Dear PacketFence Community, I am currently working on implementing Network Access Control using PacketFence in our university environment and would appreciate your guidance on configuring MAC Authentication with automated role assignment and Dynamic VLAN assignment.
Our objective is as follows: - Authenticate endpoint devices using MAC Authentication (MAB). - Identify and profile devices using Fingerbank integration. - Automatically assign appropriate PacketFence roles based on the detected device type or Fingerbank classification. - Dynamically place the authenticated devices into the appropriate VLAN using attributes. - Ensure that devices such as desktops, laptops, printers, IP phones, IoT devices, and other network appliances are assigned to different VLANs according to the assigned role. I would like to understand the recommended approach for configuring this workflow. Specifically, I have the following questions: 1. What is the recommended configuration to combine MAC Authentication with Fingerbank profiling? 2. Can PacketFence automatically assign roles based on Fingerbank device classification without requiring manual registration of each MAC address? 3. Which configuration files or policy settings should be modified to map Fingerbank device types to PacketFence roles? 4. How should Dynamic VLAN assignment be configured so that the VLAN is selected based on the assigned role? 5. Are there any best practices or example configurations for Aruba switches (or standards-based RADIUS switches) implementing this workflow? Our environment consists primarily of managed switches supporting 802.1X and MAC Authentication Bypass (MAB). Our goal is to minimize manual intervention while ensuring that endpoints are automatically classified and placed into the appropriate VLAN. Any documentation, configuration examples, or recommendations from the community would be greatly appreciated. Thank you for your time and support. Kind regards, Thirunavukkarasu TANUVAS
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
