Good morning, we are looking for the solution to this case. Currently, to block students' internet browsing from personal devices, we use a Captive Portal. This technology is no longer applicable as complete segregation of the device from any client, even the internal network, is a problem. We know that white-listing can be done but it is no longer sufficient, especially in the case of external services. Our idea is to use VLANs: one that allows complete internet access, the other with internet access but with very limited bandwidth (this way push notifications, RMM and updates continue to work). To switch from one VLAN to another we want to use the COA feature.
We did several tests with our Ruckus APs and PacketFence. We are very close to our goal, but 1% missing. If we disconnect and reconnect client COA works like a charm. We were therefore not able to obtain the same result when the client is already connected beacuse we don't find a way to make PacketFence check regularly if a user status changes (AD group change). Giuliano Da Dalt Ufficio informatico - Bearzi Tel. 0432-493983 Int. 983
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users