Greetings Eloge,
I installed Packetfence at Uganda Christian University (UCU) around 2012
and is actually made of similar components PF, Ubiquiti Equipment at the
time we used inline which worked beautifully. Similar to Jake's setup we
were managing about 8,000 devices.
That setup has since been improved to vlan enforcement. If you like I can
point you to someone at UCU for assistance.

thanks
Alex

On Fri, Jul 29, 2016 at 11:14 AM, Sallee, Jake <jake.sal...@umhb.edu> wrote:

> Eloge:
>
>
> I have been running PF in production for years with a very similar setup
> to the one you have described.
>
>
> Yes; PF can do what you are trying to do, if you have the correct
> equipment.
>
>
> Check PF's compatibility list for your equipment to make sure it is
> supported.  But just about any equipment that supports SNMP can be used by
> PF.
>
>
> VLan enforcement is the best way to deploy PF in any environment with over
> a handful of users.  In InLine mode all the traffic from the users is sent
> through the PF box, even after the user is authenticated.
>
>
> This can cause a bottleneck if you have users that are bandwidth hungry or
> you have more than a few users simultaneously.
>
>
> With VLan enforcement the PF box is completely out of band and is able to
> service many times the number of users without any problems.
>
>
> My box is not super impressive and I do not have any problems with 8,000+
> simultaneous users.
>
>
> If you could drop off a simple network diagram as well as exactly what you
> are trying to accomplish it would be very helpful.
>
>
> You might be surprised at how versatile PF can be.
>
>
>
> Jake Sallee
> Godfather of Bandwidth
> System Engineer
> University of Mary Hardin-Baylor
> WWW.UMHB.EDU
>
> 900 College St.
> Belton, Texas
> 76513
>
> Fone: 254-295-4658
> Phax: 254-295-4221
> ________________________________
> From: Eloge Bapfunya <eloge.bapfu...@ub.edu.bi>
> Sent: Thursday, July 28, 2016 2:57 AM
> To: packetfence-users@lists.sourceforge.net
> Subject: [PacketFence-users] Vlan enforcement mode deployment
>
> Hi All,
> I come to you for clarification about my project. We had started a project
> to deploy packetfence 3 years ago but I gave up as we found we were not
> ready for the big project.
> This time we are about to revive the project for our institution which is
> a university.
> We have an hybrid network with WIFI and Wired connection with at some
> points cascaded switches with managed and unmanaged equipments.
> My worries is about to deploy the VLAN Enforcement mode with such network.
> Is there anyway a WIFI client can be switched from registration or
> isolation to data access within WIFI network controller which is connected
> to Ubiquiti Unifi AP. I think I miss some tips about how to manage such
> stuffs.
> My understanding is that with my actual topology, there is no way I can
> deploy such Enforcement VLAN mode with my current network (WIFI and Wired).
> If someone can give me clarification about how I can proceed to achieve my
> goal. I am aware about how inline mode works but I would like my
> Packetfence to controll access without being a gateway.
> Thank you in advance,
>
> Eloge B.
> University of Burundi
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
------------------------------------------------------------------------------
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to