Re: [PacketFence-users] Bandwidth statistics make no sense (Cisco 2960x)

2017-11-13 Thread Durand fabrice via PacketFence-users
Hello Cristian, i will be back to you tomorrow, with details and sql request to do. Regards Fabrice Le 2017-11-13 à 07:59, Cristian Mammoli via PacketFence-users a écrit : Hi Fabrice, could you please give me an hint to start looking whats going wrong here? How is bandwidth calculated and

Re: [PacketFence-users] auth request from wrong switch

2017-11-13 Thread Durand fabrice via PacketFence-users
Hi Darryl, can you also run radius in debug mode to see all the details ? Regards Fabrice Le 2017-11-13 à 16:22, Jason Sloan via PacketFence-users a écrit : A few questions. 172.16.0.196 - is that a switch at all? If so, is that switch on the same vlan? Have you reviewed your

Re: [PacketFence-users] Recommended Distribution / Version

2017-11-13 Thread Durand fabrice via PacketFence-users
Hello Jason, use Centos 7 , this is the version we use to develop. Also i did some fix on the pki to make it work under Centos 7, just tell me what is the issue and i will fix it. Le 2017-11-13 à 15:30, Jason Sloan via PacketFence-users a écrit : Wondering if there's a recommended

Re: [PacketFence-users] Understanding VLAN Filter

2017-11-13 Thread Durand fabrice via PacketFence-users
Hello Charles, Le 2017-11-13 à 14:27, Charles Rumford via PacketFence-users a écrit : I'm currently working on getting some VLAN filters together, but have a couple of questions: 1) Order of Processing Is there a deterministic order to which the different filters are processed? If so, how do

Re: [PacketFence-users] auth request from wrong switch

2017-11-13 Thread Jason Sloan via PacketFence-users
A few questions. 172.16.0.196 - is that a switch at all? If so, is that switch on the same vlan? Have you reviewed your spanning-tree blocks? Are you able to set a radius source interface? If so, is it set to the appropriate SVI / L3 link? Any NATs in the topology? On Mon, Nov 13, 2017 at 3:40

[PacketFence-users] Understanding VLAN Filter

2017-11-13 Thread Charles Rumford via PacketFence-users
I'm currently working on getting some VLAN filters together, but have a couple of questions: 1) Order of Processing Is there a deterministic order to which the different filters are processed? If so, how do I go about forcing the order? 2) Examples Are there are any examples of using either the

[PacketFence-users] Recommended Distribution / Version

2017-11-13 Thread Jason Sloan via PacketFence-users
Wondering if there's a recommended distribution for Packetfence. I initially tried with Centos 7, but I'm having trouble installing packetfence-pki. I poked around with Ubuntu LTS 16.04, but similar issues. I'd like to essentially do the following: - Use packetfence for RADIUS auth for

[PacketFence-users] auth request from wrong switch

2017-11-13 Thread Sokolowski, Darryl via PacketFence-users
Hi all, I have a strange problem I can't see the reason for, I have machines that get "stuck" unable to access the network seems like because the 802.1x authentication request is coming from a switch that the device isn't plugged into. In this case, I have a computer (18:66:da:1e:06:0a) plugged

Re: [PacketFence-users] Question about device-registration page

2017-11-13 Thread Sallee, Jake via PacketFence-users
All: Forgive me for jumping in here but I wanted to put in my $.02. Generally the user's role is how you assign the user's level of network access. If you give the user a way to self assign a role you will need to find a way to verify that user has the necessary rights to that role. Guests

Re: [PacketFence-users] Question about device-registration page

2017-11-13 Thread Fabrice Durand via PacketFence-users
Hello Marcus, in the device registration page there is no way to allow the end user to choose the role. You define it or PacketFence use the same one of the user. Also Julien did this sort of thing you want to use on the device registration page but for the captive portal.

[PacketFence-users] Question about device-registration page

2017-11-13 Thread Marcus Lauer via PacketFence-users
I am running PacketFence 7.3.0 on a RHEL7 system and have encountered some issues with device registration. First, registration though the https://hostname/device-registration page did not work at all until I installed the patch at

Re: [PacketFence-users] R: R: R: Switch Compatibility

2017-11-13 Thread Fabrice Durand via PacketFence-users
Hello Alessandro, i saw that cisco attributes are also compatible with the Zyxel switches. So if you choose Cisco_2960 as switch type to make a test. Regards Fabrice Le 2017-11-13 à 07:06, Alessandro Canella a écrit : > > Hello All, > >   > > I’ ve created new switch under PF\ folder. > >  

[PacketFence-users] R: R: R: Switch Compatibility

2017-11-13 Thread Alessandro Canella via PacketFence-users
Hello All, I' ve created new switch under PF\ folder. All seems fine, but no cli login. Switch Log reports 1 Nov 13 12:44:23 NO authentication: SSH authentication failure [username: newuser, IP address = 153.47.30.125] 2 Nov 13 12:44:23 WA authentication: Invalid Service Type: USER [

[PacketFence-users] AD Group Membership Match Intermittent

2017-11-13 Thread Jason Sloan via PacketFence-users
This is my first foray into Packetfence, but I've noticed some strange behavior testing with pfcmd for AD group membership. Running "pfcmd authentication testuser test123" twice (about 35 seconds apart) Authenticating against AD-USERS Authentication SUCCEEDED against AD-USERS (Authentication

Re: [PacketFence-users] Bandwidth statistics make no sense (Cisco 2960x)

2017-11-13 Thread Cristian Mammoli via PacketFence-users
Hi Fabrice, could you please give me an hint to start looking whats going wrong here? How is bandwidth calculated and where? Thanks in advance Il 19/10/2017 18:22, Cristian Mammoli via PacketFence-users ha scritto: If you mean PacketFence is 7.3.0 If you mean IOS: Cisco IOS Software, C2960X