Hello Jeff,

Change your registration interface from:

[interface eth1.92]
ip=172.16.92.2
type=other,dns,portal
mask=255.255.255.0

to

[interface eth1.92]
ip=172.16.92.2
enforcement=vlan
type=internal
mask=255.255.255.0

/usr/local/pf/bin/pfcmd configreload hard

/usr/local/pf/bin/pfcmd service pf restart

Check again.

The dns + portal are native with the registration type in the interface.

Thanks,

Ludovic Zammit
lzam...@inverse.ca <mailto:lzam...@inverse.ca> ::  +1.514.447.4918 (x145) ::  
www.inverse.ca <http://www.inverse.ca/>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu <http://www.sogo.nu/>) 
and PacketFence (http://packetfence.org <http://packetfence.org/>) 




> On Aug 13, 2020, at 7:05 AM, Jeff Goodman via PacketFence-users 
> <packetfence-users@lists.sourceforge.net> wrote:
> 
> I have a fresh install on CentOS 7, PF 10.1.  I configured the management 
> interface and added a second interface (eth1) with registration / isolation 
> vlans.  This is a routed network scenario.  I also updated via pf-maint.pl
> 
> Tried adding dns to the registration vlan and restarting pfdns and pfdhcp and 
> then even rebooting.  PFDNS listens on IPV6 but not on IPV4.
> 
> [root@nac conf]# netstat -anp | grep :53
> tcp6       0      0 :::53                   :::*                    LISTEN    
>   2335/pfdns
> udp6       0      0 :::53                   :::*                              
>   2335/pfdns
> 
> PFDNS.log
> Aug 12 11:15:44 nac pfdns: .:54
> Aug 12 11:15:44 nac pfdns: .:53
> Aug 12 11:15:44 nac pfdns: 2020/08/12 11:15:44 [INFO] CoreDNS-0.9.9
> Aug 12 11:15:44 nac pfdns: 2020/08/12 11:15:44 [INFO] linux/amd64, go1.13.1,
> Aug 12 11:15:44 nac pfdns: CoreDNS-0.9.9
> Aug 12 11:15:44 nac pfdns: linux/amd64, go1.13.1,
> Aug 12 15:08:28 nac pfdns: 2020/08/12 15:08:28 [INFO] SIGTERM: Terminating 
> process
> Aug 12 15:08:30 nac pfdns: Using configuration set log level: INFO
> Aug 12 15:08:30 nac pfdns: Using configuration set processname: pfdns
> Aug 12 15:08:30 nac pfdns: Using configuration set log level: INFO
> Aug 12 15:08:30 nac pfdns: Using configuration set processname: pfdns
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Adding struct with address 0x1444470 to the pool" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Resource is not valid anymore. Was loaded at 0001-01-01 00:00:00 +0000 
> UTC" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Adding struct with address 0x1444660 to the pool" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Resource is not valid anymore. Was loaded at 0001-01-01 00:00:00 +0000 
> UTC" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Refreshing pfconfig pool" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Acquired lock for pfconfig pool" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Refresh got lock ID" pid=49719 LOG15_ERROR= LOG15_ERROR="Normalized odd 
> number of arguments by adding$
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Finished refresh of pfconfig pool" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Refresh is releasing lock ID" pid=49719 LOG15_ERROR= 
> LOG15_ERROR="Normalized odd number of arguments $
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Adding struct with address 0x1444870 to the pool" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Resource is not valid anymore. Was loaded at 0001-01-01 00:00:00 +0000 
> UTC" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Adding struct with address 0x1444870 to the pool" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Resource is not valid anymore. Was loaded at 0001-01-01 00:00:00 +0000 
> UTC" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Resource is not valid anymore. Was loaded at 0001-01-01 00:00:00 +0000 
> UTC" pid=49719
> Aug 12 15:08:30 nac pfdns[49719]: t=2020-08-12T15:08:30-0500 lvl=dbug 
> msg="Resource is not valid anymore. Was loaded at 0001-01-01 00:00:00 +0000 
> UTC" pid=49719
> 
> networks.conf
> [172.16.93.0]
> dns=172.16.93.2
> gateway=172.16.93.2
> domain-name=vlan-isolation.packetfence.org
> pool_backend=memory
> named=enabled
> dhcp_end=172.16.93.246
> netmask=255.255.255.0
> split_network=disabled
> netflow_accounting_enabled=disabled
> dhcp_start=172.16.93.10
> nat_enabled=disabled
> dhcp_max_lease_time=30
> fake_mac_enabled=disabled
> dhcpd=disabled
> type=vlan-isolation
> dhcp_default_lease_time=30
> coa=disabled
> 
> [172.16.120.0]
> network=172.16.120.0
> dns=172.16.92.2
> next_hop=172.16.92.1
> gateway=172.16.120.1
> domain-name=vlan-registration.packetfence.org
> pool_backend=memory
> named=enabled
> netmask=255.255.255.0
> dhcp_end=172.16.120.200
> algorithm=1
> dhcp_start=172.16.120.10
> dhcp_max_lease_time=60
> dhcpd=enabled
> fake_mac_enabled=disabled
> type=vlan-registration
> dhcp_default_lease_time=60
> 
> 
> pf.conf
> //interface eth1.92 is the registration portal interface.  I set it to 
> registration and added portal and dns daemons.
> //Network 172.16.120.0 is my routed registration network.
> 
> [advanced]
> # advanced.configurator
> #
> # Enable the Configurator and the Configurator API
> configurator=disabled
> 
> [interface eth0]
> ip=172.16.91.2
> type=management,portal,radius
> mask=255.255.255.0
> 
> [interface eth1.92]
> ip=172.16.92.2
> type=other,dns,portal
> mask=255.255.255.0
> 
> [interface eth1.93]
> enforcement=vlan
> ip=172.16.93.2
> type=internal
> mask=255.255.255.0
> 
> Thank you..
> 
> Jeff
> 
> 
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to