Hello Diego That could also work in our environment . I'll take a look at this scenario next week when I'm back at the office. Thanks !!
Kind regards [cid:EmailHandtekeningCorporate_239e37bc-d675-44cf-b4ca-49a10eec9dcb.png] Pieter-Jan Lamont IT-Coördinator Toekomststraat 75 - 8790 Waregem Tel. +32 56 62 69 94 - pieterjan.lam...@sgsintpaulus.eu<mailto:pieterjan.lam...@sgsintpaulus.eu> From: Diego Garcia del Rio <garc...@gmail.com> Sent: donderdag 4 maart 2021 2:06 To: Lamont, Pieter-Jan <pieterjan.lam...@sgsintpaulus.eu> Cc: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] Ruckus Smartzone Hi pieter-Jan I am using the same scenario as you describe. Only that the unrecognized devices get directed to the captive portal directly. (packetfence assigns a registration vlan to unknown devices, then acts as a dhcp / dns server for that vlan and clients get presented the portal). Then the users just login using the ldap credentials and the Mac I associated to their account automatically The only requirement is to have a registration and isolation vlans on packetfence and that the same vlan can be reached directly by the aps (when you assign the proper vlan to th wifi clients) Especially on packetfence 10.2 you get the newest support for captive portal detection via dhcp which is not yet offered natively by ruckus when doing web auth. On Wed, Mar 3, 2021, 17:17 Lamont, Pieter-Jan <pieterjan.lam...@sgsintpaulus.eu<mailto:pieterjan.lam...@sgsintpaulus.eu>> wrote: Hello Diego Yes the mac encryption is disabled on the smartzone via SSH. Mac authentication would be great for our know devices , but not for the byod segment :( We would like to use the portal to authenticate students/teachers to our campus wifi. The link to Office365 via LDAPS (Azure Domain Services) is already working :) When transferring to the captive portal our ruckus adds a bunch of information to the link. I'll capture this tomorrow from my device. Then I'm sure the mac address of my device is added in this information. Version Smartzone is 5.2.1.0.515 Version PF 10.2 Kind regards [cid:image001.png@01D71103.12A75810] Pieter-Jan Lamont IT-Coördinator Toekomststraat 75 - 8790 Waregem Tel. +32 56 62 69 94 - pieterjan.lam...@sgsintpaulus.eu<mailto:pieterjan.lam...@sgsintpaulus.eu> From: Diego Garcia del Rio <garc...@gmail.com<mailto:garc...@gmail.com>> Sent: woensdag 3 maart 2021 17:34 To: packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net> Cc: Lamont, Pieter-Jan <pieterjan.lam...@sgsintpaulus.eu<mailto:pieterjan.lam...@sgsintpaulus.eu>> Subject: Re: [PacketFence-users] Ruckus Smartzone Hi Pieter, did you disable mac encryption on smartzone? Its weird that the mac is not being found. To be honest, I have not used the portal option myself yet so Im not of great help there. Any reason why you wouldnt do the mac authentication option with the portal served directly by packetfence? (Im guessing if you have a large campus or multiple campuses with a single smart zone and single packetfence.) I was hoping to test the web-auth soon, but I havent had much time. which version of smartzone are you using? cheers! On Tue, Mar 2, 2021 at 4:05 PM Lamont, Pieter-Jan via PacketFence-users <packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>> wrote: Hello Packetfence Community I'm trying to deploy a Ruckus SmartZone WebAuth configuration . I have followed the guide several times(Fresh Debian9 with apt-get installation and Packetfence ZEN) but didn't succeed the deployment.(6.24.1 - Network Devices Configuration Guide) When configuring the captive portal I can't go to http://ip-of-packetfence/RuckusSmartZone (Not implemented) but after changing this to http://ip-of-packetfence/Captive-portal , I'm seeing the portal. The user is guided to the captive portal but gets the "Your computer was not found in the PF Database" with his IP correctly but no MAC address (MAC 0). When enabling "Activate Preregistration" in the default connection Profile , the users gets the Username/password fields to login. But when entering the correct credentials, the users get a 502 bad gateway ... I have also tried to capture all data from the PF to the Ruckus Smartzone, but I see no traffic to or from the Smartzone. Already tried the new updated guide (https://github.com/garci66/packetfence/blob/9da2608f131780eb7d9cd64246c9a767868d119f/docs/network/networkdevice/ruckus_smartzone.asciidoc<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fgarci66%2Fpacketfence%2Fblob%2F9da2608f131780eb7d9cd64246c9a767868d119f%2Fdocs%2Fnetwork%2Fnetworkdevice%2Fruckus_smartzone.asciidoc&data=04%7C01%7Cpieterjan.lamont%40sgsintpaulus.eu%7C58fb4be947194cd2eaca08d8dea9a9c1%7Caf15916d7d7743f9b366ae98d0fe36be%7C0%7C0%7C637504167608800845%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=jfWRnTNDDT7szlBJqjAhTj6SgrMmg%2BrtTHPLm2cy0I4%3D&reserved=0>) but with the same outcome . Mac Authentication with the update guide works perfectly, but we are searching for the Captive portal solution (webauth) Is there someone with a working Web Auth on a Ruckus Smartzone that can help me this is issue , or anyone with the same problems? Kind regards Pieter-jan Lamont [cid:image001.png@01D71071.E84B5940] Pieter-Jan Lamont IT-Coördinator Toekomststraat 75 - 8790 Waregem Tel. +32 56 62 69 94 - pieterjan.lam...@sgsintpaulus.eu<mailto:pieterjan.lam...@sgsintpaulus.eu> _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/packetfence-users<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fpacketfence-users&data=04%7C01%7Cpieterjan.lamont%40sgsintpaulus.eu%7C58fb4be947194cd2eaca08d8dea9a9c1%7Caf15916d7d7743f9b366ae98d0fe36be%7C0%7C0%7C637504167608810837%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=L8jYUmZkMTEKvzCGad3Ku9bcNkyY%2Bz6RWvCMwt3sehA%3D&reserved=0>
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
