I'm hoping to talk to some people who are using the PacketFence SSO integration
with FortiGate firewalls. We are looking into the possibility of using this
capability and I'd like to hear about your experience and maybe any hints or
recommendations you might have. That discussion could take
Hello Raphael,
there is more than 254 devices on the reg vlan , so raise the reg vlan
like 192.168.20.0/23.
Regards
Fabrice
Le 2017-03-08 à 08:08, Raphael Brasil a écrit :
How can I fix it?
LOG
Mar 8 10:06:20 PacketFence dhcpd: DHCPDISCOVER from 94:39:e5:20:ad:0d
via eth1: network
Hello sridhar,
if you want to enable packetfence on a ssid then it start with the
radius config that point to PacketFence'ip.
Then if your device is unreg then you will fall in the reg vlan and hit
the captive portal, then register and be disconnected to the ssid in
order to have a new
Hello Jes,
what i can suggest is to use snmp for deauth and from the pf server
capture snmp traffic to see what happen exactly (maybe community write
issue).
Also check the log in pfqueue.log , this is the place where you will see
error about the deauth.
Regards
Fabrice
Le 2017-03-02 à
Hello Eric,
what you need is to create a portal profile with a filter
connection_type is Ethernet-EAP and add the Ad source in this profile
and check autoregister.
With that the device will be autoreg and the role will be returned based
on the Ad source rules.
Regards
Fabrice
Le
Hello Bernardo,
the setup is really simple , install centos 7 minimal, disable selinux,
add the packetfence repo and do yum install packetfence
--enablerepo=packetfence
After that go on https://@ip:1443 and start the configurator.
That's it.
Also Scientlfic Linux 7.3 is not supported, so
We were wanting to use OpenVAS for both 'Posture Validation' at registration
and
for Post-registration vulnerability scanning to provide our students with a top
notch
safe environment.
We already monitor traffic on the network via SNORT probes and send alerts to
the PF server
via syslog
That is interesting.
It would be nice if 'Inverse' could integrate the PERL option into PF. I do not
have the necessary PERL knowhow to
even contemplate the task but I expect it would be fairly easy to achieve
looking at the synopsis of the package.
Andrew
-
