I am running version 9.0.1 on Debian 9.9 and had setup sponsor auth for the guest network on Aruba IAP virtual controller.
It initially gave me the signup page and allowed me to sponsor an email user. However after that worked I got mac deauth errors and an article in the mailing list archives said to run pf-maint.pl twice from addons. I did this but I still get those errors along with CoA errors. I have tried to disabled CoA, I also changed the port to 5999 but neither has any effect even after reboot of PF it still tries to use port 3799 for CoA and states the server is either unavailable or using the wrong key. This can't be the case because it works for employee access as long as I ignore the certs because pki is not yet properly configured. Hopefully I have missed something simple any suggestions are appreciated. I know this isn't the same setup as the Network Devices Configuration Guide but I think it should work. This is my Aruba IAP config wlan access-rule packetfence index 8 rule 10.11.8.37 255.255.255.255 match app http permit rule 10.11.8.37 255.255.255.255 match app https permit rule any any match app dns permit rule any any match any any any deny wlan access-rule test-guest index 9 rule 10.11.8.37 255.255.255.255 match app http permit rule 10.11.8.37 255.255.255.255 match app https permit rule any any match app dhcp permit rule 8.8.8.8 255.255.255.255 match app dns permit rule 192.168.0.0 255.255.0.0 match any any any deny rule 172.16.0.0 255.240.0.0 match any any any deny rule 10.0.0.0 255.0.0.0 match any any any deny rule any any match any any any permit wlan ssid-profile test-guest enable index 4 type guest essid test-guest opmode opensystem max-authentication-failures 0 vlan 306 auth-server packetfence set-role-pre-auth packetfence rf-band all captive-portal external profile guest mac-authentication-delimiter : dtim-period 1 broadcast-filter arp radius-reauth-interval 480 radius-accounting dmo-channel-utilization-threshold 90 local-probe-req-thresh 0 max-clients-threshold 64 auth-survivability cache-time-out 24 wlan auth-server packetfence ip 10.11.8.37 port 1812 acctport 1813 timeout 10 retry-count 5 key blablabla nas-ip 172.28.5.250 rfc3576 cppm-rfc3576-port 3799 wlan external-captive-portal guest server 10.11.8.37 port 80 url "/signup" auth-text "" server-offload switch-ip This is the switch config group=AIP SNMPCommunityRead=sh0wme always_trigger=1 VlanMap=N registrationRole=registration defaultAccessList=default deauthMethod=RADIUS SNMPVersion=2c RoleMap=Y description=Aruba Instant Access Points ExternalPortalEnforcement=Y guestUrl=http://pf-poc.aws.gbst.net/Aruba::Instant_Access coaPort=3799 guestRole=test-guest UrlMap=Y type=Aruba::Instant_Access SNMPCommunityTrap=sh0wme SNMPVersionTrap=2c cliPwd=SlyF0x. cliUser=admin controllerIp=172.28.5.250 #SNMPVersion = 3 #SNMPEngineID = 0000000000000 #SNMPUserNameRead = readUser #SNMPAuthProtocolRead = MD5 #SNMPAuthPasswordRead = authpwdread #SNMPPrivProtocolRead = DES #SNMPPrivPasswordRead = privpwdread #SNMPUserNameWrite = writeUser #SNMPAuthProtocolWrite = MD5 #SNMPAuthPasswordWrite = authpwdwrite #SNMPPrivProtocolWrite = DES #SNMPPrivPasswordWrite = privpwdwrite #SNMPVersionTrap = 3 #SNMPUserNameTrap = readUser #SNMPAuthProtocolTrap = MD5 #SNMPAuthPasswordTrap = authpwdread #SNMPPrivProtocolTrap = DES #SNMPPrivPasswordTrap = privpwdread [192.168.1.0/24] description=Test Range Switch type=Cisco::Catalyst_2900XL mode=production uplink=23,24 VoIPLLDPDetect=N [group AIP] VlanMap=N deauthMethod=RADIUS radiusSecret=packetfence always_trigger=1 type=Aruba::Instant_Access description=Aruba Instant Access Points defaultRole=gbst-test guestRole=gbst-guest coaPort=3799 ExternalPortalEnforcement=Y These are the logs root@ip-10-11-8-37:/usr/local/pf/logs# tail -fn 20 packetfence.log Aug 23 08:42:06 ip-10-11-8-37 packetfence: INFO pfperl-api(633): Worker 1230 started (Mojo::Server::Prefork::_spawn) Aug 23 08:42:06 ip-10-11-8-37 packetfence: INFO pfperl-api(633): Worker 1233 started (Mojo::Server::Prefork::_spawn) Aug 23 08:42:06 ip-10-11-8-37 packetfence: INFO pfperl-api(633): Creating process id file "/usr/local/pf/var/run/pfperl-api.pid" (Mojo::Server::Prefork::ensure_pid_file) Aug 23 08:42:06 ip-10-11-8-37 packetfence: INFO pfperl-api(633): Worker 1236 started (Mojo::Server::Prefork::_spawn) Aug 23 08:42:18 ip-10-11-8-37 packetfence: INFO -e(1200): generating /usr/local/pf/var/conf/ssl-certificates.conf (pf::services::manager::httpd::generateCommonConfig) Aug 23 08:42:18 ip-10-11-8-37 packetfence: INFO -e(1200): generating /usr/local/pf/var/conf/captive-portal-common (pf::services::manager::httpd::generateCommonConfig) Aug 23 08:42:45 ip-10-11-8-37 pfqueue: pfqueue(1360) WARN: [mac:88:40:3b:25:ac:45] Unable to match MAC address to IP '172.28.6.2' (pf::ip4log::ip2mac) Aug 23 08:42:48 ip-10-11-8-37 pfqueue: pfqueue(1360) INFO: [mac:unknown] Device nova 3i is a Android OS (pf::fingerbank::__ANON__) Aug 23 08:42:48 ip-10-11-8-37 pfqueue: pfqueue(1360) WARN: [mac:88:40:3b:25:ac:45] Unable to pull accounting history for device 88:40:3b:25:ac:45. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) Aug 23 08:42:56 ip-10-11-8-37 pfqueue: pfqueue(1362) WARN: [mac:88:40:3b:25:ac:45] Unable to pull accounting history for device 88:40:3b:25:ac:45. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) Aug 23 08:43:07 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1610) INFO: [mac:88:40:3b:25:ac:45] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:43:16 ip-10-11-8-37 pfqueue: pfqueue(1363) INFO: [mac:unknown] Device nova is a Android OS (pf::fingerbank::__ANON__) Aug 23 08:43:16 ip-10-11-8-37 pfqueue: pfqueue(1363) WARN: [mac:88:40:3b:25:ac:45] Unable to pull accounting history for device 88:40:3b:25:ac:45. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) Aug 23 08:43:28 ip-10-11-8-37 packetfence: INFO -e(1713): generating /usr/local/pf/var/conf/ssl-certificates.conf (pf::services::manager::httpd::generateCommonConfig) Aug 23 08:43:28 ip-10-11-8-37 packetfence: INFO -e(1713): generating /usr/local/pf/var/conf/captive-portal-common (pf::services::manager::httpd::generateCommonConfig) Aug 23 08:43:44 ip-10-11-8-37 packetfence: INFO -e(1768): generating /usr/local/pf/var/conf/snmptrapd.conf (pf::services::manager::snmptrapd::generateConfig) Aug 23 08:43:54 ip-10-11-8-37 packetfence: INFO -e(1831): generating /usr/local/pf/var/conf/ssl-certificates.conf (pf::services::manager::httpd::generateCommonConfig) Aug 23 08:43:54 ip-10-11-8-37 packetfence: INFO -e(1831): generating /usr/local/pf/var/conf/captive-portal-common (pf::services::manager::httpd::generateCommonConfig) Aug 23 08:45:19 ip-10-11-8-37 packetfence: INFO -e(2029): generating /usr/local/pf/var/conf/snmptrapd.conf (pf::services::manager::snmptrapd::generateConfig) Aug 23 08:45:19 ip-10-11-8-37 packetfence: INFO -e(2029): generating /usr/local/pf/var/conf/snmptrapd.conf (pf::services::manager::snmptrapd::generateConfig) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:20 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:21 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1615) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(2171) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(2171) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(2171) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(2171) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(1362) WARN: [mac:30:07:4d:74:4c:55] Unable to pull accounting history for device 30:07:4d:74:4c:55. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(1362) WARN: [mac:30:07:4d:74:4c:55] Unable to pull accounting history for device 30:07:4d:74:4c:55. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:22 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(2175) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(2175) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(2175) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:22 ip-10-11-8-37 pfqueue: pfqueue(2175) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:23 ip-10-11-8-37 pfqueue: pfqueue(2178) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:23 ip-10-11-8-37 pfqueue: pfqueue(2178) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:23 ip-10-11-8-37 pfqueue: pfqueue(2178) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:23 ip-10-11-8-37 pfqueue: pfqueue(2178) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:29 ip-10-11-8-37 pfipset[666]: t=2019-08-23T08:46:29+1000 lvl=info msg="No Inline Network bypass ipsets reload" pid=666 Aug 23 08:46:29 ip-10-11-8-37 pfipset[666]: t=2019-08-23T08:46:29+1000 lvl=info msg="No Inline Network bypass ipsets reload" pid=666 Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:31 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2171) WARN: [mac:30:07:4d:74:4c:55] Unable to perform RADIUS CoA-Request: Timeout waiting for a reply from 172.28.5.250 on port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 166. (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2171) ERROR: [mac:30:07:4d:74:4c:55] Wrong RADIUS secret or unreachable network device... (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(1367) WARN: [mac:30:07:4d:74:4c:55] Unable to pull accounting history for device 30:07:4d:74:4c:55. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2171) WARN: [mac:30:07:4d:74:4c:55] Unable to perform RADIUS CoA-Request: Timeout waiting for a reply from 172.28.5.250 on port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 166. (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2171) ERROR: [mac:30:07:4d:74:4c:55] Wrong RADIUS secret or unreachable network device... (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(1367) WARN: [mac:30:07:4d:74:4c:55] Unable to pull accounting history for device 30:07:4d:74:4c:55. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2197) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2197) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2197) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2197) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2175) WARN: [mac:30:07:4d:74:4c:55] Unable to perform RADIUS CoA-Request: Timeout waiting for a reply from 172.28.5.250 on port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 166. (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2175) ERROR: [mac:30:07:4d:74:4c:55] Wrong RADIUS secret or unreachable network device... (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2175) WARN: [mac:30:07:4d:74:4c:55] Unable to perform RADIUS CoA-Request: Timeout waiting for a reply from 172.28.5.250 on port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 166. (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:32 ip-10-11-8-37 pfqueue: pfqueue(2175) ERROR: [mac:30:07:4d:74:4c:55] Wrong RADIUS secret or unreachable network device... (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:33 ip-10-11-8-37 pfqueue: pfqueue(2178) WARN: [mac:30:07:4d:74:4c:55] Unable to perform RADIUS CoA-Request: Timeout waiting for a reply from 172.28.5.250 on port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 166. (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:33 ip-10-11-8-37 pfqueue: pfqueue(2178) ERROR: [mac:30:07:4d:74:4c:55] Wrong RADIUS secret or unreachable network device... (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:33 ip-10-11-8-37 pfqueue: pfqueue(2178) WARN: [mac:30:07:4d:74:4c:55] Unable to perform RADIUS CoA-Request: Timeout waiting for a reply from 172.28.5.250 on port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 166. (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:33 ip-10-11-8-37 pfqueue: pfqueue(2178) ERROR: [mac:30:07:4d:74:4c:55] Wrong RADIUS secret or unreachable network device... (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 08:46:42 ip-10-11-8-37 packetfence_httpd.portal: httpd.portal(1611) INFO: [mac:30:07:4d:74:4c:55] switch port is (172.28.5.250) ifIndex unknown connection type: WiFi 802.1X (pf::enforcement::_vlan_reevaluation) Aug 23 08:46:42 ip-10-11-8-37 pfqueue: pfqueue(2197) WARN: [mac:30:07:4d:74:4c:55] Unable to perform RADIUS CoA-Request: Timeout waiting for a reply from 172.28.5.250 on port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 166. (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:42 ip-10-11-8-37 pfqueue: pfqueue(2197) ERROR: [mac:30:07:4d:74:4c:55] Wrong RADIUS secret or unreachable network device... (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:42 ip-10-11-8-37 pfqueue: pfqueue(2197) WARN: [mac:30:07:4d:74:4c:55] Unable to perform RADIUS CoA-Request: Timeout waiting for a reply from 172.28.5.250 on port 3799 at /usr/local/pf/lib/pf/util/radius.pm line 166. (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:42 ip-10-11-8-37 pfqueue: pfqueue(2197) ERROR: [mac:30:07:4d:74:4c:55] Wrong RADIUS secret or unreachable network device... (pf::Switch::Aruba::Instant_Access::catch {...} ) Aug 23 08:46:43 ip-10-11-8-37 pfqueue: pfqueue(2212) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:43 ip-10-11-8-37 pfqueue: pfqueue(2212) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Aug 23 08:46:43 ip-10-11-8-37 pfqueue: pfqueue(2212) INFO: [mac:30:07:4d:74:4c:55] [30:07:4d:74:4c:55] DesAssociating mac on switch (172.28.5.250) (pf::api::desAssociate) Aug 23 08:46:43 ip-10-11-8-37 pfqueue: pfqueue(2212) INFO: [mac:30:07:4d:74:4c:55] controllerIp is set, we will use controller 172.28.5.250 to perform deauth (pf::Switch::Aruba::Instant_Access::radiusDisconnect) Peter Reissenweber Network Engineer The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and / or privileged material that may be governed by confidential information provisions contained in the agreement between GBST and your company. Any disclosure, copying, distribution, or other use without the express consent of the sender is prohibited. If you received this in error, please contact the sender and delete the material from any computer. All rights in the information transmitted, including copyright, are reserved. Nothing in this message should be interpreted as a digital signature that can be used to authenticate a document. No warranty is given by the sender that any attachments to this email are free from viruses or other defects. _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
