Hello Micheal, You’re mine up two different technologies.
If you have a registration network, don’t use the web authentication with the url "Registration: http://172.20.252.250/Meraki::MR_v2 <http://172.20.252.250/Meraki::MR_v2>” but use Mac authentication that return the registration VLAN dynamically. Uncheck the External portal and check the Role VLAN by ID from your PacketFence switch configuration on PF. Thanks, Ludovic Zammit lzam...@inverse.ca <mailto:lzam...@inverse.ca> :: +1.514.447.4918 (x145) :: www.inverse.ca <http://www.inverse.ca/> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu <http://www.sogo.nu/>) and PacketFence (http://packetfence.org <http://packetfence.org/>) > On Jun 13, 2020, at 11:14 AM, Michael Brown via PacketFence-users > <packetfence-users@lists.sourceforge.net> wrote: > > Hey Guys, > > I am trying to get 802.1x with captive portal working for a byod wireless > network using MR42 and MR52 Meraki access points. > > PacketFence Version: ZEN 10.0.1 > > PF Management IP - 172.20.254.250 > PF Registration IP- 172.20.252.250 > PF Isolation IP - 172.20.251.250 > > Added the Meraki MR52 I am testing with as a switch on Policies and Access > Control > These are the settings I am using for the AP on PF > Definition: > Use CoA turned on > External Portal Enforcement turned on > > Roles: > Role mapping by VLAN ID > Registration: 252 > Isolation: 251 > > Role mapping by Web Auth URL > Registration: http://172.20.252.250/Meraki::MR_v2 > <http://172.20.252.250/Meraki::MR_v2> > > > On the client I join the wireless network. > I get an IP from PacketFence dhcp > Client Details: > IP: 172.20.252.12 > DNS: 172.20.252.250 > Gateway: 172.20.252.250 > > Web browser opens once I receive the IP from DHCP and tries to load > http://172.20.252.250/Meraki::MR_v2 <http://172.20.252.250/Meraki::MR_v2> but > it looks like it gets caught in a redirect loop. Web page says > ERR_TOO_MANY_REDIRECTS and I wind up with the the following in the address > bar of the page that tried to load: > http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://www.msftconnecttest.com/redirect > > <http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://172.20.252.250/Meraki::MR_v2/sidd6207a?&redirect_url=http://www.msftconnecttest.com/redirect> > > > Any ideas what I am missing? > > Thanks, > Mike > > > Sent from Yahoo Mail for iPhone <https://overview.mail.yahoo.com/?.src=iOS> > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
