[PacketFence-users] Packetfence with remote database
Hello, i am planning to setup a new installation of packetfence with a remote database. In addition to set the ip in pf.conf, is there any other configuration to do to enable communication with the remote server? Pasquale ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Management ethernet
Hello Francesco i had exactly the same problem. There can only be one (1) management interface. And the management interface is the only one that is accessible via ssh. But you can add a rule to IPTABLES.conf to accept ssh traffic from the eth0 even if it is not a management interface and solve your problem. Pasquale Il giorno ven 13 dic 2019 alle ore 10:23 Di Battista Francesco via PacketFence-users ha scritto: > Hello all, > I'm new for packetfence and I have make a new installation on debian > server inline mode. > I have two interface: > eth0 - management (that is outline) on subnet 192.168.140.0/24 > eth1 - inline that I use for captive portal on subnet 192.168.40.0/24 > All works fine!!! > I would like to add another interface only for system management on subnet > 192.168.240.0/24. > If I add this interface as management, the eth0 doesn't works. I have try > to call this interface, on packetfence, as other but in this mode I can't > access via web interface or ssh on the machine. > How I can execute this configuration? > Thanks for your help > > > -- > linux registered user #400388 > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] packetfence clustered environment
Hi No problem, the reason is my wireless controller doesn t support vlan enforcement and then Inline is the only way. Isn' t It? Pasquale Il gio 12 dic 2019, 23:32 Sallee, Jake via PacketFence-users < packetfence-users@lists.sourceforge.net> ha scritto: > Forgive me for butting in, but do you have a specific reason for using an > inline deployment? > > > > IMHO a routed / vlan deployment is better. > > > > Obviously, if you have a reason why you want to use an inline deployment > you can ignore me : ) > > > > Jake Sallee > > Godfather of Bandwidth > > System Engineer and Security Specialist > > University of Mary Hardin-Baylor > > WWW.UMHB.EDU > > > > 900 College St. > > Belton, Texas > > 76513 > > > > Fone: 254-295-4658 > > Phax: 254-295-4221 > > > > *From:* Fabrice Durand via PacketFence-users < > packetfence-users@lists.sourceforge.net> > *Sent:* Thursday, December 12, 2019 2:44 PM > *To:* packetfence-users@lists.sourceforge.net > *Cc:* Fabrice Durand > *Subject:* Re: [PacketFence-users] packetfence clustered environment > > > > *EXTERNAL** Exercise Caution* > > yes one ip per interface and a vip per layer2. > > Le 19-12-12 à 15 h 40, Pasquale Lo Bello via PacketFence-users a écrit : > > Thanks. So i have to set the ip.addresses in all the interfaces? > > > > Il gio 12 dic 2019, 15:37 Fabrice Durand via PacketFence-users < > packetfence-users@lists.sourceforge.net> ha scritto: > > Hello Pasquale, > > the management must be on the same layer 2 , the inline must be on the > same layer 2 , but it doesn't mean that all interfaces nust be on the same > layer 2 network. > > Regards > > Fabrice > > > > Le 19-12-12 à 09 h 17, Pasquale Lo Bello via PacketFence-users a écrit : > > Hello > > > > i'm trying to set up a clustered environment with three nodes. > > > > I'm using the "Clustering quick installation guide" as reference, and i > have a question about one of the assumptions: > > > > "The servers network interfaces are on the same layer 2 network" > > > > In my case i have three virtual machines, each having 2 interfaces (one > for management, the other one for inline). > > > > In total I have 6 interfaces and all of them have to be on the same > segment (virtual network in my case). Is this correct? > > > > Thanks in advance > > Pasquale. > > > > > ___ > > PacketFence-users mailing list > > PacketFence-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/packetfence-users > <https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_packetfence-2Dusers=DwMDaQ=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=kCwDFVQBU-cSzQ0hvRB2jwkvaacsZ1ahExXaHjnZQKI=AXNhsiRbklkLqb8L6Nzw7FKrLSLSXMWjOmE1Ub0XOA8=> > > -- > > Fabrice Durand > > fdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca > <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.inverse.ca=DwMDaQ=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=kCwDFVQBU-cSzQ0hvRB2jwkvaacsZ1ahExXaHjnZQKI=ECT8B6PFrmrFKK1TYrogR0VObKcCvtTMz1w9Pfv-WdU=> > > Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu > <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.sogo.nu=DwMDaQ=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=kCwDFVQBU-cSzQ0hvRB2jwkvaacsZ1ahExXaHjnZQKI=XpBr_eX0XLYE0WcMpQUqaXzk9gi81lKgqSg5Q-z4krk=>) > and PacketFence (http://packetfence.org > <https://urldefense.proofpoint.com/v2/url?u=http-3A__packetfence.org=DwMDaQ=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=kCwDFVQBU-cSzQ0hvRB2jwkvaacsZ1ahExXaHjnZQKI=coZhxK3IzjvKB1cfcOOhwiH9i_SqmY-NdyQFglqt6yQ=>) > > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > <https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_packetfence-2Dusers=DwMDaQ=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=kCwDFVQBU-cSzQ0hvRB2jwkvaacsZ1ahExXaHjnZQKI=AXNhsiRbklkLqb8L6Nzw7FKrLSLSXMWjOmE1Ub0XOA8=> > > > > > ___ > > PacketFence-users mailing list > > PacketFence-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/packetfence-users > <https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_packetfence-2Dusers=DwMDaQ=61yQaCoNVjQr1ah00
Re: [PacketFence-users] packetfence clustered environment
Thanks. So i have to set the ip.addresses in all the interfaces? Il gio 12 dic 2019, 15:37 Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net> ha scritto: > Hello Pasquale, > > the management must be on the same layer 2 , the inline must be on the > same layer 2 , but it doesn't mean that all interfaces nust be on the same > layer 2 network. > > Regards > > Fabrice > > > Le 19-12-12 à 09 h 17, Pasquale Lo Bello via PacketFence-users a écrit : > > Hello > > i'm trying to set up a clustered environment with three nodes. > > I'm using the "Clustering quick installation guide" as reference, and i > have a question about one of the assumptions: > > "The servers network interfaces are on the same layer 2 network" > > In my case i have three virtual machines, each having 2 interfaces (one > for management, the other one for inline). > > In total I have 6 interfaces and all of them have to be on the same > segment (virtual network in my case). Is this correct? > > Thanks in advance > Pasquale. > > > ___ > PacketFence-users mailing > listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users > > -- > Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca > Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence > (http://packetfence.org) > > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] Packetfence management interfaces
Hello in my setup i have inline enforcement and 2 interfaces (one for management-outbound and the other is the inline). I would like to split the first one to have three different interfaces: - Management (only for management /admin purposes) - Outbound (where i have Internet) - Inline Is it possible? Of course i have enough physical interfaces Thanks Pasquale. ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] PF in Hot-StandBy mode
Hello Nicolas, thanks for your feedback. I've had a look to the guide, but it seems that Clustering works well for vlan enforcement. Does clustering fit well also for inline enforcement? Thanks Pasquale Il giorno lun 2 dic 2019 alle ore 12:03 Nicolas Quiniou-Briand via PacketFence-users ha scritto: > Hello, > > On 29/11/2019 12:39, Pasquale Lo Bello via PacketFence-users wrote: > > Is there a guide for implementing PF in Inline Hot-Standby mode? I mean > > 2 PF machines that share the same inline interface but where one is the > > hot one and another is standby until the first fails someway. > > You could take a look at your Clustering Guide [1]. Clustering in > PacketFence works as an active/active cluster, not active/passive. You > need at least 3 nodes. > > [1] https://packetfence.org/doc/PacketFence_Clustering_Guide.html > -- > Nicolas Quiniou-Briand > n...@inverse.ca :: +1.514.447.4918 *140 :: https://inverse.ca > Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence > (https://packetfence.org) and Fingerbank (http://fingerbank.org) > > > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] PF in Hot-StandBy mode
Hello Is there a guide for implementing PF in Inline Hot-Standby mode? I mean 2 PF machines that share the same inline interface but where one is the hot one and another is standby until the first fails someway. Thanks a lot Pasquale ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
