Hi,
I have a similar question...I have a wireless network with configurations:
Access Point: Meraki
Authentication: 802.1x (AD credential with NPS on Windows Server 2012R2)
DHCP: Windows Server 2012R2
Can I integrate PF into this network then PF can apply roles to groups as
well as compliance checking without creating a new CP SSID? I already have
PFZen with domain joined, working LDAP source... I looked for the document
but could not find the configuration for this. Or do I have to change
802.1x authentication setting to PF server?
Thanks
On Wed, Jun 20, 2018 at 8:13 AM, Durand fabrice via PacketFence-users <
packetfence-users@lists.sourceforge.net> wrote:
> Hello Geert,
>
> we just merged the unify code in PacketFence 8.1 and this version will be
> release next week.
>
> Regards
>
> Fabrice
>
>
>
> Le 2018-06-19 à 04:03, Geert Heremans a écrit :
>
> Hello Fabrice and all readers,
>
> I've got this working. Users are redirected to the CP page to register the
> device. This works but after registration the users must manually
> disconnect from the WiFi and Reconnect to be put inside the correct Vlan.
> It isn't changed automatically.
>
> Any Unifi AP users out there who are willing to share their configuration?
>
> Best regards
> Geert
>
> 2018-06-14 19:49 GMT+02:00 Fabrice Durand via PacketFence-users <
> packetfence-users@lists.sourceforge.net>:
>
>> You just need to join the PacketFence server to the domain.
>>
>> Le 2018-06-14 à 08:42, Geert Heremans via PacketFence-users a écrit :
>>
>> Thanks Fabrice,
>>
>> just to be sure. I use the PF radius server for the WPA2 authentication
>> then and not NPS on Windows Server 2016?
>>
>> 2018-06-14 14:39 GMT+02:00 Fabrice Durand via PacketFence-users <
>> packetfence-users@lists.sourceforge.net>:
>>
>>> Hello Geert,
>>>
>>> since wpa2-entreprise already authenticate the user (AD credential) then
>>> you can auto register device in this case and no need to have the captive
>>> portal.
>>>
>>> Regards
>>>
>>> Fabrice
>>>
>>> Le 2018-06-14 à 02:52, Geert Heremans via PacketFence-users a écrit :
>>>
>>> Hello everyone,
>>>
>>> I'm wondering if it's possible to setup my PF system so that I don't
>>> need a unsecured SSID with a Captive Portal behind it to allow the users to
>>> register their device.
>>>
>>> In my ideal setup I would have only one SSID with WPA2-Enterprise
>>> authentication. When one fo my domain users connects to this SSID without a
>>> registered device, he/she should be redirected to the registration portal.
>>> After a succesfull registration subsequent login's should automaticlly put
>>> the user in the designated VLAN.
>>>
>>> For what it's worth I'm using Ubiquito Unifi AP's on a Server 2016
>>> Domain controlled enviroment.
>>>
>>> Thanks you for your kind help.
>>>
>>> Best regards,
>>> Geert
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>>
>>>
>>> _______________________________________________
>>> PacketFence-users mailing
>>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>> --
>>> Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
>>> www.inverse.ca
>>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
>>> (http://packetfence.org)
>>>
>>>
>>> ------------------------------------------------------------
>>> ------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>> _______________________________________________
>>> PacketFence-users mailing list
>>> PacketFence-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>>
>> _______________________________________________
>> PacketFence-users mailing
>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>> --
>> Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
>> www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
>> (http://packetfence.org)
>>
>>
>> ------------------------------------------------------------
>> ------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> _______________________________________________
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
