Hi Robin

If your deauth method is RADIUS, just configure a RADIUS secret password,
use CoA, and your VLANS per role. There is no need to configure web
services or SNMP, controller ip address.

I think the radius connector should be disabled too

And of course don't forget to configure RADIUS profile on the unifi
controller.

Like Micheal said, Unifi is doing a massive reworking on the UI. I didn't
know the CoA option is now back on new UI, good news.

You can debug CoA on the UAPs with tcpdump so you can check if RADIUS
messages are reaching APs.

Enrique



El mar, 10 de sept de 2024, 12:24, Michael Preissner via PacketFence-users <
packetfence-users@lists.sourceforge.net> escribió:

> I know there are several folks with working solutions, but many of them
> rely on using the old legacy interface and/or outdated firmware versions.
> UI did recently re-introduce the RADIUS CoA to the New interface in the
> SSID configuration (might still be an EA feature).  I haven't had an
> opportunity to test yet, but we should be able to do it at this point
> without going back to the legacy interface.
>
> Mike
>
> On Tue, Sep 10, 2024 at 11:04 AM Robin Buhr (filder.cloud) via
> PacketFence-users <packetfence-users@lists.sourceforge.net> wrote:
>
>> Hello Community,
>>
>> I am new to the topic of Packetfence and find it really exciting. Currently, 
>> I am trying to overcome the following challenge: Dynamic VLAN assignment 
>> with Unifi APs/Controller(VM) after authentication via a captive portal 
>> provided by Packetfence. Since it is an open SSID provided by the Unifi AP, 
>> RADIUS (and CoA?) is not possible.
>> I am stuck at the point of Deauth. Is there a guide on how the "switch" in 
>> PF must be configured for Deauth to work? The protocol 
>> (SSH/SNMP/HTTP/S/RADIUS) doesn't matter to me. I simply want a device to be 
>> moved to another VLAN after successful authentication.
>>
>> --
>> Beste Grüße
>> Robin
>>
>> _______________________________________________
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to