Re: [PacketFence-users] Is RADIUS account from packet fence deployed inline possible?
Hello Steve, it's already suppose to send the ip address of the device in the radius accounting packet: https://github.com/inverse-inc/packetfence/blob/devel/go/firewallsso/checkpoint.go#L45 Regards Fabrice Le 19-06-12 à 05 h 06, AOL a écrit : Thanks Fabrice. that started the RADIUS accounting working. I can see the accounting packets in wireshark (although there are a little sporadic). Our solution needs to see the client IP within the payload to accept the packet. In Wireshark I can see the domain/realm, username and what looks like a MAC address within the packet but not the IP. Is there a $ variable I can include in the RADIUYS accounting options to include the IP? Thanks, Steve On 11 Jun 2019, at 02:16, Durand fabrice via PacketFence-users wrote: Hello Steve, it looks that it's the firewall sso you are looking for. Try to configure the checkpoint firewall sso in packetfence, it send radius accounting packet. Regards Fabrice Le 19-06-10 à 16 h 44, AOL via PacketFence-users a écrit : Hi, I’ve been trying to get a PacketFence server to send RADIUS accounting information to another server. The PF is deployed inline. The aim is to pass the user source IP address within the RADIUS accounting info, so it can be used for user tracking on a web proxy. Does anyone know if this is possible? The configuration pages seem to suggest it’s possible to send accounting to another server, but I found an email buried in an pf email archive saying that PF only receives RADIUS accounting. Thanks, Steve ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Fabrice Durand fdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org) ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Is RADIUS account from packet fence deployed inline possible?
Thanks Fabrice. that started the RADIUS accounting working. I can see the accounting packets in wireshark (although there are a little sporadic). Our solution needs to see the client IP within the payload to accept the packet. In Wireshark I can see the domain/realm, username and what looks like a MAC address within the packet but not the IP. Is there a $ variable I can include in the RADIUYS accounting options to include the IP? Thanks, Steve > On 11 Jun 2019, at 02:16, Durand fabrice via PacketFence-users > wrote: > > Hello Steve, > > it looks that it's the firewall sso you are looking for. > > Try to configure the checkpoint firewall sso in packetfence, it send radius > accounting packet. > > Regards > > Fabrice > > > Le 19-06-10 à 16 h 44, AOL via PacketFence-users a écrit : >> Hi, >> >> I’ve been trying to get a PacketFence server to send RADIUS accounting >> information to another server. The PF is deployed inline. The aim is to pass >> the user source IP address within the RADIUS accounting info, so it can be >> used for user tracking on a web proxy. Does anyone know if this is possible? >> >> The configuration pages seem to suggest it’s possible to send accounting to >> another server, but I found an email buried in an pf email archive saying >> that PF only receives RADIUS accounting. >> >> Thanks, >> >> Steve >> >> ___ >> PacketFence-users mailing list >> PacketFence-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/packetfence-users > > > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Is RADIUS account from packet fence deployed inline possible?
Hello Steve, it looks that it's the firewall sso you are looking for. Try to configure the checkpoint firewall sso in packetfence, it send radius accounting packet. Regards Fabrice Le 19-06-10 à 16 h 44, AOL via PacketFence-users a écrit : Hi, I’ve been trying to get a PacketFence server to send RADIUS accounting information to another server. The PF is deployed inline. The aim is to pass the user source IP address within the RADIUS accounting info, so it can be used for user tracking on a web proxy. Does anyone know if this is possible? The configuration pages seem to suggest it’s possible to send accounting to another server, but I found an email buried in an pf email archive saying that PF only receives RADIUS accounting. Thanks, Steve ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] Is RADIUS account from packet fence deployed inline possible?
Hi, I’ve been trying to get a PacketFence server to send RADIUS accounting information to another server. The PF is deployed inline. The aim is to pass the user source IP address within the RADIUS accounting info, so it can be used for user tracking on a web proxy. Does anyone know if this is possible? The configuration pages seem to suggest it’s possible to send accounting to another server, but I found an email buried in an pf email archive saying that PF only receives RADIUS accounting. Thanks, Steve ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
