Hello Fabrice,

 

Nicolas Quiniou-Briand already told me, that I have to apply the maintenance 
patches. 

It works now, thank you very much for your help!

 

Best regards,

Jona

 

Von: Fabrice Durand via PacketFence-users 
<packetfence-users@lists.sourceforge.net> 
Gesendet: Montag, 22. Juli 2019 15:02
An: packetfence-users@lists.sourceforge.net
Cc: Fabrice Durand <fdur...@inverse.ca>
Betreff: Re: [PacketFence-users] Configuration help for Aruba Instant 
controller needed (guest access)

 

Hello Jona,

you need to run pf-maint.pl on you system first.

Regards

Fabrice

 

Le 19-07-22 à 05 h 58, Stegmaier, Jona via PacketFence-users a écrit :

Hello,

 

thanks for your reply!

I tried the authentication with the help of roles, but nothing changed. 
Packetfence sends the role update, but the access points can’t enforce the VLAN 
change.

The only error message, that Packetfence creates, you can find in the last 
line: 

 

Jul 22 11:04:31 packetfence packetfence_httpd.portal: httpd.portal(24693) INFO: 
[mac:ac:7b:a1:55:25:9e] User default has authenticated on the portal. 
(Class::MOP::Class:::after)

Jul 22 11:04:31 packetfence packetfence_httpd.portal: httpd.portal(24693) WARN: 
[mac:ac:7b:a1:55:25:9e] Unknown network type for network 10.82.51.0 
(pf::config::get_network_type)

Jul 22 11:04:31 packetfence packetfence_httpd.portal: httpd.portal(24693) INFO: 
[mac:ac:7b:a1:55:25:9e] re-evaluating access (manage_register called) 
(pf::enforcement::reevaluate_access)

Jul 22 11:04:31 packetfence packetfence_httpd.portal: httpd.portal(24693) INFO: 
[mac:ac:7b:a1:55:25:9e] VLAN reassignment is forced. 
(pf::enforcement::_should_we_reassign_vlan)

Jul 22 11:04:31 packetfence packetfence_httpd.portal: httpd.portal(24693) INFO: 
[mac:ac:7b:a1:55:25:9e] switch port is (10.82.50.167) ifIndex unknown 
connection type: WiFi MAC Auth (pf::enforcement::_vlan_reevaluation)

Jul 22 11:04:32 packetfence pfqueue: pfqueue(28927) INFO: 
[mac:ac:7b:a1:55:25:9e] [ac:7b:a1:55:25:9e] DesAssociating mac on switch 
(10.82.50.167) (pf::api::desAssociate)

Jul 22 11:04:32 packetfence pfqueue: pfqueue(28927) INFO: 
[mac:ac:7b:a1:55:25:9e] [10.82.50.167] Returning ACCEPT with role: -test- 
(pf::Switch::Aruba::Instant_Access::radiusDisconnect)

Jul 22 11:04:32 packetfence pfqueue: pfqueue(28927) ERROR: 
[mac:ac:7b:a1:55:25:9e] Error handling desAssociate : Undefined subroutine 
&pf::Switch::Aruba::Instant_Access::perform_coa called at 
/usr/local/pf/lib/pf/Switch/Aruba/Instant_Access.pm line 81.

 

Best regards,

Jona

 

Von: G PL via PacketFence-users  
<mailto:packetfence-users@lists.sourceforge.net> 
<packetfence-users@lists.sourceforge.net> 
Gesendet: Samstag, 20. Juli 2019 23:29
An: packetfence-users@lists.sourceforge.net 
<mailto:packetfence-users@lists.sourceforge.net> 
Cc: G PL  <mailto:poubellea...@gmail.com> <poubellea...@gmail.com>
Betreff: Re: [PacketFence-users] Configuration help for Aruba Instant 
controller needed (guest access)

 

Hello, 

In my setup, I'm sending role to the iap and not using coa. The iap translate 
role to vlan. 

You need the register and guest role. 

Regards

Le vendredi 19 juillet 2019, Stegmaier, Jona via PacketFence-users 
<packetfence-users@lists.sourceforge.net 
<mailto:packetfence-users@lists.sourceforge.net> > a écrit :

Hi all,

 

I try to configure a guest access (WLAN) with our Packetfence v9 system and our 
Aruba Instant Virtual Controller (Version 6.5.4) / 305 Access Points.

The steps of the official support document refer to an older version of Aruba 
Instant, so I want to ask, if anybody uses the Aruba Version 6 and can tell me, 
how to configure the Aruba controller. 

 

I tried an configuration, but the process fails, when Packetfence tries to 
enforce the guest VLAN. (no VLAN change is made). 

On the packetfence side, CoA is enabled (and all the necessary VLAN roles). 

 

 

Thanks and best regards,
Jona

 

-- 

Jona Stegmaier

Fraunhofer-Institut für Physikalische Messtechnik IPM; ITK 

Heidenhofstr. 8, 79110 Freiburg, Germany 
<https://www.google.com/maps/search/Heidenhofstr.+8,+79110+Freiburg,+Germany?entry=gmail&source=g>
  

Phone +49 761 8857-132,  <mailto:jona.stegma...@ipm.fraunhofer.de> 
jona.stegma...@ipm.fraunhofer.de

 <https://www.ipm.fraunhofer.de> https://www.ipm.fraunhofer.de

 






_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net 
<mailto:PacketFence-users@lists.sourceforge.net> 
https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fdur...@inverse.ca <mailto:fdur...@inverse.ca>  ::  +1.514.447.4918 (x135) ::  
www.inverse.ca <http://www.inverse.ca> 
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to