Hello James,
can you run radius in debug mode and retry a connection, i would like to
see the radius request.
raddebug -f /usr/local/pf/var/run/radiusd.sock -t 3000
Regards
Fabrice
Le 2017-11-01 à 14:21, James Garcellano via PacketFence-users a écrit :
>
> Hello everyone,
>
>
>
> I would like to find out if the Netgear GSM4325PS (M4300 series)
> switch is supported with PacketFence.
>
>
>
> The documentation for support network switches state that the Netgear
> M-Series switches are supported for 802.1x Wired Authentication, so
> I’m assuming the configuration guidelines that are given should work.
>
>
>
> I have configured one such switch in a test lab that I put together.
> When I plug in a laptop, while monitoring the
> /usr/local/pf/log/packetfence.log, I see the following messages:
>
>
>
> Nov 1 18:18:33 packetfence-zen packetfence_httpd.aaa: httpd.aaa(2852)
> INFO: [mac:00:21:70:d8:ac:45] handling radius autz request: from
> switch_ip => (192.168.1.5), connection_type => Ethernet-EAP,switch_mac
> => (b0:b9:8a:46:3d:0e), mac => [00:21:70:d8:ac:45], port => 1,
> username => "PFDOMAIN\testme" (pf::radius::authorize)
>
> Nov 1 18:18:33 packetfence-zen packetfence_httpd.aaa: httpd.aaa(2852)
> ERROR: [mac:00:21:70:d8:ac:45] Wired 802.1X is not supported on switch
> type pf::Switch::PacketFence. Please let us know what hardware you are
> using. (pf::Switch::supportsWiredDot1x)
>
> Nov 1 18:18:33 packetfence-zen packetfence_httpd.aaa: httpd.aaa(2852)
> WARN: [mac:00:21:70:d8:ac:45] (192.168.1.5) Sending REJECT since
> switch is unsupported (pf::radius::_switchUnsupportedReply)
>
>
>
> 192.168.1.5 is the PacketFence server.
>
> 00:21:70:d8:ac:45 is a Dell laptop with Windows 10 configured with
> 802.1x Security and associated credentials.
>
>
>
> A similar setup is working with the same laptop connected to a Cisco
> 2960G series switch.
>
>
>
> If any more information is required, please let me know.
>
>
>
> Thank you all!
>
>
>
> James Garcellano
>
>
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
fdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
