Re: [PacketFence-users] Supported standalone AP

[Spencer Hazell via PacketFence-users]

Thanks Gonzague.  Just to confirm….  Can I use Cisco Meraki MR33 on its own 
without the need of a controller? i.e.  MR33 > Switch > Packetfence



Spencer Hazell



[MD final master logos-02]

[cid:image002.jpg@01D22ABC.9B34C230]

IT Manager

01249 650441





[cid:image003.jpg@01D22ABC.9B34C230]



manderduffill.com



The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR




This email, together with any attachments, is for the exclusive and 
confidential use of the addressee(s) and may contain legal privileged 
information. Any other distribution, use or reproduction without the sender's 
prior consent is unauthorised and strictly prohibited. If you have received 
this message in error please notify the sender by email immediately and delete 
the message from your computer without making any copies. The opinions 
expressed in this email are not necessarily representative of Mander Duffill 
Limited and no representation is made. Mander Duffill is the trading name of 
Mander Duffill Limited. Company number 06962383, registered in England. 
Registered office: The Old Post Office, 41 - 43 Market Place, Chippenham, 
Wiltshire SN15 3HR, UK.

From: Gonzague Dambricourt [mailto:gonzaguedambrico...@gmail.com]
Sent: 24 November 2017 14:36
To: Spencer Hazell 
Cc: packetfence-users@lists.sourceforge.net; Fabrice Durand 
Subject: Re: [PacketFence-users] Supported standalone AP

Hey Spencer

Well you can use Cisco Meraki MR33 AP for example, it does. Or Ruckus Unleashed 
range does too in their last firmware updates


Le 24 nov. 2017 à 15:35, Spencer Hazell 
> a écrit :

Do you know of a “thick” AP that does support CoA?


Spencer Hazell







IT Manager

01249 650441









manderduffill.com



The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR




This email, together with any attachments, is for the exclusive and 
confidential use of the addressee(s) and may contain legal privileged 
information. Any other distribution, use or reproduction without the sender's 
prior consent is unauthorised and strictly prohibited. If you have received 
this message in error please notify the sender by email immediately and delete 
the message from your computer without making any copies. The opinions 
expressed in this email are not necessarily representative of Mander Duffill 
Limited and no representation is made. Mander Duffill is the trading name of 
Mander Duffill Limited. Company number 06962383, registered in England. 
Registered office: The Old Post Office, 41 - 43 Market Place, Chippenham, 
Wiltshire SN15 3HR, UK.

From: Fabrice Durand via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Sent: 24 November 2017 13:49
To: Gonzague Dambricourt 
>; 
packetfence-users@lists.sourceforge.net
Cc: Fabrice Durand >
Subject: Re: [PacketFence-users] Supported standalone AP

https://github.com/inverse-inc/packetfence/pull/2735

Le 2017-11-24 à 08:48, Gonzague Dambricourt a écrit :
Yeah for now . .UniFi doesn’t support CoA :(



Le 24 nov. 2017 à 14:46, Fabrice Durand via PacketFence-users 
>
 a écrit :

Hello Spencer,
you can use something like that:
https://www.ubnt.com/unifi/unifi-ap-ac-lite/
There is only a limitation with 802.1x (i hope Ubiquiti will fix it) but mac 
auth should be ok.
Regards
Fabrice


Le 2017-11-24 à 06:11, Spencer Hazell via PacketFence-users a écrit :
Hi

I have successfully configured my HP switches to work with packetfence and it 
works amazing!

However I’m after a single AP that will work with switch to provide the same 
functionality.  What choices do I have for acquiring a cheap AP (on its own) 
that will work with packetfence.

We are only a small company hence the reason for nothing too expensive – just 
an AP -> Switch (already have) -> Packetfence PC.

Thanks


Spencer Hazell







IT Manager

01249 650441









manderduffill.com



The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR




This email, together with any attachments, is for the exclusive and 
confidential use of the addressee(s) and may contain legal privileged 
information. Any other distribution, use or reproduction without the sender's 
prior consent is unauthorised and strictly prohibited. If you have received 
this message in error please notify the sender by email immediately and delete 
the message from your computer without making any copies. The opinions 
expressed in this email are not necessarily representative of Mander Duffill 
Limited and no representation is made. Mander Duffill is the trading name of 
Mander Duffill 

Re: [PacketFence-users] Supported standalone AP

[Spencer Hazell via PacketFence-users]

Do you know of a “thick” AP that does support CoA?


Spencer Hazell



[MD final master logos-02]

[cid:image002.jpg@01D22ABC.9B34C230]

IT Manager

01249 650441





[cid:image003.jpg@01D22ABC.9B34C230]



manderduffill.com



The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR




This email, together with any attachments, is for the exclusive and 
confidential use of the addressee(s) and may contain legal privileged 
information. Any other distribution, use or reproduction without the sender's 
prior consent is unauthorised and strictly prohibited. If you have received 
this message in error please notify the sender by email immediately and delete 
the message from your computer without making any copies. The opinions 
expressed in this email are not necessarily representative of Mander Duffill 
Limited and no representation is made. Mander Duffill is the trading name of 
Mander Duffill Limited. Company number 06962383, registered in England. 
Registered office: The Old Post Office, 41 - 43 Market Place, Chippenham, 
Wiltshire SN15 3HR, UK.

From: Fabrice Durand via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Sent: 24 November 2017 13:49
To: Gonzague Dambricourt ; 
packetfence-users@lists.sourceforge.net
Cc: Fabrice Durand 
Subject: Re: [PacketFence-users] Supported standalone AP


https://github.com/inverse-inc/packetfence/pull/2735

Le 2017-11-24 à 08:48, Gonzague Dambricourt a écrit :
Yeah for now . .UniFi doesn’t support CoA :(


Le 24 nov. 2017 à 14:46, Fabrice Durand via PacketFence-users 
>
 a écrit :

Hello Spencer,
you can use something like that:
https://www.ubnt.com/unifi/unifi-ap-ac-lite/
There is only a limitation with 802.1x (i hope Ubiquiti will fix it) but mac 
auth should be ok.
Regards
Fabrice


Le 2017-11-24 à 06:11, Spencer Hazell via PacketFence-users a écrit :
Hi

I have successfully configured my HP switches to work with packetfence and it 
works amazing!

However I’m after a single AP that will work with switch to provide the same 
functionality.  What choices do I have for acquiring a cheap AP (on its own) 
that will work with packetfence.

We are only a small company hence the reason for nothing too expensive – just 
an AP -> Switch (already have) -> Packetfence PC.

Thanks


Spencer Hazell







IT Manager

01249 650441









manderduffill.com



The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR




This email, together with any attachments, is for the exclusive and 
confidential use of the addressee(s) and may contain legal privileged 
information. Any other distribution, use or reproduction without the sender's 
prior consent is unauthorised and strictly prohibited. If you have received 
this message in error please notify the sender by email immediately and delete 
the message from your computer without making any copies. The opinions 
expressed in this email are not necessarily representative of Mander Duffill 
Limited and no representation is made. Mander Duffill is the trading name of 
Mander Duffill Limited. Company number 06962383, registered in England. 
Registered office: The Old Post Office, 41 - 43 Market Place, Chippenham, 
Wiltshire SN15 3HR, UK.





--

Check out the vibrant tech community on one of the world's most

engaging tech sites, Slashdot.org! http://sdm.link/slashdot




___

PacketFence-users mailing list

PacketFence-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/packetfence-users



--

Fabrice Durand

fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  
www.inverse.ca

Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) 
and PacketFence (http://packetfence.org)
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! 
http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users




--

Fabrice Durand

fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  
www.inverse.ca

Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)
--
Check out the vibrant tech community on one of the world's most

Re: [PacketFence-users] Supported standalone AP

[Gonzague Dambricourt via PacketFence-users]

Hey Spencer
Well you can use Cisco Meraki MR33 AP for example, it does. Or Ruckus
Unleashed range does too in their last firmware updates

On Fri, Nov 24, 2017 at 3:35 PM, Spencer Hazell 
wrote:

> Do you know of a “thick” AP that does support CoA?
>
>
>
>
>
> Spencer Hazell
>
>
>
> [image: MD final master logos-02]
>
> [image: cid:image002.jpg@01D22ABC.9B34C230]
>
> *IT Manager*
>
> 01249 650441
>
>
>
>
>
> [image: cid:image003.jpg@01D22ABC.9B34C230]
>
>
>
> manderduffill.com 
>
>
>
> The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR
> 
>
>
>
> This email, together with any attachments, is for the exclusive and
> confidential use of the addressee(s) and may contain legal privileged
> information. Any other distribution, use or reproduction without the
> sender's prior consent is unauthorised and strictly prohibited. If you have
> received this message in error please notify the sender by email
> immediately and delete the message from your computer without making any
> copies. The opinions expressed in this email are not necessarily
> representative of Mander Duffill Limited and no representation is made.
> Mander Duffill is the trading name of Mander Duffill Limited. Company
> number 06962383, registered in England. Registered office: The Old Post
> Office, 41 - 43 Market Place, Chippenham, Wiltshire SN15 3HR, UK
> 
> .
>
>
>
> *From:* Fabrice Durand via PacketFence-users [mailto:packetfence-users@
> lists.sourceforge.net]
> *Sent:* 24 November 2017 13:49
> *To:* Gonzague Dambricourt ;
> packetfence-users@lists.sourceforge.net
> *Cc:* Fabrice Durand 
> *Subject:* Re: [PacketFence-users] Supported standalone AP
>
>
>
> https://github.com/inverse-inc/packetfence/pull/2735
>
>
>
> Le 2017-11-24 à 08:48, Gonzague Dambricourt a écrit :
>
> Yeah for now . .UniFi doesn’t support CoA :(
>
>
>
> Le 24 nov. 2017 à 14:46, Fabrice Durand via PacketFence-users <
> packetfence-users@lists.sourceforge.net> a écrit :
>
>
>
> Hello Spencer,
>
> you can use something like that:
>
> https://www.ubnt.com/unifi/unifi-ap-ac-lite/
>
> There is only a limitation with 802.1x (i hope Ubiquiti will fix it) but
> mac auth should be ok.
>
> Regards
>
> Fabrice
>
>
>
>
>
> Le 2017-11-24 à 06:11, Spencer Hazell via PacketFence-users a écrit :
>
> Hi
>
>
>
> I have successfully configured my HP switches to work with packetfence and
> it works amazing!
>
>
>
> However I’m after a single AP that will work with switch to provide the
> same functionality.  What choices do I have for acquiring a cheap AP (on
> its own) that will work with packetfence.
>
>
>
> We are only a small company hence the reason for nothing too expensive –
> just an AP -> Switch (already have) -> Packetfence PC.
>
>
>
> Thanks
>
>
>
>
>
> Spencer Hazell
>
>
>
> 
>
> 
>
> *IT Manager*
>
> 01249 650441
>
>
>
>
>
> 
>
>
>
> manderduffill.com 
>
>
>
> The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR
> 
>
>
>
> This email, together with any attachments, is for the exclusive and
> confidential use of the addressee(s) and may contain legal privileged
> information. Any other distribution, use or reproduction without the
> sender's prior consent is unauthorised and strictly prohibited. If you have
> received this message in error please notify the sender by email
> immediately and delete the message from your computer without making any
> copies. The opinions expressed in this email are not necessarily
> representative of Mander Duffill Limited and no representation is made.
> Mander Duffill is the trading name of Mander Duffill Limited. Company
> number 06962383, registered in England. Registered office: The Old Post
> Office, 41 - 43 Market Place, Chippenham, Wiltshire SN15 3HR, UK
> 
> .
>
>
>
>
>
>
> --
>
> Check out the vibrant tech community on one of the world's most
>
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
>
> ___
>
> PacketFence-users mailing list
>
> PacketFence-users@lists.sourceforge.net
>
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
> --
>
> Fabrice Durand
>
> fdur...@inverse.ca ::  +1.514.447.4918 <+1%20514-447-4918> (x135) ::  
> www.inverse.ca
>
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
> 
> --
> Check out the vibrant tech community on one of the 

[PacketFence-users] USB-C docks and MAB

[Jes Kasper Klittum via PacketFence-users]

Hey guys,

I have a case running with Inverse, but just wanted to check if anyone else has 
gotten around this problem.

We have started using USB-C docks for some of our Lenovo ThinkPads and are 
getting into issues based on the fact that the docks have their own ethernet 
card, and thus their own MAC address.

When a computer hooks up, the computer sees the Thunderbolt docks ethernet card 
and tries to authenticate. As I have not registered the ethernet card of the 
dock, it fails to register and gets the registration VLAN.

If I register the dock MAC address, but leave it with no role, then when the 
computer connects it will successfully authenticate using Ethernet-EAP for the 
computer object, or by EAPTLS for the user object. Now Packetfence 6.5.1 will 
register the role on the MAC address, so the MAC address not inherits the role 
that is calculated based on EAP. If I then take another computer, that is not 
in the domain and try to log on using a built in local admin, not an AD 
account, then the computer gets online on the secure VLAN calculated before, 
because it now uses MAC Authentication Bypass - which is related to the MAC 
address.

The problem here is that the MAC address does not identify this single PC, it 
could be aby compatible PC that connects to this dock and they would get the 
secure LAN role

We do rely on MAB for other dumb devices, but they do not get access to our 
secure LAN.

How have you guys gotten around this?

Br,

Jes
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Supported standalone AP

[Fabrice Durand via PacketFence-users]

https://github.com/inverse-inc/packetfence/pull/2735


Le 2017-11-24 à 08:48, Gonzague Dambricourt a écrit :
> Yeah for now . .UniFi doesn’t support CoA :( 
>
>> Le 24 nov. 2017 à 14:46, Fabrice Durand via PacketFence-users
>> > > a écrit :
>>
>> Hello Spencer,
>>
>> you can use something like that:
>>
>> https://www.ubnt.com/unifi/unifi-ap-ac-lite/
>>
>> There is only a limitation with 802.1x (i hope Ubiquiti will fix it)
>> but mac auth should be ok.
>>
>> Regards
>>
>> Fabrice
>>
>>
>>
>> Le 2017-11-24 à 06:11, Spencer Hazell via PacketFence-users a écrit :
>>> Hi
>>>  
>>> I have successfully configured my HP switches to work with
>>> packetfence and it works amazing!
>>>  
>>> However I’m after a single AP that will work with switch to provide
>>> the same functionality.  What choices do I have for acquiring a
>>> cheap AP (on its own) that will work with packetfence.
>>>  
>>> We are only a small company hence the reason for nothing too
>>> expensive – just an AP -> Switch (already have) -> Packetfence PC.
>>>  
>>> Thanks
>>>  
>>>  
>>> Spencer Hazell
>>> 
>>>  
>>> 
>>> 
>>> 
>>> 
>>> *IT Manager*
>>> 01249 650441 
>>>  
>>> 
>>>  
>>> 
>>> 
>>>  
>>> manderduffill.com 
>>> 
>>>  
>>> The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR
>>>  
>>>
>>> 
>>> 
>>> 
>>> 
>>>
>>> This email, together with any attachments, is for the exclusive and
>>> confidential use of the addressee(s) and may contain legal
>>> privileged information. Any other distribution, use or reproduction
>>> without the sender's prior consent is unauthorised and strictly
>>> prohibited. If you have received this message in error please notify
>>> the sender by email immediately and delete the message from your
>>> computer without making any copies. The opinions expressed in this
>>> email are not necessarily representative of Mander Duffill Limited
>>> and no representation is made. Mander Duffill is the trading name of
>>> Mander Duffill Limited. Company number 06962383, registered in
>>> England. Registered office: The Old Post Office, 41 - 43 Market
>>> Place, Chippenham, Wiltshire SN15 3HR, UK.
>>>  
>>>
>>>
>>> --
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org ! 
>>> http://sdm.link/slashdot
>>>
>>>
>>> ___
>>> PacketFence-users mailing list
>>> PacketFence-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>> -- 
>> Fabrice Durand
>> fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>> (http://packetfence.org) 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org
>> ! 
>> http://sdm.link/slashdot___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> 
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>

-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Supported standalone AP

[Fabrice Durand via PacketFence-users]

Hello Spencer,

you can use something like that:

https://www.ubnt.com/unifi/unifi-ap-ac-lite/

There is only a limitation with 802.1x (i hope Ubiquiti will fix it) but
mac auth should be ok.

Regards

Fabrice



Le 2017-11-24 à 06:11, Spencer Hazell via PacketFence-users a écrit :
>
> Hi
>
>  
>
> I have successfully configured my HP switches to work with packetfence
> and it works amazing!
>
>  
>
> However I’m after a single AP that will work with switch to provide
> the same functionality.  What choices do I have for acquiring a cheap
> AP (on its own) that will work with packetfence.
>
>  
>
> We are only a small company hence the reason for nothing too expensive
> – just an AP -> Switch (already have) -> Packetfence PC.
>
>  
>
> Thanks
>
>  
>
>  
>
> Spencer Hazell
>
>   
>
>  
>
>   
>
> MD final master logos-02
>
>   
>
> cid:image002.jpg@01D22ABC.9B34C230
>
> *IT Manager*
>
> 01249 650441 
>
>  
>
>   
>
>  
>
>   
>
> cid:image003.jpg@01D22ABC.9B34C230
>
>  
>
> manderduffill.com 
>
>   
>
>  
>
> The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR
>
>  
>
>
>   
>   
>   
>   
>
> This email, together with any attachments, is for the exclusive and
> confidential use of the addressee(s) and may contain legal privileged
> information. Any other distribution, use or reproduction without the
> sender's prior consent is unauthorised and strictly prohibited. If you
> have received this message in error please notify the sender by email
> immediately and delete the message from your computer without making
> any copies. The opinions expressed in this email are not necessarily
> representative of Mander Duffill Limited and no representation is
> made. Mander Duffill is the trading name of Mander Duffill Limited.
> Company number 06962383, registered in England. Registered office: The
> Old Post Office, 41 - 43 Market Place, Chippenham, Wiltshire SN15 3HR, UK.
>
>  
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Supported standalone AP

[Spencer Hazell via PacketFence-users]

Hi

I have successfully configured my HP switches to work with packetfence and it 
works amazing!

However I'm after a single AP that will work with switch to provide the same 
functionality.  What choices do I have for acquiring a cheap AP (on its own) 
that will work with packetfence.

We are only a small company hence the reason for nothing too expensive - just 
an AP -> Switch (already have) -> Packetfence PC.

Thanks


Spencer Hazell



[MD final master logos-02]

[cid:image002.jpg@01D22ABC.9B34C230]

IT Manager

01249 650441





[cid:image003.jpg@01D22ABC.9B34C230]



manderduffill.com



The Old Post Office, 41 - 43 Market Place, Chippenham SN15 3HR




This email, together with any attachments, is for the exclusive and 
confidential use of the addressee(s) and may contain legal privileged 
information. Any other distribution, use or reproduction without the sender's 
prior consent is unauthorised and strictly prohibited. If you have received 
this message in error please notify the sender by email immediately and delete 
the message from your computer without making any copies. The opinions 
expressed in this email are not necessarily representative of Mander Duffill 
Limited and no representation is made. Mander Duffill is the trading name of 
Mander Duffill Limited. Company number 06962383, registered in England. 
Registered office: The Old Post Office, 41 - 43 Market Place, Chippenham, 
Wiltshire SN15 3HR, UK.

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users