Hello John,
so first your 802.1x authentication failled because the device is not
able to recognize the radius certificate.
On the device side uncheck verify server certificate and retry.
Next you need to register the device in order to have a production vlan
instead of the registration.
When i look in the log there is no traces about a registration process,
i can just see 2 wire mac authentication.
Regards
Fabrice
Le 2017-10-30 à 11:22, [email protected] a écrit :
>
>
>
>
>
> *From:*Fabrice Durand via PacketFence-users
> [mailto:[email protected]]
> *Sent:* 30 October 2017 13:07
> *To:* [email protected]
> *Cc:* Fabrice Durand <[email protected]>
> *Subject:* Re: [PacketFence-users] Stuck on a packetfence implementation
>
>
>
> Hello John,
>
> i need a little bit of log.
>
> First radius log when the device connect:
>
> raddebug -f /usr/local/pf/var/run/radiusd.sock -t 3000
>
> Then the packetfence.log.
>
> Regards
>
> Fabrice
>
>
>
>
>
> Le 2017-10-30 à 07:33, john--- via PacketFence-users a écrit :
>
> Good day everyone,
>
>
>
> I have an issue with an installation of Packetfence that I just
> cant seem to work out. Everything seems to run fine, the user gets
> a login prompt, uses active directory to successfully login (MAB
> as dot1x fails), on the switch gets added to the registration VLAN
> and on the laptop is assigned an ip address in the correct VLAN.
> However, the switch port remains in registration and never changes
> to the user VLAN, so cannot communicate. If anyone has some time
> to help me out with this, that would be fantastic
>
>
>
> John
>
>
>
>
>
> ------------------------------------------------------------------------------
>
> Check out the vibrant tech community on one of the world's most
>
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
>
> _______________________________________________
>
> PacketFence-users mailing list
>
> [email protected]
> <mailto:[email protected]>
>
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
> --
> Fabrice Durand
> [email protected] <mailto:[email protected]> :: +1.514.447.4918 (x135) ::
> www.inverse.ca <http://www.inverse.ca>
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
> (http://packetfence.org)
--
Fabrice Durand
[email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
