Hello Giuliano, Two solutions, the first one is to do 802.1x with auto registration, the device will be evaluated on the fly on each connection so getting the role and VLAN that he belongs to.
Second solution keeping the captive portal, is to put a smaller registration window or access duration to a 1 day 5 days etc.. Thanks, Ludovic Zammit Product Support Engineer Principal Lead Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > On Nov 20, 2023, at 5:06 AM, Giuliano Da Dalt via PacketFence-users > <packetfence-users@lists.sourceforge.net> wrote: > > Good morning, we are looking for the solution to this case. > Currently, to block students' internet browsing from personal devices, we use > a Captive Portal. > This technology is no longer applicable as complete segregation of the device > from any client, even the internal network, is a problem. > We know that white-listing can be done but it is no longer sufficient, > especially in the case of external services. > Our idea is to use VLANs: one that allows complete internet access, the other > with internet access but with very limited bandwidth (this way push > notifications, RMM and updates continue to work). > To switch from one VLAN to another we want to use the COA feature. > > We did several tests with our Ruckus APs and PacketFence. > We are very close to our goal, but 1% missing. > If we disconnect and reconnect client COA works like a charm. > We were therefore not able to obtain the same result when the client is > already connected beacuse we don't find a way to make PacketFence check > regularly if a user status changes (AD group change). > > Giuliano Da Dalt > Ufficio informatico - Bearzi > Tel. 0432-493983 > Int. 983 > > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!Ts3O-5qqMdZb8tKuqnFZeH5mdpKZILf0yOv_b2RY_Vc3f1hURA87egxrPN17JR4Lx1Af9ploanPsqroQWXmWT5gYLEwJPucw8YNuNA$ >
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
