Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

2021-07-12 Thread Thapeli Matsabu via PacketFence-users
: RE: [PacketFence-users] VLAN Enforcement with MAC address authentication Hello Thapeli, According to radius.log, it looks like you have a SSL issue. Your node needs to have CA certificate that signed PacketFence RADIUS certificate in its certificate store or directly PacketFence RADIUS

Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

2021-07-12 Thread Quiniou-Briand, Nicolas via PacketFence-users
Hello Thapeli, According to radius.log, it looks like you have a SSL issue. Your node needs to have CA certificate that signed PacketFence RADIUS certificate in its certificate store or directly PacketFence RADIUS certificate. Nicolas Quiniou-Briand Product Support Engineer

Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

2021-07-09 Thread Quiniou-Briand, Nicolas via PacketFence-users
Hello, In packetfence.log you provided, I didn’t see any RADIUS request processed. Are you sure your PacketFence server received traffic from your switch ? Nicolas Quiniou-Briand Product Support Engineer [cid:image002.png@01D774D1.CA2CCEC0] Office: +33156696210 Akamai Technologies 145

Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

2021-07-08 Thread Fabrice Durand via PacketFence-users
t; > > > > > *From:* Zammit, Ludovic > *Sent:* 08 July 2021 09:28 PM > *To:* Thapeli Matsabu > *Cc:* packetfence-users@lists.sourceforge.net > *Subject:* Re: [PacketFence-users] VLAN Enforcement with MAC address > authentication > > > > Hello ther

Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

2021-07-08 Thread Thapeli Matsabu via PacketFence-users
? From: Zammit, Ludovic Sent: 06 July 2021 02:41 PM To: packetfence-users@lists.sourceforge.net Cc: Thapeli Matsabu Subject: Re: [PacketFence-users] VLAN Enforcement with MAC address authentication Hello there, Multiple things that you can verify. 1. Make sure in Auditing

Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

2021-07-08 Thread Zammit, Ludovic via PacketFence-users
mmit, Ludovic mailto:luza...@akamai.com>> > Sent: 06 July 2021 02:41 PM > To: packetfence-users@lists.sourceforge.net > <mailto:packetfence-users@lists.sourceforge.net> > Cc: Thapeli Matsabu mailto:thap...@dataproof.co.za>> > Subject: Re: [PacketFence-users] VLAN Enforcement

Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

2021-07-06 Thread Zammit, Ludovic via PacketFence-users
Hello there, Multiple things that you can verify. 1. Make sure in Auditing that the radius reply for that Mac address contain the Tunnel-Private-Group-Id = “1" 2. Re-check if the radius CoA is correctly configured to disconnect user (radius dynamic authorization) 3. Show us your

[PacketFence-users] VLAN Enforcement with MAC address authentication

2021-07-06 Thread Thapeli Matsabu via PacketFence-users
Hi all, I have been through this mailing trying to find if someone had this problem before, but I could not find anything similar. I am trying to configure VLAN Enforcement with MAC address authentication: * I am using Cisco 2950 with PF 10 on Centos 7 * I have configured 4

Re: [PacketFence-users] VLAN Enforcement

2017-06-14 Thread Fabrice Durand via PacketFence-users
Hello Rafael, vlan 10 is for registration so it's normal that you don't have internet access. Regards Fabrice Le 2017-06-12 à 16:14, Diogo Rafael via PacketFence-users a écrit : > > Hi, > > Im trying to implement VLAN Enforcement on my environment but im > having some troubles > > I have

[PacketFence-users] VLAN Enforcement

2017-06-12 Thread Diogo Rafael via PacketFence-users
Hi, Im trying to implement VLAN Enforcement on my environment but im having some troubles I have to interfaces eth0 that connects to the internet and eth1. On the interface eth1 i have 3 VLANs, VLAN 10 for registration, VLAN 20 for Isolation, and VLAN 30 is none. When a user try to

Re: [PacketFence-users] Vlan enforcement mode deployment

2016-07-30 Thread Eloge Bapfunya
@lists.sourceforge.net Objet : Re: [PacketFence-users] Vlan enforcement mode deployment -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Il 29/07/2016 03:14, Sallee, Jake ha scritto: > Eloge: > > I have been running PF in production for years with a very similar > setup to the one you have de

Re: [PacketFence-users] Vlan enforcement mode deployment

2016-07-30 Thread Eloge Bapfunya
. Best Regards, Eloge Bapfunya Network and Systems Administrator University of Burundi De : Kisakye Alex [mailto:kisa...@gmail.com] Envoyé : vendredi 29 juillet 2016 03:34 À : packetfence-users@lists.sourceforge.net Objet : Re: [PacketFence-users] Vlan enforcement mode

Re: [PacketFence-users] Vlan enforcement mode deployment

2016-07-29 Thread Damiano Verzulli
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Il 29/07/2016 03:14, Sallee, Jake ha scritto: > Eloge: > > I have been running PF in production for years with a very similar > setup to the one you have described. I Jake, I was tempted to answer myself with a "yes, it's possible.

Re: [PacketFence-users] Vlan enforcement mode deployment

2016-07-28 Thread Kisakye Alex
Bandwidth > System Engineer > University of Mary Hardin-Baylor > WWW.UMHB.EDU > > 900 College St. > Belton, Texas > 76513 > > Fone: 254-295-4658 > Phax: 254-295-4221 > ________ > From: Eloge Bapfunya <eloge.bapfu...@ub.edu.bi>

Re: [PacketFence-users] Vlan enforcement mode deployment

2016-07-28 Thread Sallee, Jake
900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 From: Eloge Bapfunya <eloge.bapfu...@ub.edu.bi> Sent: Thursday, July 28, 2016 2:57 AM To: packetfence-users@lists.sourceforge.net Subject: [PacketFence-users] Vlan enforcement mode depl

[PacketFence-users] Vlan enforcement mode deployment

2016-07-28 Thread Eloge Bapfunya
Hi All, I come to you for clarification about my project. We had started a project to deploy packetfence 3 years ago but I gave up as we found we were not ready for the big project. This time we are about to revive the project for our institution which is a university. We have an hybrid

Re: [PacketFence-users] VLAN-Enforcement-Mode - works as designed?

2013-11-15 Thread Fabrice DURAND
Hello Mark, where is connected the registration interface ? Is the packetfence network interface card is directly connected to the switch (like eth1 on a port access 302) ? Regards Fabrice Le 2013-11-13 04:54, Mark Gmeiner a écrit : So, I've got PacketFence up and running now - partly ...

[PacketFence-users] VLAN-Enforcement-Mode - works as designed?

2013-11-14 Thread Mark Gmeiner
So, I've got PacketFence up and running now - partly ... My gear: PF 4.0.6-2 on a Centos 6.4 x64 Server Extreme Networks Summit X460-48t, XOS 15.3.1.4-patch19, all ports configured into macregistration-vlan (tag 302) PacketFence properly learns all the nodes on my network, I can manually

Re: [PacketFence-users] Vlan enforcement

2013-05-23 Thread luis torres
Hi Francis, thank you for your support. Im afraid its still doesnt work as expected..., same behavior. Heres the packetfence.log. For a Reg or Unreg  Status: May 23 09:40:21 httpd.admin(0) INFO: loading Net::MAC::Vendor cache from /usr/local/pf/conf/oui.txt (pf::util::load_oui)

Re: [PacketFence-users] Vlan enforcement

2013-05-23 Thread luis torres
Hi Francis, this is also what happen when change the Node Status from Grace to Registered May 23 11:56:57 httpd.admin(0) INFO: loading Net::MAC::Vendor cache from /usr/local/pf/conf/oui.txt (pf::util::load_oui) May 23 11:57:13 httpd.admin(0) INFO: grace expired on violation 121 for node

Re: [PacketFence-users] Vlan enforcement

2013-05-23 Thread luis torres
Francis, Ignore my two last messages ..., its working now. I did forgot to remove the NodeBak.pm from the dir.  Cheers LT Citando luis torres luistor...@netc.pt: Hi Francis, this is also what happen when change the Node Status from Grace to Registered   May 23 11:56:57

Re: [PacketFence-users] Vlan enforcement

2013-05-22 Thread Francis Lachapelle
Hi Luis On 2013-05-20, at 7:03 AM, luis torres luistor...@netc.pt wrote: trought the browser , in nodes section, I can only enforce vlans on a specific node , between Register or Unregiste, Grace and Pending doesnt do nothing..., however if I give the cmd (/usr/local/pf/bin/pfcmd node edit

[PacketFence-users] Vlan enforcement

2013-05-20 Thread luis torres
Hi, trought the browser , in nodes section, I can only enforce vlans on a specific node , between Register or Unregiste, Grace and Pending doesnt do nothing..., however if I give the cmd (/usr/local/pf/bin/pfcmd node edit 00:0b:5d:23:02:4d pid=admin,status=grace)  on the linux with root user,

Re: [PacketFence-users] Vlan Enforcement setup via Web Config

2012-10-05 Thread Brian Candler
On Tue, Oct 02, 2012 at 10:46:46AM -0400, Carl Thomas Guething wrote: Can someone point me in the direction of where to go for information related to troubleshooting the Web Configurator No matter what I do it seems to want to setup inline mode. If I click vlan enforcement and

[PacketFence-users] vlan enforcement no longer working : (

2012-08-02 Thread Sallee, Stephen (Jake)
I am getting the following error in the log and my users are not getting their vlan switched when their status changes (reg/unreg/violation etc.) I masked out my MAC address ... I am feeling a bit extra security conscious for now : ) Aug 02 21:05:37 register.cgi(0) INFO: 10.11.30.15 -