Good evening,
I am in the middle of considering a couple different NAC type solutions, and Packetfence has been the one I have been testing for nearly 2 weeks now. I am using Fortigates and FortiAPs for wireless. Right now, I am going through the process of getting guest wifi via captive portal working. After giving up on the external captive portal (served via Packetfence) after a few days of troubleshooting, I decided to simply use the Fortigate's internal captive portal until I can give the magic packet handshake issues another go. The idea was to allow internal users to be able to sign onto the guest network and use it (BYOD) for internet access after authenticating with their AD credentials. Unfortunately this also does not work. It seems that Packetfence rejects the request since Fortigates are not "cli-access" compatible (which is what web-auth defaults to). After I continued to dig, it seems that wireless access that is not 802.1x is not supported, which strikes me as odd. I figure I should be able to override this behavior somewhere in radius.pm, but my brain is fried and frustrated. Anyone can point into the right direction? Or is Packetfence simply unsuitable when not using its built in captive portal? Thanks in advance Paul Reed | IT Systems Engineer Puffer-Sweiven | 4230 Greenbriar Drive | Stafford | TX | 77477 | US A Member of the Emerson Impact Partner Network T +1 281 274 6140 | M +1 713 351 9880 paul.r...@puffer.com <mailto:paul.r...@puffer.com> www.puffer.com <http://www.puffer.com/> [Top Workplaces 2021]<https://www.puffer.com/> Notice: This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, redistributing or copying it, or taking action on the basis of its information, is prohibited; please delete it and any attachments and notify sender that you have received it in error. E-mail messages may contain computer viruses, and may be intercepted, modified or deleted without the knowledge of sender or intended recipient. As a result, you may decide not to communicate with Puffer-Sweiven via e-mail. Also, Puffer-Sweiven reserves the right, under circumstances permitted by applicable law, to retain and monitor its system's incoming and outgoing e-mail messages.
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
