Re: [PacketFence-users] Wifi Guest suddenly get no portal anymore

Please see my previous mail about the ip. But after setting the ip on Lo and restart the haproxy portal service everything is working again! Thanks! Van: Ludovic Zammit Verzonden: 02 March 2021 21:01 Aan: Martijn Langendoen CC: packetfence-users@lists.sourceforge.net Onderwerp: Re:

Re: [PacketFence-users] Ruckus Smartzone

Hi pieter-Jan I am using the same scenario as you describe. Only that the unrecognized devices get directed to the captive portal directly. (packetfence assigns a registration vlan to unknown devices, then acts as a dhcp / dns server for that vlan and clients get presented the portal). Then the

Re: [PacketFence-users] Ruckus Smartzone

Hello Ludovic This is the config: [192.168.10.65] radiusSecret=*** description=test ruckus controllerIp=192.168.10.65 type=Ruckus::SmartZone_v2 group=default ExternalPortalEnforcement=Y registrationVlan=-1 wsPwd=*** wsUser=*** SNMPVersion=2c SNMPVersionTrap=2c [192.168.149.0/24]

Re: [PacketFence-users] Wifi Guest suddenly get no portal anymore

Hi Ludovic, The version is a ZEN version PacketFence 10.1.0 fully patched. I get an error: [root@PacketFence-ZEN ~]# /usr/local/pf/bin/pfcmd service haproxy-portal stop Service StatusPID packetfence-haproxy-portal.service

Re: [PacketFence-users] Ruckus Smartzone

Hello Ludovic When adding http://ip-of-packetfence/RuckusSmartZone to the Smartzone the users is only getting "Not implemented" on the screen . If we change this to http://ip-of-packetfence/captive-portal , I see that ruckus adds a bunch of information to that link as you described . "GET

Re: [PacketFence-users] SEPM provisioning with packetfence

Hello all, I have setup WMI scan in my PacketFence but I can't see any results, no tab generated for wmi scan under nodes neither I can see anything logs for scan. When using wmic command from PacketFence server, I can see the results but nothing in my Web API. What could be the problem? On

Re: [PacketFence-users] Forwarding DHCP Reservation IPs

Hi Ludovic, We've confirmed we had it configured correctly. Just wondering if it's a limitation of the sensor with respect to DHCP reserved IPs. On Tue, Mar 2, 2021 at 8:28 AM Ludovic Zammit wrote: > Hello Ted, > > If you followed the documentation it says to send it out to PF management >

Re: [PacketFence-users] Ruckus Smartzone

Dear ludovic, Any chance you guys can take a look at the PR I raised with quite a bit of documentation for smartzone and ruckus in general? It's PR 6141 (I have one commit as root just pulling the repo forward which I'm not sure how to get rid of so that the cla bot passes) Cheers! On Wed,

Re: [PacketFence-users] Wifi Guest suddenly get no portal anymore

Hi Ludovic, That ip is not on my loopback. I added in /etc/sysconfig/network-scripts/ifcfg-lo as second ip. Is that right belongs it someware in pf? Van: Ludovic Zammit Verzonden: 02 March 2021 21:01 Aan: Martijn Langendoen CC: packetfence-users@lists.sourceforge.net Onderwerp: Re:

Re: [PacketFence-users] Ruckus Smartzone

Hello Diego Yes the mac encryption is disabled on the smartzone via SSH. Mac authentication would be great for our know devices , but not for the byod segment :( We would like to use the portal to authenticate students/teachers to our campus wifi. The link to Office365 via LDAPS (Azure Domain

Re: [PacketFence-users] Ruckus Smartzone

Hello Ludovic I have found the reason why there was a public ip in the info Ruckus was sending. This was our Control NAT IP, which we don't use... After removing this config I'm getting our correct private IP in the nbiIP field. GET

Re: [PacketFence-users] Ruckus Smartzone

Hi Pieter, did you disable mac encryption on smartzone? Its weird that the mac is not being found. To be honest, I have not used the portal option myself yet so Im not of great help there. Any reason why you wouldnt do the mac authentication option with the portal served directly by packetfence?

[PacketFence-users] WMI scan in packetfence

Hello all, I have configured PacketFence in my intranet having static ips without DHCP server. I am able to authenticate my devices using dot1x without captive portal i.e. by enabling automatic registration of devices. Now I want to scan my endpoints for antivirus compliance. I set up wmi rule

Re: [PacketFence-users] Wifi Guest suddenly get no portal anymore

Hi Ludovic, here the output: [root@PacketFence-ZEN ~]# grep ip_address= /usr/local/pf/conf/pf.conf.defaults ip_address=66.70.255.147 [root@PacketFence-ZEN ~]# grep ip_address= /usr/local/pf/conf/pf.conf [root@PacketFence-ZEN ~]# so missing in pf.conf? Van:

Re: [PacketFence-users] Ruckus Smartzone

Show me the content of your conf/switches.conf Removed the shared secret and password. Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu

Re: [PacketFence-users] Wifi Guest suddenly get no portal anymore

No, it’s the default, it’s ok. I don’t know why it was not mount over lo interface. Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu

Re: [PacketFence-users] Forwarding DHCP Reservation IPs

Hello Ted, The sensor is pretty simple, it reflects DHCP packets back to the IP over the port 767 and does not do any processing other than that. Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca

Re: [PacketFence-users] Ruckus Smartzone

PS: That log logs/httpd.portal.access not logs/httpd.access.log Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu ) and

Re: [PacketFence-users] Wifi Guest suddenly get no portal anymore

Hello Martijn, Can you give me the output for the two commands: grep ip_address= /usr/local/pf/conf/pf.conf.defaults And: grep ip_address= /usr/local/pf/conf/pf.conf Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca

Re: [PacketFence-users] Ruckus Smartzone

Hello Pieter-Jan, You are not suppose to have access to http://ip-of-packetfence/RuckusSmartZone . You should be redirected to that URL via the SmartZone and also send out a http request to PF with a bunch of other attribute like the client Mac and IP.