Thanx a lot Enrico. I've already found this section, and I tried to create an advanced filter using a regex to filter by the mac address vendor prefix. It seems to work fine, but I'm still at the testing stage, because it seems that this filter can be applied only to a connection that already is present in the database (as mentioned in the documentation), and so, it may not apply if the device is a new one. But, as said, I'm still testing.
When done, I'll post the results! Another related question: is there any way to automatically set the "Is a Phone" flag to "Yes"? --- Gianluca Galleani - Sistec S.r.l. IT Engineer Mail: ggalle...@sistec.net<mailto:ggalle...@sistec.net> Supporto remoto (PC Windows): Teamviewer Quicksupport - Windows<https://get.teamviewer.com/rw6pa5h> Supporto remoto (Android): Teamviewer Quicksupport - Android<https://play.google.com/store/apps/details?id=com.teamviewer.quicksupport.market> Tel: +39 031 396312 (ext. 101) Fax: 031565433 From: Enrico Pasqualotto <epasqualo...@backloop.biz> Sent: 15 febbraio 2022 18:14 To: Gianluca Galleani - SISTEC S.r.l. <ggalle...@sistec.net>; packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] Automatic role assignment by Mac-Address prefix Check on this page: https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_connection_profiles<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fwww.packetfence.org%2Fdoc%2FPacketFence_Installation_Guide.html%23_connection_profiles&e=0b9c387f&h=d88ee363&f=n&p=y> Enrico. On 15/02/22 11:39, Gianluca Galleani - SISTEC S.r.l. wrote: Hello Enrico. At this time, I partially solved the problem triggering a security event by using a dhcp-relay diredcted to the packetfence interface. BTW, I think that your approach may be better. Where I can find some documentation about compiling the Advanced Filter? --- Gianluca Galleani - Sistec S.r.l. IT Engineer Mail: ggalle...@sistec.net<mailto:ggalle...@sistec.net> Supporto remoto (PC Windows): Teamviewer Quicksupport - Windows<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fget.teamviewer.com%2Frw6pa5h&e=0b9c387f&h=3a081029&f=n&p=y> Supporto remoto (Android): Teamviewer Quicksupport - Android<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.teamviewer.quicksupport.market&e=0b9c387f&h=8c58cbc4&f=n&p=y> Tel: +39 031 396312 (ext. 101) Fax: 031565433 From: Enrico Pasqualotto <epasqualo...@backloop.biz><mailto:epasqualo...@backloop.biz> Sent: 14 febbraio 2022 17:17 To: packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net> Cc: Gianluca Galleani - SISTEC S.r.l. <ggalle...@sistec.net><mailto:ggalle...@sistec.net> Subject: Re: [PacketFence-users] Automatic role assignment by Mac-Address prefix Hello, I think you can make a test using the advanced_filter feature into connection profile and make a profile for every mac vendor/type that assign a different VLAN. Enrico. On 10/02/22 15:32, Gianluca Galleani - SISTEC S.r.l. via PacketFence-users wrote: Hello everybody! As in the subject, I want to automatically identify some kind of nodes automatially by the mac-address prefix. Let me say, I have Axis IP Cameras, Wildix IP Phones, and so on... I already know that those devices need to be placed in a specific VLAN and get a specific policy, and also I already know that I can automatically identifiy them by the mac-address vendor prefix. I already tried to get this task using Null Authentication Source with Mac-Address fiter. I'm also trying to use a Security Event, but it seems to be ignored... At this time, my configuration is not inline, so my PacketFence server act as a RADIUS server for my corporate switches. Does anyone has already done this kind of configuration? Thanx a lot in advance! Regards --- Gianluca Galleani - Sistec S.r.l. IT Engineer Mail: ggalle...@sistec.net<mailto:ggalle...@sistec.net> ________________________________ Hai bisogno di assistenza tecnica? Registrati ed accedi al portale helpdesk.sistec.net<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fhelpdesk.sistec.net&e=0b9c387f&h=5fa1ad4e&f=n&p=y> oppure invia una mail a helpd...@sistec.net<mailto:helpd...@sistec.net> Per l'assistenza remota, utilizza Teamviewer scaricandolo dal seguente indirizzo: https://get.teamviewer.com/rw6pa5h<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fget.teamviewer.com%2Frw6pa5h&e=0b9c387f&h=3a081029&f=n&p=y> ________________________________ -- Questo messaggio è stato analizzato con Libra ESVA ed è risultato non infetto. This message has been checked by Libraesva ESG and is believed to be clean. -- Enrico Pasqualotto [https://www.backloop.biz/backloop_loghi/LOGO_BackLoop_small.png] Private mail: epasqualo...@backloop.biz<mailto:epasqualo...@backloop.biz> Office: +39 045 9971269 Le informazioni contenute in questo messaggio di posta elettronica e negli eventuali allegati sono riservate e confidenziali e sono indirizzate esclusivamente al destinatario. Si prega di non fare copia, inoltrare a terzi o conservare tale messaggio se non si è il legittimo destinatario dello stesso. Qualora questo messaggio sia stato ricevuto per errore, si prega di rinviarlo al mittente e di cancellarlo permanentemente dal proprio computer. The information contained in this message and in any attachment is intended exclusively for the recipient. If you are not the intended recipient you are hereby notified not to copy, save, disclose, or distribute it to any third party. If you erroneously received this message you are kindly requested to return it to the sender and eliminate it permanently from your computer. -- Questo messaggio e' stato analizzato con Libraesva ESG ed e' risultato non infetto. Clicca qui per segnalarlo come spam.<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fmercury.sistec.net%2Faction%2FD510B449E3.AF852%2Flearn-spam&e=0b9c387f&h=7c489b61&f=n&p=y> Clicca qui per metterlo in blacklist<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fmercury.sistec.net%2Faction%2FD510B449E3.AF852%2Fblacklist&e=0b9c387f&h=85228b63&f=n&p=y> ________________________________ Hai bisogno di assistenza tecnica? Registrati ed accedi al portale helpdesk.sistec.net<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fhelpdesk.sistec.net&e=0b9c387f&h=5fa1ad4e&f=n&p=y> oppure invia una mail a helpd...@sistec.net<mailto:helpd...@sistec.net> Per l'assistenza remota, utilizza Teamviewer scaricandolo dal seguente indirizzo: https://get.teamviewer.com/rw6pa5h<https://urlsand.esvalabs.com/?u=https%3A%2F%2Fget.teamviewer.com%2Frw6pa5h&e=0b9c387f&h=3a081029&f=n&p=y> ________________________________ -- Questo messaggio è stato analizzato con Libra ESVA ed è risultato non infetto. This message has been checked by Libraesva ESG and is believed to be clean. -- Enrico Pasqualotto [https://www.backloop.biz/backloop_loghi/LOGO_BackLoop_small.png] Private mail: epasqualo...@backloop.biz<mailto:epasqualo...@backloop.biz> Office: +39 045 9971269 Le informazioni contenute in questo messaggio di posta elettronica e negli eventuali allegati sono riservate e confidenziali e sono indirizzate esclusivamente al destinatario. Si prega di non fare copia, inoltrare a terzi o conservare tale messaggio se non si è il legittimo destinatario dello stesso. Qualora questo messaggio sia stato ricevuto per errore, si prega di rinviarlo al mittente e di cancellarlo permanentemente dal proprio computer. The information contained in this message and in any attachment is intended exclusively for the recipient. If you are not the intended recipient you are hereby notified not to copy, save, disclose, or distribute it to any third party. If you erroneously received this message you are kindly requested to return it to the sender and eliminate it permanently from your computer. -- Questo messaggio e' stato analizzato con Libraesva ESG ed e' risultato non infetto. Clicca qui per segnalarlo come spam.<https://mercury.sistec.net/action/B22A744A94.AF11F/learn-spam> Clicca qui per metterlo in blacklist<https://mercury.sistec.net/action/B22A744A94.AF11F/blacklist> ________________________________ Hai bisogno di assistenza tecnica? Registrati ed accedi al portale helpdesk.sistec.net<https://helpdesk.sistec.net> oppure invia una mail a helpd...@sistec.net<mailto:helpd...@sistec.net> Per l'assistenza remota, utilizza Teamviewer scaricandolo dal seguente indirizzo: https://get.teamviewer.com/rw6pa5h ________________________________ -- Questo messaggio e' stato analizzato da Libraesva ESG ed e' risultato non infetto. This message was scanned by Libraesva ESG and is believed to be clean. Per informazioni: http://helpdesk.sistec.net
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
