accept, but unregistered so sends it to the appropriate VLAN, and on
the switch the state is Authenticated (as PacketFence technically
authenticated it?).
It depend how you configured packetfence, if you enable autoregistration
for 802.1x then probably your device keep the credential and retry with
them to authenticate.
If fact you need to provide more information about your pf config, like
do you register on a portal / do you autoregister, do you have a
connection profile per connection type ?
If you can resume your config it will help to understand what happen
exactly.
Thanks
Regards
Fabrice
Not sure if this makes sense.
Ideally a device would do 802.1x by default, then fall back to MAB if
needed.
--
*Stuart Gendron*
IT Support Specialist
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
[email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
