For simplicity sake, the VOICE VLAN is 202, the DATA VLAN is 1.
Could you check: - in packetfence.log VLAN 202 is not being assigned. I'm not sure why the time clocks Authentication Source is being called by the phone. Nothing in that rule would seem to associate the phone with the MAC address of one of the time clocks. May 19 10:48:00 nac packetfence_httpd.aaa: httpd.aaa(2311) INFO: [mac:64:16:7f:57:c6:f5] handling radius autz request: from switch_ip => (192.168.101.30), connection_type => Ethernet-NoEAP,switch_mac => (08:f1:ea:0c:7a:7f), mac => [64:16:7f:57:c6:f5], port => 1, username => "64167f57c6f5" (pf::radius::authorize) May 19 10:48:00 nac packetfence_httpd.aaa: httpd.aaa(2311) INFO: [mac:64:16:7f:57:c6:f5] Instantiate profile SGATimeClocks (pf::Connection::ProfileFactory::_from_profile) May 19 10:48:00 nac packetfence_httpd.aaa: httpd.aaa(2311) INFO: [mac:64:16:7f:57:c6:f5] Found authentication source(s) : 'SGA_TimeClocks' for realm 'null' (pf::config::util::filter_authentication_sources) May 19 10:48:00 nac packetfence_httpd.aaa: httpd.aaa(2311) INFO: [mac:64:16:7f:57:c6:f5] Using sources SGA_TimeClocks for matching (pf::authentication::match2) May 19 10:48:00 nac packetfence_httpd.aaa: httpd.aaa(2311) WARN: [mac:64:16:7f:57:c6:f5] Illegal hexadecimal digit ' ' ignored at /usr/local/pf/lib/pf/Switch/HP/Procurve_2920.pm line 57. (pf::Switch::HP::Procurve_2920::getVoipVsa) May 19 10:48:01 nac packetfence_httpd.aaa: httpd.aaa(2311) INFO: [mac:64:16:7f:57:c6:f5] security_event 1300003 force-closed for 64:16:7f:57:c6:f5 (pf::security_event::security_event_force_close) May 19 10:48:01 nac packetfence_httpd.aaa: httpd.aaa(2311) INFO: [mac:64:16:7f:57:c6:f5] Instantiate profile SGATimeClocks (pf::Connection::ProfileFactory::_from_profile) May 19 10:48:02 nac packetfence_httpd.aaa: httpd.aaa(2311) INFO: [mac:64:16:7f:57:c6:f5] Updating locationlog from accounting request (pf::api::handle_accounting_metadata) May 19 10:48:12 nac pfqueue: pfqueue(37322) WARN: [mac:64:16:7f:57:c6:f5] Unable to pull accounting history for device 64:16:7f:57:c6:f5. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) May 19 10:48:13 nac pfqueue: pfqueue(37322) WARN: [mac:64:16:7f:57:c6:f5] Unable to pull accounting history for device 64:16:7f:57:c6:f5. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history) - in RADIUS audit log (on RADIUS reply tab) RADIUS Reply Egress-VLANID = 822083786 - on your switch The port the phone is physically on does not have the proper VLAN 202 assigned as tagged and VLAN 1 assigned as untagged. to see ID of VLAN returned --------------------------------------------------------------- Chad Jemison Director of IT Seneca Gaming Authority<http://www.sni.org/sga> 345 Third Street, Suite 404 Niagara Falls, New York 14303 716-299-1246 x267
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
