Hi Raffaele, > for us it is important to use 802.1x. > I have imported LG module from 3.1.0 version (in this moment we use 2.2.1) > and with a lots of tests with unregistered device I have this results: > Device is put correctly in registration vlan but there are not dhcp request > on interface of this vlan so device has not ip. > Moreover in packetfence log I see > > pf::WebAPI(12072) WARN: This switch model doesn't seem to implement 802.1X > or a degraded variant like MAC Authentication. Please let us know what > hardware you are using (pf::SNMP::NasPortToIfIndex)
This won't cause problems. It's just a warning that you are falling back to default NasPortToIfIndex translation which does a NAS-Port == ifIndex (and is usually right). I just got rid of the warning in our stable branch. Your dhcp problems are unrelated to 802.1X or this switch module's implementation. > > I have configurated HP procurve switch as HP E4800G switch. > In this case with unregistered device, registration vlan is correctly > selected and dhcp request are made on correct interface. > In packetfence log I see with this workaround: > > pf::WebAPI(10190) WARN: Unknown NAS-Port format. ifIndex translation could > have failed. VLAN re-assignment and switch/port accounting will be affected. > (pf::SNMP::ThreeCom::Switch_4200G::NasPortToIfIndex) > The NAS-Port to ifIndex translation on the 4200G is one of the worst I've seen and I'm sure that the ProCurve doesn't implement that. That said, the fallback when it can't translate is NAS-Port == ifIndex just like the LG module did. Can you send on the list a debug output of a RADIUS connection? radiusd -X Cheers! -- Olivier Bilodeau [email protected] :: +1.514.447.4918 *115 :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense. http://p.sf.net/sfu/splunk-d2dcopy1 _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
