Hello,

is the mac address is the same in dot1x and mac-auth ?
Do you have a ip phone between the windows computer and the switch ?

Do you have switch log ?

Regards
Fabrice

Le 2013-11-14 17:03, Thomas Tsai a écrit :
> I've combed the docs and the lists, and don't see this particular issue 
> raised.
>
> I'm running into the following issue:
>
> If I plug in a windows computer that is not signed in, PF does what I would 
> expect and performs machine authentication.  This works fine.  The vlan is 
> returned and everything is happy.
>
> However, after about another 10-15 seconds, I get a notice in packetfence.log 
> regarding another radius autz request conenctiong "WIRED_MAC_AUTH".  This 
> does the MAC authentication, and then throws the computer into the MACDETECT 
> vlan.   Is this supposed to happen?  I would think no, but apparently based 
> on some other threads, this happens.
>
> So my question is, how do people get around this issue?  I am doing machine 
> authentication to throw the client into a vlan where user identification can 
> occur with domain controllers.
>
> What am I missing here?    Could be an issue between keyboard and chair....
>
> Please help :-)
>
>
> **********************************************
> Email Disclaimer:
>
> This email, including attachments, may contain
> proprietary, confidential or privileged information. If you
> are not the intended recipient, please (i) do not use,
> disclose, save or retransmit this message or any
> attachments, (ii) alert the sender by reply email and (iii)
> destroy or delete this message and any attachments.
> Delivery of this email to a person other than the intended
> recipient(s) shall not constitute a waiver of privilege or
> confidentiality.
>
> CP Investments, member FINRA and SIPC, serves as
> placement agent for investment products advised by
> Canyon Capital Advisors LLC. This email is not intended to
> be an offer to sell or a solicitation of an offer to buy any
> security in any jurisdiction. We review and retain
> electronic communications traveling through our network.
>
> **********************************************
>
> ------------------------------------------------------------------------------
> DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
> OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
> Free app hosting. Or install the open source package on any LAMP server.
> Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
> http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users


-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)


------------------------------------------------------------------------------
DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
Free app hosting. Or install the open source package on any LAMP server.
Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to