Thanks for the response. 

Ultimately I read up and saw that freeradius is a standalone setup with a 
module tacked on to communicate to PF, so I ended up going to the freeradius 
support site and figuring out I should try radius -X to troubleshoot.  Fixed my 
problem.

Now...I'm using a Cisco 3560X switch for testing. (which appears to be 
confirmed to support 802.1x).

However from packetfence, I get a warning stating that RBAC is not supported.

Apr 26 14:56:12 pf::WebAPI(29404) INFO: MAC: [correct_mac], PID: 
[correct_user], Status: reg. Returned VLAN: [correct_vlan] 
(pf::vlan::fetchVlanForNode)
Apr 26 14:56:12 pf::WebAPI(29404) WARN: Role-based Network Access Control is 
not supported on network device type pf::SNMP::Cisco::Catalyst_3560.  
(pf::SNMP::supportsRoleBasedEnforcement)

Has anyone tried this on a 3560x switch?  If I'm fairly certain this works, 
would be a safe test to switch the switch type to something else, like a 3750 
to bypass the check?  I'm trying to figure out if theres a centralized list of 
supported 802.1x switches that packetfence is compatible with.  (is there such 
a list?)

Ideally I'd like to use a digital cert to deal with this but I'd be happy just 
getting this to work with user/pw right now.

-----Original Message-----
From: Olivier Bilodeau [mailto:obilod...@inverse.ca] 
Sent: Thursday, April 26, 2012 5:15 AM
To: packetfence-users@lists.sourceforge.net
Subject: Re: [PacketFence-users] Packetfence 802.1x radius configuration

On 04/25/2012 06:36 PM, Thomas Tsai wrote:
> I'm looking for documentation to go over the steps to setting up the radius 
> config for 802.1x configuration in packetfence.
> 
> I found the network devices configuration in the network device guide, but I 
> don't really see a big portion in the admin or quickstart guide (for zen), 
> that covers this.
> 
> Any suggestions?

It's under "FreeRADIUS Configuration" in the Administration guide.

--
Olivier Bilodeau
obilod...@inverse.ca  ::  +1.514.447.4918 *115  ::  www.inverse.ca Inverse inc. 
:: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and threat 
landscape has changed and how IT managers can respond. Discussions will include 
endpoint security, mobile security and the latest in malware threats. 
http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

**********************************************
Email Disclaimer:

This email, including attachments, may contain 
proprietary, confidential or privileged information. If you 
are not the intended recipient, please (i) do not use, 
disclose, save or retransmit this message or any 
attachments, (ii) alert the sender by reply email and (iii) 
destroy or delete this message and any attachments. 
Delivery of this email to a person other than the intended 
recipient(s) shall not constitute a waiver of privilege or 
confidentiality.

CP Investments, member FINRA and SIPC, serves as 
placement agent for investment products advised by 
Canyon Capital Advisors LLC. This email is not intended to 
be an offer to sell or a solicitation of an offer to buy any 
security in any jurisdiction. We review and retain 
electronic communications traveling through our network.

**********************************************

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to