Hello Benjamin,

i will take a look but we probably need to add a configuration parameter in the switch config (like enable multihost) and if it's enable then don't close the previous location log entry.

Only close the locationlog when the device move or when packetfence receive a accounting stop.


It's not something really complicate to code, i will send you a patch soon.

Regards

Fabrice


Le 19-08-29 à 02 h 35, Shirley, Benjamin a écrit :

Hi Fabrice,


thanks for your help. I forgot to mention that I have already tried turning on multihost, which did not change the behaviour. I turned it back of though because I did not notice any change and didn't know what this setting changes in the background.


As I mentioned, the funny thing is that the issue I experience only arrises when I have multiple devices on a port that have different roles assigned.




Benjamin



------------------------------------------------------------------------
*Von:* Durand fabrice via PacketFence-users <[email protected]>
*Gesendet:* Donnerstag, 29. August 2019 01:26:07
*An:* [email protected]
*Cc:* Durand fabrice
*Betreff:* Re: [PacketFence-users] Multiple Devices on one Switchport

Hello Benjamin,

it looks that this is what you need https://github.com/inverse-inc/packetfence/pull/2034 <https://github.com/inverse-inc/packetfence/pull/2034>

it's in PacketFence since the version 7.0, can you try to enable advanced.multihost and retry ?

Regards

Fabrice


Le 19-08-28 à 08 h 25, Shirley, Benjamin via PacketFence-users a écrit :

Hello everyone,

from reading up I am aware my setup is not officially supported, BUT it works on our equipment with one caveat I would love to get some information on.

We have a lot of offices equipped with workgroup switches connected to (Aruba) HP 2920-48Gaccess switches. The access switch is able to provide multiple vlans per port and separation of clients does work.

For example I can have 1 client on the workgroup switch being able to access the registration vlan and another client accessing production network, all controlled by mac authentication and the radius-reply by Packetfence.

The problem is that in the situations where I have multiple vlans on that one access switch port, Packetfence closes locationlog entries for some of the nodes and no more switch port information is available, thus reevaluating access or restarting of switch ports does not work when changing role or deleting a node. If all clients on the workgroup share the same role / vlan I can see the switchport details and the before said access re-evalution works / the switchport restarts when changing node role. (off course all clients loose connectivity for the moment, but this is acceptable)

I would like to understand which procedure triggers this behavior and if there is any chance that I can get this working?

Thanks in advance

Benjamin



_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Fabrice Durand
[email protected] ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)

_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to