It does the same thing if I change an authentication rule.

If I decide to change the action set role vlan1 to set role vlan2, I have to 
uncheck the box to re-authenticate otherwise it keeps the same role.

________________________________
De : Cortat Robin
Envoyé : mardi, 16 mars 2021 08:06:23
À : Ludovic Zammit
Cc : [email protected]
Objet : RE: [PacketFence-users] VLAN Assignement


Oh, but there is still a small problem.

If I check "Automatically use my Windows logon name and password" and I connect 
a client whose user is part of a VLAN1 group that will assign him vlan 1, it 
works.

But if I move the user to a VLAN2 AD group, and reconnect the client with the 
checkbox checked, it will somehow recover its old authentication and remain in 
VLAN1.

The only way I found to fix this is to uncheck the box every time I change 
groups in the AD, enter my username and password in wndows, then check the box 
again.

If you have a solution that would avoid this, I'm interested.

I thank you in advance for your answer.

________________________________
De : Cortat Robin
Envoyé : mardi, 16 mars 2021 08:00:28
À : Ludovic Zammit
Cc : [email protected]
Objet : RE: [PacketFence-users] VLAN Assignement

Yes, it is.

Thank you for your answer. It works.


________________________________
De : Ludovic Zammit <[email protected]>
Envoyé : lundi, 15 mars 2021 19:32:46
À : Cortat Robin
Cc : [email protected]
Objet : Re: [PacketFence-users] VLAN Assignement

Is it a domain joined computer ?

If yes, the config needs to be done on the windows:

Click on Settings:

[Tips and Tricks for Using 802.1X in Windows]

Then check:

[Configure Windows 10 for 802.1X User Authentication - Virtualization Howto]
Thanks,

Ludovic Zammit
[email protected]<mailto:[email protected]> ::  +1.514.447.4918 (x145) ::  
www.inverse.ca<https://www.inverse.ca/>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu<http://www.sogo.nu/>) 
and PacketFence (http://packetfence.org<http://packetfence.org/>)







On Mar 15, 2021, at 1:33 PM, Cortat Robin 
<[email protected]<mailto:[email protected]>> wrote:

802.1x

>From Windows, a popup appear prompting me for a username and password.


________________________________
De : Ludovic Zammit via PacketFence-users 
<[email protected]<mailto:[email protected]>>
Envoyé : lundi, 15 mars 2021 18:16:46
À : 
[email protected]<mailto:[email protected]>
Cc : Ludovic Zammit
Objet : Re: [PacketFence-users] VLAN Assignement

Hello Robin,

Are you doing 802.1x or Mac authentication ?

Where do you put the username / password ? On the windows level or the web 
captive portal ?

Thanks,

Ludovic Zammit
[email protected]<mailto:[email protected]> ::  +1.514.447.4918 (x145) ::  
www.inverse.ca<https://www.inverse.ca/>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu<http://www.sogo.nu/>) 
and PacketFence (http://packetfence.org<http://packetfence.org/>)







On Mar 15, 2021, at 11:22 AM, Robin Cortat via PacketFence-users 
<[email protected]<mailto:[email protected]>>
 wrote:

Hello,

I have a question.

Currently, I have a working system that allows me to assign a VLAN ID to a 
computer according to an AD group. However, every time I plug the computer into 
the switch, I have to log in with a domain username.

My question is, is it possible to remove this step? Is it possible to assign 
the VLAN ID directly to an AD group without having to enter the username and 
password?

Thank you for your answer.

[rcortat]<http://www.imageson.ch/>

[logoBNJ]<http://www.bnjpublicite.ch/>

[logoRJB]<http://www.rjb.ch/>

[logoRTN]<http://www.rtn.ch/>

[logoRFJ]<http://www.rfj.ch/>

[logoGRRIF]<http://www.grrif.ch/>

[https://medias.bnj.ch/Mails/Common/isFooter.jpg]<https://redir.bnj.ch/site/IS>


_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users

_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to