Re: [PacketFence-users] Webauth with Aruba

2018-01-30 Thread Tim DeNike via PacketFence-users
I use it. The PF documentation was more or less spot-on for it. On Tue, Jan 30, 2018 at 10:52 AM, Trinklein, Jason R via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Has anyone run Packetfence webauth with Aruba for guest wireless access? > Any guides or manuals for

Re: [PacketFence-users] 7.2 and IPv6 functionality issues with patches.

2017-09-26 Thread Tim DeNike via PacketFence-users
And Firewall SSO doesn't send updates for V6 addresses. :( On Mon, Sep 25, 2017 at 3:29 PM, Tim DeNike wrote: > PS: This doesn't solve the potential issue of the # of active IPv6 > addresses a device could potentially have on 1 interface. > > 1. Link Local > 2. SLAAC

Re: [PacketFence-users] 7.2 and IPv6 functionality issues with patches.

2017-09-25 Thread Tim DeNike via PacketFence-users
PS: This doesn't solve the potential issue of the # of active IPv6 addresses a device could potentially have on 1 interface. 1. Link Local 2. SLAAC temporary address 3. SLAAC address 4. DHCPv6 address 5. DHCPv6 PD Prefix The only issue that would affect my network is on the wireless side

[PacketFence-users] 7.2 and IPv6 functionality issues with patches.

2017-09-25 Thread Tim DeNike via PacketFence-users
Finally getting around to 7.2 upgrade and testing IPv6 functionality. Couple issues. #1. Our switches send multiple Framed-IPv6-Address values in a single accounting packet. Needed to keep the value of Framed-IPv6-Address from API into an array and break it down in handle_accounting_metadata.

Re: [PacketFence-users] Mobile phone MAC randomisation breaks PF

2017-09-19 Thread Tim DeNike via PacketFence-users
MAC randomization (At least the way Ive seen it work) only randomizes the MAC when the device is passively probing for networks. It uses the fixed MAC when it actually connects. OR.. It uses a random MAC for a specific SSID and doesn't change it while connected to that SSID. If its randomizing

Re: [PacketFence-users] Multiple endpoints behind a single switchport

2017-06-20 Thread Tim DeNike via PacketFence-users
Brocade. And previously extreme. Big benefit of brocade is how they handle acls. We have a substantial ipv4 and ipv6 acl on every device on a switch and haven't run out of cam space. Pretty much any Broadcom based switch can do Mac based vlans though. Sent from my iPhone On Jun 20, 2017, at

Re: [PacketFence-users] Multiple endpoints behind a single switchport

2017-06-20 Thread Tim DeNike via PacketFence-users
Correct... We use it and it works beautifully.. Nice to be able to have VM running in a different vlan than your laptop. :D On Tue, Jun 20, 2017 at 4:10 PM, Derek Wuelfrath wrote: > You would need network equipment that supports multiple untagged VLAN on > the same

Re: [PacketFence-users] Multiple endpoints behind a single switchport

2017-06-20 Thread Tim DeNike via PacketFence-users
Or using radius COA and multiple untagged devices on the switch port. On Tue, Jun 20, 2017 at 10:50 AM, Derek Wuelfrath via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Max, > > Even if this feature let’s you “manage multiple devices” on an unmanaged > switch, there is

Re: [PacketFence-users] Utilize Google SMTP servers for guest access emails

2017-06-18 Thread Tim DeNike via PacketFence-users
Setup a postfix server with dmarc signing. Sent from my iPhone On Jun 18, 2017, at 2:50 PM, Hans Johnson via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: The other thing is to check whether whatever PF is using for its SMTP relay is listed as a permitted mail host through

Re: [PacketFence-users] New PF 7.0 Cluster Configuration Question

2017-06-07 Thread Tim DeNike via PacketFence-users
Just ran into that myself the other day. Like some sysctl variable wasn't set. Sent from my iPhone On Jun 7, 2017, at 10:02 AM, Peter Reilly via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: Was resolved by a reboot of all hosts in case anyone else has the same issue.

Re: [PacketFence-users] User accounts

2017-06-06 Thread Tim DeNike via PacketFence-users
Samba AD server. Sent from my iPhone > On Jun 6, 2017, at 4:56 PM, Jason 'XenoPhage' Frisvold via PacketFence-users > wrote: > > Greetings, > >In a previous life, we used Packetfence for a campus network with > thousands of users. The user database