Hello Leonardo, 1) That’s odd and not normal, you can check which IPSET session the Mac address is seen in with the command :
ipset -L | less 2) The email registration source gives you 10 mins access on the network in order to get into your inbox and click on the link to validate your email, totally normal behavior. That setting can be found in the email source itself. 3) Normal, explained in 2). 4) After 10 mins, your node would be unregister that will force the device to see the captive portal again. Those issues can be hard to troubleshoot, if you want to sort them out faster, I suggest you to look at our offered services. Thanks, Ludovic Zammit Product Support Engineer Principal Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > On May 7, 2022, at 2:50 AM, leonardo.i...@itsinformatica.it wrote: > > > hi, could you answer me please? I have decided to implement pf in production > but I should study and clarify many aspects. Thanks > > Da: leonardo.i...@itsinformatica.it <mailto:leonardo.i...@itsinformatica.it> > <leonardo.i...@itsinformatica.it <mailto:leonardo.i...@itsinformatica.it>> > Inviato: lunedì 2 maggio 2022 13:09 > A: 'Zammit, Ludovic' <luza...@akamai.com <mailto:luza...@akamai.com>>; > 'packetfence-users' <packetfence-users@lists.sourceforge.net > <mailto:packetfence-users@lists.sourceforge.net>> > Oggetto: R: [PacketFence-users] error in captive portal with email > authentication > > Hi, I have configured pf in "inline enforcement". The management interface > 172.16.0.252 is connected to the firewall (172.16.0.5) and acts as wan. I > added an inline interface 192.168.1.252 associated with the second network > card and on which I enabled the captive portal (Additionnal listening > daemons). I created a mail authentication source that I gave in the > connection profile I created. I have applied this profile to the inline > network 192.168.1.0. > I have dedicated a wifi connection with SSID: ITS_Guest to this study > scenario. > > Unfortunately, however, the following strange behaviors occur: > > 1) sometimes connecting a device for the first time to the ITS_Guest wifi, it > happens that the captive portal does not appear but the device surfs the > Internet regularly. > When I go to the pf console on the Nodes and Users menu items I find this > device associated with the "default" user with Status: Unregistered > Then if I don't use it for a while, and as soon as I use the Internet on this > device, the captive portal comes out with an email request. > > 2) for another device this happens to me: I connect to the ITS_Guest wifi and > the captive portal appears. I enter the e-mail address (to which the pf > e-mail also arrives), but even if I do not click on the "Activate Access" > button in the e-mail received, after several seconds the device begins to > regularly surf the Internet. > When I go to the pf console on the Nodes and Users menu items I find this > device associated with the user having the name of the email address entered > in the captive portal with Status: Registered > > 3) Even the behavior of point 2 also occurs by entering a non-existent email > address. > > 4) If I don't use a registered device for a few minutes, as soon as I launch > the browser on it, the captive portal comes out again > > Thanks in advance
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
