Re: [PacketFence-users] tweaking the create users page

2015-10-13 Thread Morris, Andi
Thanks Derek, That’s been a really big help and I’m nearly there. What is the format for the date field? I’ve tried the following, but I get errors: The errors I get when creating a user are: Error! Expiration field is required Error! ‘expiration’ is not a valid value The values for dates

Re: [PacketFence-users] Packetfence with Cisco Meraki

2015-10-13 Thread Antoine Amacher
Hello Silas, The documentation to configure the Meraki with PacketFence is available here(p94-95): http://www.packetfence.org/downloads/PacketFence/doc/PacketFence_Network_Devices_Configuration_Guide-5.4.0.pdf The IP of the Meraki should be the IP of management you are using to connect the

[PacketFence-users] Send remote Suricata sensor alerts to PacketFence via syslog

2015-10-13 Thread Boley, Chris
I'm looking for the correct information to send syslog based alert data from a remote Suricata sensor to Packet fence. I'm unsure of how to make PacketFence know that it will be getting alerts via syslog . I've tried to find the appropriate documentation regarding this, however it seems a bit

[PacketFence-users] Packetfence with Cisco Meraki

2015-10-13 Thread Silas Namenya
Hi, We are new to packetfence and trying to setup packetfence with Meraki access points in webauth mode. Stuck at the point where to add switch on Packetfence config to add the new AP. How do I go about this setup, what is the IP of Meraki cloud controller and do I need more setting to get this

[PacketFence-users] Out of band without VLAN/switch config - only firewall

2015-10-13 Thread Björn Frostberg
Hi, Been trying to read the documentation but don't quite get if it's possible or "easy" to deploy Packetfence with firewall only integration. I basically only want user to sign in to a portal and when OK, API call to firewall to allow that user's IP. Using mainly Palo Alto FW. No integration to

Re: [PacketFence-users] pfdhcplistener

2015-10-13 Thread Derek Wuelfrath
Hello Chinmay, I’m looking at it and I’ll get back to you. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Oct 13, 2015, at 2:17 AM, Chinmay

Re: [PacketFence-users] Send remote Suricata sensor alerts to PacketFence via syslog

2015-10-13 Thread Derek Wuelfrath
Hello Chris, Sorry, I replied to your first message. I did exactly what you are looking for, but, using syslog-ng on the remote sensor. - You first need to configure Suricata to log to syslog (i think it is the default behavior) - You then need to configure syslog-ng to send a copy of the

Re: [PacketFence-users] Send remote Suricata sensor alerts to PacketFence via syslog

2015-10-13 Thread Boley, Chris
Thanks Derek! I will dig into this and let you know where I land. -Original Message- From: packetfence-users-requ...@lists.sourceforge.net [mailto:packetfence-users-requ...@lists.sourceforge.net] Sent: Tuesday, October 13, 2015 2:38 PM To: packetfence-users@lists.sourceforge.net

Re: [PacketFence-users] Packetfence with Cisco Meraki

2015-10-13 Thread Antoine Amacher
Silas, Without entering in detail about how the Meraki is sending his requests you could do the following. Configure your controller to send RADIUS requests to PacketFence, and then look in the logs/radius.log for message like "Error: Ignoring request to authentication address [...] from

Re: [PacketFence-users] Suricata alerts to Packet Fence (Derek Wuelfrath)

2015-10-13 Thread Boley, Chris
Sorry Derek, I neglected to follow the directions regarding subject line the first time round. It's vanilla FreeBSD 10.2 with Suricata running. It is not a combination of softwares. Thanks for your response. -Original Message- From: packetfence-users-requ...@lists.sourceforge.net

Re: [PacketFence-users] tweaking the create users page

2015-10-13 Thread Derek Wuelfrath
Andi, What is the “expiration” action type ? Can you send me the whole file so I see what you are trying to do. If you try to hide the “registration window” section use the followings: For the “actions” section, the followings: Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca ::

Re: [PacketFence-users] tweaking the create users page

2015-10-13 Thread Morris, Andi
Aha, I think I now see that this is not because of the format of the date, but because the ‘expiration’ field isn’t declared as an Action. From: Morris, Andi [mailto:amor...@cardiffmet.ac.uk] Sent: 13 October 2015 14:33 To: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users]

Re: [PacketFence-users] PacketFence-users Digest, Vol 90, Issue 36

2015-10-13 Thread Boley, Chris
Derek, yes it's a separate unit. FreeBSD 10.2 with Suricata running on it. No special suite of softwares. It's just the Suricata install. -Original Message- From: packetfence-users-requ...@lists.sourceforge.net [mailto:packetfence-users-requ...@lists.sourceforge.net] Sent: Tuesday,

Re: [PacketFence-users] Packetfence with Cisco Meraki

2015-10-13 Thread Sanya Silas
Thanks Antoine, I am accessing the webinterface via Meraki Cloud but there is also a smaller local page on the Meraki accessible by using my.Meraki.com while connected to the AP which I am able to resolve to an IP. Would this be the IP of the cloud controller or local AP web interface? Kind

Re: [PacketFence-users] dhcpd service not starting

2015-10-13 Thread Morgan, Darren
Thanks Fabrice, Worked perfectly. Regards Darren From: Durand fabrice [mailto:fdur...@inverse.ca] Sent: 12 October 2015 19:19 To: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] dhcpd service not starting Hello Darren, it looks that you define manually the isolation

Re: [PacketFence-users] Out of band without VLAN/switch config - only firewall

2015-10-13 Thread Durand fabrice
Hello Bjorn, there is probably a way to configure the palo alto firewall to use a captive portal. I found this documentation https://live.paloaltonetworks.com/twzvq79624/attachments/twzvq79624/ConfigurationArticles/920/1/How%20to%20Configure%20Captive%20Portal.pdf and you probably be able to

Re: [PacketFence-users] PF 5.40 pfsetvlan and snmptrapd BUG

2015-10-13 Thread ismael flavio silva
hello, ok.. works :) thanks I have a question... I was using the PF 5.3.1 and wanted to use nessus to scan the client They said they needed a patch on the PF 5.4.0 i need it? here the patch: https://patch-diff.githubusercontent.com/raw/inverse-inc/packetfence/pull/647.diff So in

Re: [PacketFence-users] PF 5.40 pfsetvlan and snmptrapd BUG

2015-10-13 Thread Durand fabrice
Hello, yes you need to apply the patch. Regards Fabrice Le 2015-10-13 17:50, ismael flavio silva a écrit : hello, ok.. works :) thanks I have a question... I was using the PF 5.3.1 and wanted to use nessus to scan the client They said they needed a patch on the PF 5.4.0 i need it?

Re: [PacketFence-users] Packetfence with Cisco Meraki

2015-10-13 Thread Michael Stone
Hi, I am also trying to get PF working with Meraki and have followed the instructions provided by Antoine. Everything seems to be configured correctly including the cloud IP address but I'm getting the following error in packetfence.log. Oct 14 11:35:02 httpd.portal(886) ERROR: Accessing hash