After a successful authentication of the user packetfence will not change the vlan on the switch. The node is still in the registration vlan.

The same switches.conf works fine in pf 10.3 on CentOS 7.


Am 08.10.21 um 10:18 schrieb Hubert Kupper via PacketFence-users:
Hello,

after installing PF v11.0 on a fresh Debian11 machine and import the config from the fine working PF 10.3 on CentOS 7 with the import procedure, the successful authenticated device will not get the correct vlan for working. It is still in the registration vlan.

Here the output of packetfence.log:


Oct  8 09:48:30 pfence5 packetfence_httpd.portal[1553]: httpd.portal(1553) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:48:36 pfence5 packetfence[3229]: pfperl-api(1237) INFO: getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance) Oct  8 09:48:36 pfence5 packetfence[3230]: pfperl-api(1235) INFO: Using 300 resolution threshold (pf::pfcron::task::cluster_check::run) Oct  8 09:48:36 pfence5 packetfence[3230]: pfperl-api(1235) INFO: All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run) Oct  8 09:48:36 pfence5 packetfence[3232]: pfperl-api(1230) INFO: processed 0 security_events during security_event maintenance (1633679316.09029 1633679316.09422) (pf::security_event::security_event_maintenance) Oct  8 09:48:36 pfence5 packetfence[3232]: pfperl-api(1230) INFO: processed 0 security_events during security_event maintenance (1633679316.09579 1633679316.09684) (pf::security_event::security_event_maintenance) Oct  8 09:48:40 pfence5 packetfence_httpd.portal[1551]: httpd.portal(1551) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:48:40 pfence5 packetfence_httpd.portal[1553]: httpd.portal(1553) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) ----->Oct  8 09:48:48 pfence5 pfqueue[1183]: pfqueue(1183) INFO: [mac:client-MAC] Sending a firewall SSO 'Update' request for MAC 'client-MAC' and IP 'client-IP' (pf::firewallsso::do_sso) Oct  8 09:48:48 pfence5 pfqueue[3255]: pfqueue(3255) INFO: [mac:client-MAC] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:48:50 pfence5 packetfence_httpd.portal[1551]: httpd.portal(1551) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:48:51 pfence5 packetfence_httpd.portal[1553]: httpd.portal(1553) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:00 pfence5 packetfence_httpd.portal[1551]: httpd.portal(1551) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:01 pfence5 packetfence_httpd.portal[1553]: httpd.portal(1553) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:11 pfence5 packetfence_httpd.portal[1551]: httpd.portal(1551) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:11 pfence5 packetfence_httpd.portal[1553]: httpd.portal(1553) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) -----> Oct  8 09:49:11 pfence5 pfqueue[1187]: pfqueue(1187) INFO: [mac:client-MAC] Sending a firewall SSO 'Update' request for MAC 'client-MAC' and IP 'client-IP' (pf::firewallsso::do_sso) Oct  8 09:49:11 pfence5 pfqueue[1187]: pfqueue(1187) INFO: [mac:client-MAC] Request to /api/v1/firewall_sso/update is unauthorized, will perform a login (pf::api::unifiedapiclient::call) Oct  8 09:49:11 pfence5 pfqueue[3283]: pfqueue(3283) INFO: [mac:client-MAC] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:21 pfence5 packetfence_httpd.portal[1551]: httpd.portal(1551) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:21 pfence5 packetfence_httpd.portal[1553]: httpd.portal(1553) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:31 pfence5 packetfence_httpd.portal[1551]: httpd.portal(1551) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:31 pfence5 packetfence_httpd.portal[1553]: httpd.portal(1553) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:36 pfence5 packetfence[3318]: pfperl-api(1234) INFO: Using 300 resolution threshold (pf::pfcron::task::cluster_check::run) Oct  8 09:49:36 pfence5 packetfence[3318]: pfperl-api(1234) INFO: All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run) -----> Oct  8 09:49:35 pfence5 pfqueue[1188]: pfqueue(1188) INFO: [mac:client-MAC] Sending a firewall SSO 'Update' request for MAC 'client-MAC' and IP 'client-IP' (pf::firewallsso::do_sso) Oct  8 09:49:35 pfence5 pfqueue[3316]: pfqueue(3316) INFO: [mac:client-MAC] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Oct  8 09:49:36 pfence5 packetfence[3321]: pfperl-api(1235) INFO: getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance) Oct  8 09:49:36 pfence5 packetfence[3320]: pfperl-api(1235) INFO: processed 0 security_events during security_event maintenance (1633679376.06855 1633679376.07259) (pf::security_event::security_event_maintenance) Oct  8 09:49:36 pfence5 packetfence[3320]: pfperl-api(1235) INFO: processed 0 security_events during security_event maintenance (1633679376.07375 1633679376.07475) (pf::security_event::security_event_ma

What can be the reason?

Best regards,
Hubert

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to