Il 29/05/2019 18:54, Enrico via PacketFence-users ha scritto:
Dear all,
after doing several tests my PF went into production state. I have got
a profile for a wifi network with radius backend
and I use a Virtual Wireless Lan Controller managed through Cisco
mobility express. Access points are Aironet 1852.
The PF server works fine but some devices remain "unregistered" after
login, while others are correctly identified as
registered, this happens even in the same access point. Reading the
log files for unregistered mac addresses I see
this message:
May 29 17:17:34 pfsrv packetfence_httpd.aaa: httpd.aaa(25466) INFO:
[mac:08:c5:e1:da:34:b0] Unable to extract MAC from Called-Station-Id:
10.21.0.1 (pf::radius::extractApMacFromRadiusRequest)
May 29 17:18:04 pfsrv packetfence_httpd.aaa: httpd.aaa(25466) INFO:
[mac:08:c5:e1:da:34:b0] handling radius autz request: from switch_ip
=> (10.21.0.1), connection_type => Wireless-802.11-EAP,switch_mac =>
(f8:4f:57:aa:1e:60), mac => [08:c5:e1:da:34:b0], port => 1, username
=> "[email protected]", ssid => INFN-dot1x (pf::radius::authorize)
do you have any ideas?
Thanks a lot !
Best Regards
my apologies, it was a mistake in my profile configuration.
The device is now registered correctly:
Status
<https://pfsrv.management:1443/node/search/1?direction=asc&by=status>
Online/Offline
<https://pfsrv.management:1443/node/search/1?direction=asc&by=online>
MAC
Address<https://pfsrv.management:1443/node/search/1?direction=desc&by=mac>
Computer Name
<https://pfsrv.management:1443/node/search/1?direction=asc&by=computername>
Owner
<https://pfsrv.management:1443/node/search/1?direction=asc&by=pid> IP
Address
<https://pfsrv.management:1443/node/search/1?direction=asc&by=last_ip>
Device Class
<https://pfsrv.management:1443/node/search/1?direction=asc&by=device_class>
SSID
<https://pfsrv.management:1443/node/search/1?direction=asc&by=last_ssid>
registered unknown 00:0a:f5:1a:b1:a8
<https://pfsrv.management:1443/node/00:0a:f5:1a:b1:a8/read?tenant_id=1>
gsilvest@domain
<https://pfsrv.management:1443/user/[email protected]/read>
10.26.1.11 Android OS dot1x
but why is it not online ?
Thanks again
Enrico
--
_______________________________________________________________________
Enrico Becchetti Servizio di Calcolo e Reti
Istituto Nazionale di Fisica Nucleare - Sezione di Perugia
Via Pascoli,c/o Dipartimento di Fisica 06123 Perugia (ITALY)
Phone:+39 075 5852777 Mail: Enrico.Becchetti<at>pg.infn.it
______________________________________________________________________
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
