subject:"\[PacketFence\-users\] Captive Portal"

[PacketFence-users] Captive Portal setting not working

2024-07-10 Thread Rafiq Shaikh via PacketFence-users

Hi,

We are trying to setup Packetfence as a UAM server and RADIUS server for the 
wifi captive portal.
In this setup we have OpenWifi (OpenWrt) AP configured to use packetfence IP as 
uam server and radius server.
On packetfence, we have created profile and switch configuration to handle 
messages coming from our AP.
When a wifi client connects to the AP, it is expected that the wifi client gets 
redirected to the uam (packetfence)
for login credentials. However we notice that the client did not get redirected 
to the login page instead it got authenticated
(RADIUS-Accept) by packetfence RADIUS.

I am sure we are missing some critical configuration, either on AP or on 
packetfence.

We checked on AP side and I think configuration looks correct except that I am 
not sure if the uam_server = 
is correct. Does it need additional paths after the IP address?

What might be wrong with my setup?

Why would RADIUS server accept client connection without client credentials?

Can you point me to a document that provides step-by-step captive portal 
configuration on packet fence?

Thanks in advance for your help.

Best Regards,
-Rafiq.


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Captive Portal - Google (OAuth 2) - iphone error

2024-06-12 Thread Diego Garcia del Rio via PacketFence-users

Hi Giovanni

indeed.. if you're using it for guest access then what you describe is
really the only viable option or just bypass the authentication at
all. Are you using the google sign in just to collect the email
addresses for guests? you could alternatively use the email login
where the user enters (manually) an email address.

On android devices the google login is sometimes an issue as the main
account gets selected automatically and might not be the one that the
user wants to use.

On my sites I stopped using google as an auhentication source (via
oAuth) due to these issues and the hassle created for end users.


On Wed, Jun 12, 2024 at 3:24 PM Giovanni Trapasso
 wrote:
>
> Hi Diego,
>
> Thanks for your reply.
>
> We are using this for our Guest SSID, we don't want our internal Google users 
> to use it.  Have not experienced any issues with Android clients.
>
> For anyone else who might be experiencing this blocking issue from Google we 
> wrote up a workaround for people using iPhone and Google.
>
> 1.Connect to Guest Wi-Fi Network: Go to your device's Wi-Fi settings and 
> connect to the Guest network.
> 2.Choose Google as Authenticator Provider: When prompted for 
> authentication, select "Google" as your authenticator provider
> 3.Agree to Terms: Accept the terms and conditions presented on the screen.
> 4.Bypass Access Block Page: If you encounter an access block page, simply 
> tap "Cancel" to proceed.
> 5.Opt for Offline Use: Select the option to use the internet "Without 
> Internet" or "Offline Mode" if prompted.
> 6.Open Safari and Enter URL: Launch Safari web browser and type in the 
> URL "captive.apple.com" in the address bar.
> 7.Sign in with Google Account: Follow the on-screen prompts to 
> authenticate using your Google account credentials.
>
> On Wed, Jun 12, 2024 at 12:08 PM Diego Garcia del Rio  
> wrote:
>>
>> the only way to get proper google authentication is using the ldap
>> integration and your own google workspace domain (asuming you want to
>> authenticate users from the ualberta.ca domain). It wont work for
>> generic gmail.com users though
>>
>> to do this, you need to enable Secure LDAP in the google workspace admin.
>>
>> Android users are also similarly affected, though in some cases, the
>> OS launches the full browser instead of the captive portal limited
>> browser.
>>
>>
>> On Wed, Jun 12, 2024 at 10:25 AM Giovanni Trapasso via
>> PacketFence-users  wrote:
>> >
>> > Hi Everyone,
>> >
>> > I just deployed a PacketFence captive portal for my guest wireless with 
>> > Google as one of my Authentication Sources.  I have started receiving 
>> > complaints when apple iphone users are trying to use the google option to 
>> > authenticate on my captive portal.  They press the Google button, they get 
>> > the acceptable use page but right after they press the accept button they 
>> > get an error from accounts.google.com.  The error is similar to this:
>> >
>> > "
>> > Access Blocked: Google appsheet's request does not comply with 
>> > Google's Policies
>> >
>> >  request does not comply with Google's 'Use secure browsers' 
>> > policy. if this app has a website, you can open a web browser and try 
>> > signing in from there. if you are attempting to access a wireless network, 
>> > Please follow these instructions.
>> >
>> > You can also contact the developer to let them know that their app must 
>> > comply with Google's 'Use secure browser' policy.
>> >
>> > Learn more about the error
>> >
>> > If you are developer of . See error details.
>> >
>> > Error: 403: disallowed_useragent
>> > "
>> >
>> > Of course this is due to a security policy Google is enforcing.  My 
>> > captive portal is working fine with all types of other devices, even the 
>> > Apple iPad, but Apple iPhones are seeing this issue.
>> >
>> > I am curious how many others are experiencing this issue and what they are 
>> > doing about this?  I have 2 other authentication sources for my guest 
>> > users to choose from so it might not be a big deal
>> > --
>> >
>> >
>> > ___
>> > PacketFence-users mailing list
>> > PacketFence-users@lists.sourceforge.net
>> > https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
> --
> ___
> Giovanni Trapasso
> Digital Networks and Data Center Services
> Information Services & Technology (IST)
> 269 General Services Building
> University of Alberta
> Edmonton, Alberta, Canada
> T6G 2E5
>
> Phone: (780) 492-4696
>
> To open a Technical Service call with IST go to:
> https://ist.ualberta.ca/
>
> ** This communication is intended for the use of the recipient to whom it is 
> addressed, and may contain confidential, personal, and/or privileged 
> information. Please contact me immediately if you are not the intended 
> recipient of this communication, and do not copy, distribute, or take action 
> relying on it. Any

Re: [PacketFence-users] Captive Portal - Google (OAuth 2) - iphone error

2024-06-12 Thread Giovanni Trapasso via PacketFence-users

Hi Diego,

In the past we only had a button to allow people on our Guest network.  I
did not like it but people wanted things to be easy for guests to get
access to our campus.  Another issue is we have students using the Guest
network instead of Eduroam, no clue why because we throttle the Guest
network quite a bit.

Anyways we wanted to get a Captive Portal running so that we can force
people to put some kind of credentials, we really don't care who they are
and we will never reach out to them unless they did something wrong on our
network.  But the added benefit is we can now reject our students
university gmail account and hopefully get them to use Eduroam.

Just additional weirdness regarding iPhone and Google.  iPads don't have
this issue.  you connect, you press Google, you are redirected to
accounts.google.com and no issues with Google blocking.

On Wed, Jun 12, 2024 at 1:38 PM Diego Garcia del Rio 
wrote:

> Hi Giovanni
>
> indeed.. if you're using it for guest access then what you describe is
> really the only viable option or just bypass the authentication at
> all. Are you using the google sign in just to collect the email
> addresses for guests? you could alternatively use the email login
> where the user enters (manually) an email address.
>
> On android devices the google login is sometimes an issue as the main
> account gets selected automatically and might not be the one that the
> user wants to use.
>
> On my sites I stopped using google as an auhentication source (via
> oAuth) due to these issues and the hassle created for end users.
>
>
> On Wed, Jun 12, 2024 at 3:24 PM Giovanni Trapasso
>  wrote:
> >
> > Hi Diego,
> >
> > Thanks for your reply.
> >
> > We are using this for our Guest SSID, we don't want our internal Google
> users to use it.  Have not experienced any issues with Android clients.
> >
> > For anyone else who might be experiencing this blocking issue from
> Google we wrote up a workaround for people using iPhone and Google.
> >
> > 1.Connect to Guest Wi-Fi Network: Go to your device's Wi-Fi settings
> and connect to the Guest network.
> > 2.Choose Google as Authenticator Provider: When prompted for
> authentication, select "Google" as your authenticator provider
> > 3.Agree to Terms: Accept the terms and conditions presented on the
> screen.
> > 4.Bypass Access Block Page: If you encounter an access block page,
> simply tap "Cancel" to proceed.
> > 5.Opt for Offline Use: Select the option to use the internet
> "Without Internet" or "Offline Mode" if prompted.
> > 6.Open Safari and Enter URL: Launch Safari web browser and type in
> the URL "captive.apple.com" in the address bar.
> > 7.Sign in with Google Account: Follow the on-screen prompts to
> authenticate using your Google account credentials.
> >
> > On Wed, Jun 12, 2024 at 12:08 PM Diego Garcia del Rio 
> wrote:
> >>
> >> the only way to get proper google authentication is using the ldap
> >> integration and your own google workspace domain (asuming you want to
> >> authenticate users from the ualberta.ca domain). It wont work for
> >> generic gmail.com users though
> >>
> >> to do this, you need to enable Secure LDAP in the google workspace
> admin.
> >>
> >> Android users are also similarly affected, though in some cases, the
> >> OS launches the full browser instead of the captive portal limited
> >> browser.
> >>
> >>
> >> On Wed, Jun 12, 2024 at 10:25 AM Giovanni Trapasso via
> >> PacketFence-users  wrote:
> >> >
> >> > Hi Everyone,
> >> >
> >> > I just deployed a PacketFence captive portal for my guest wireless
> with Google as one of my Authentication Sources.  I have started receiving
> complaints when apple iphone users are trying to use the google option to
> authenticate on my captive portal.  They press the Google button, they get
> the acceptable use page but right after they press the accept button they
> get an error from accounts.google.com.  The error is similar to this:
> >> >
> >> > "
> >> > Access Blocked: Google appsheet's request does not comply
> with Google's Policies
> >> >
> >> >  request does not comply with Google's 'Use secure
> browsers' policy. if this app has a website, you can open a web browser and
> try signing in from there. if you are attempting to access a wireless
> network, Please follow these instructions.
> >> >
> >> > You can also contact the developer to let them know that their app
> must comply with Google's 'Use secure browser' policy.
> >> >
> >> > Learn more about the error
> >> >
> >> > If you are developer of . See error details.
> >> >
> >> > Error: 403: disallowed_useragent
> >> > "
> >> >
> >> > Of course this is due to a security policy Google is enforcing.  My
> captive portal is working fine with all types of other devices, even the
> Apple iPad, but Apple iPhones are seeing this issue.
> >> >
> >> > I am curious how many others are experiencing this issue and what
> they are doing about this?  I have 2 other authentication

Re: [PacketFence-users] Captive Portal - Google (OAuth 2) - iphone error

2024-06-12 Thread Giovanni Trapasso via PacketFence-users

Hi Diego,

Thanks for your reply.

We are using this for our Guest SSID, we don't want our internal Google
users to use it.  Have not experienced any issues with Android clients.

For anyone else who might be experiencing this blocking issue from Google
we wrote up a workaround for people using iPhone and Google.

1.Connect to Guest Wi-Fi Network: Go to your device's Wi-Fi settings
and connect to the Guest network.
2.Choose Google as Authenticator Provider: When prompted for
authentication, select "Google" as your authenticator provider
3.Agree to Terms: Accept the terms and conditions presented on the
screen.
4.Bypass Access Block Page: If you encounter an access block page,
simply tap "Cancel" to proceed.
5.Opt for Offline Use: Select the option to use the internet "Without
Internet" or "Offline Mode" if prompted.
6.Open Safari and Enter URL: Launch Safari web browser and type in the
URL "captive.apple.com" in the address bar.
7.Sign in with Google Account: Follow the on-screen prompts to
authenticate using your Google account credentials.

On Wed, Jun 12, 2024 at 12:08 PM Diego Garcia del Rio 
wrote:

> the only way to get proper google authentication is using the ldap
> integration and your own google workspace domain (asuming you want to
> authenticate users from the ualberta.ca domain). It wont work for
> generic gmail.com users though
>
> to do this, you need to enable Secure LDAP in the google workspace admin.
>
> Android users are also similarly affected, though in some cases, the
> OS launches the full browser instead of the captive portal limited
> browser.
>
>
> On Wed, Jun 12, 2024 at 10:25 AM Giovanni Trapasso via
> PacketFence-users  wrote:
> >
> > Hi Everyone,
> >
> > I just deployed a PacketFence captive portal for my guest wireless with
> Google as one of my Authentication Sources.  I have started receiving
> complaints when apple iphone users are trying to use the google option to
> authenticate on my captive portal.  They press the Google button, they get
> the acceptable use page but right after they press the accept button they
> get an error from accounts.google.com.  The error is similar to this:
> >
> > "
> > Access Blocked: Google appsheet's request does not comply
> with Google's Policies
> >
> >  request does not comply with Google's 'Use secure browsers'
> policy. if this app has a website, you can open a web browser and try
> signing in from there. if you are attempting to access a wireless network,
> Please follow these instructions.
> >
> > You can also contact the developer to let them know that their app must
> comply with Google's 'Use secure browser' policy.
> >
> > Learn more about the error
> >
> > If you are developer of . See error details.
> >
> > Error: 403: disallowed_useragent
> > "
> >
> > Of course this is due to a security policy Google is enforcing.  My
> captive portal is working fine with all types of other devices, even the
> Apple iPad, but Apple iPhones are seeing this issue.
> >
> > I am curious how many others are experiencing this issue and what they
> are doing about this?  I have 2 other authentication sources for my guest
> users to choose from so it might not be a big deal
> > --
> >
> >
> > ___
> > PacketFence-users mailing list
> > PacketFence-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/packetfence-users
>

-- 
___
Giovanni Trapasso
Digital Networks and Data Center Services
Information Services & Technology (IST)
269 General Services Building
University of Alberta
Edmonton, Alberta, Canada
T6G 2E5

Phone: (780) 492-4696

To open a Technical Service call with IST go to:
https://ist.ualberta.ca/ 

** This communication is intended for the use of the recipient to whom it
is addressed, and may contain confidential, personal, and/or privileged
information. Please contact me immediately if you are not the intended
recipient of this communication, and do not copy, distribute, or take
action relying on it. Any communication received in error, or subsequent
reply, should be deleted or destroyed.**
___
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Captive Portal - Google (OAuth 2) - iphone error

2024-06-12 Thread Diego Garcia del Rio via PacketFence-users

the only way to get proper google authentication is using the ldap
integration and your own google workspace domain (asuming you want to
authenticate users from the ualberta.ca domain). It wont work for
generic gmail.com users though

to do this, you need to enable Secure LDAP in the google workspace admin.

Android users are also similarly affected, though in some cases, the
OS launches the full browser instead of the captive portal limited
browser.


On Wed, Jun 12, 2024 at 10:25 AM Giovanni Trapasso via
PacketFence-users  wrote:
>
> Hi Everyone,
>
> I just deployed a PacketFence captive portal for my guest wireless with 
> Google as one of my Authentication Sources.  I have started receiving 
> complaints when apple iphone users are trying to use the google option to 
> authenticate on my captive portal.  They press the Google button, they get 
> the acceptable use page but right after they press the accept button they get 
> an error from accounts.google.com.  The error is similar to this:
>
> "
> Access Blocked: Google appsheet's request does not comply with 
> Google's Policies
>
>  request does not comply with Google's 'Use secure browsers' 
> policy. if this app has a website, you can open a web browser and try signing 
> in from there. if you are attempting to access a wireless network, Please 
> follow these instructions.
>
> You can also contact the developer to let them know that their app must 
> comply with Google's 'Use secure browser' policy.
>
> Learn more about the error
>
> If you are developer of . See error details.
>
> Error: 403: disallowed_useragent
> "
>
> Of course this is due to a security policy Google is enforcing.  My captive 
> portal is working fine with all types of other devices, even the Apple iPad, 
> but Apple iPhones are seeing this issue.
>
> I am curious how many others are experiencing this issue and what they are 
> doing about this?  I have 2 other authentication sources for my guest users 
> to choose from so it might not be a big deal
> --
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Captive Portal Cannot show

2024-06-12 Thread Stephen Winata via PacketFence-users

Can someone help me with the captive portal i use packet fence zen 13.1 i
have some problem with the captive portal so i already follow documentation
about packet fence and im stuck in captive portal it just won’t show i
already got the vlan guest but every time i search
https://.packetfence.or… 
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Captive Portal - Google (OAuth 2) - iphone error

2024-06-12 Thread Giovanni Trapasso via PacketFence-users

Hi Everyone,

I just deployed a PacketFence captive portal for my guest wireless with
Google as one of my Authentication Sources.  I have started receiving
complaints when apple iphone users are trying to use the google option
to authenticate on my captive portal.  They press the Google button, they
get the acceptable use page but right after they press the accept button
they get an error from accounts.google.com.  The error is similar to this:

"
Access Blocked: Google appsheet's request does not comply with
Google's Policies

 request does not comply with Google's 'Use secure browsers'
policy. if this app has a website, you can open a web browser and try
signing in from there. if you are attempting to access a wireless network,
Please follow these instructions.

You can also contact the developer to let them know that their app must
comply with Google's 'Use secure browser' policy.

Learn more about the error

If you are developer of . See error details.

Error: 403: disallowed_useragent
"

Of course this is due to a security policy Google is enforcing.  My captive
portal is working fine with all types of other devices, even the Apple
iPad, but Apple iPhones are seeing this issue.

I am curious how many others are experiencing this issue and what they are
doing about this?  I have 2 other authentication sources for my guest users
to choose from so it might not be a big deal
--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] captive portal after 10 min of inactivity

2024-05-15 Thread Fabrice Durand via PacketFence-users

You can configure the the idle-timeout on the AP/Controller side to 10
minutes , configure the accounting too and on the PacketFence side in the
connection profile enable "Automatically deregister devices on accounting
stop"

Le mer. 15 mai 2024 à 13:27, leonardo.izzo--- via PacketFence-users <
packetfence-users@lists.sourceforge.net> a écrit :

> Hi, the director of the school where I have to configure PF would like
> that after authenticating with a captive portal from a browser with Google
> Workstation credentials, after 10 minutes of inactivity this captive portal
> appears again. This is because they have many devices that do not belong to
> a specific teacher, but can pass from one teacher to another throughout the
> day. How can I solve it? Thank you
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] captive portal after 10 min of inactivity

2024-05-15 Thread leonida368--- via PacketFence-users

Hi, the director of the school where I have to configure PF would like that
after authenticating with a captive portal from a browser with Google
Workstation credentials, after 10 minutes of inactivity this captive portal
appears again. This is because they have many devices that do not belong to
a specific teacher, but can pass from one teacher to another throughout the
day. How can I solve it? Thank you

___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] captive portal after 10 min of inactivity

2024-05-15 Thread leonardo.izzo--- via PacketFence-users

Hi, the director of the school where I have to configure PF would like that
after authenticating with a captive portal from a browser with Google
Workstation credentials, after 10 minutes of inactivity this captive portal
appears again. This is because they have many devices that do not belong to
a specific teacher, but can pass from one teacher to another throughout the
day. How can I solve it? Thank you

 

___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Captive Portal is only accessible when iptables is disabled

2024-04-10 Thread Daniel Zook via PacketFence-users

Hi Eric,

I saw your post from 8/21/23:
https://sourceforge.net/p/packetfence/mailman/message/37887654/

I did not experience the problem on our test server (ZEN, 13.1.0), but I
ran into the same issue with a brand-new cluster install (ISO 13.1.0).  I
found that it is because the DNS servers are not being allowed inbound.

If you or anyone else knows what iptables entry is required, please share,
thanks.
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Captive Portal is only accessible when iptables is disabled

2024-04-10 Thread Daniel Zook via PacketFence-users

I compared the iptables.conf file between the ZEN and the ISO/Cluster
install, and they are exactly the same.  They both allow DNS inbound
via these entries:

:input-internal-vlan-if - [0:0]
# DNS
-A input-internal-vlan-if --protocol tcp --match tcp --dport 53  --jump ACCEPT
-A input-internal-vlan-if --protocol udp --match udp --dport 53  --jump ACCEPT


I discovered that DNS only fails in a cluster in certain scenarios.  I
tested it by performing a lookup from a client in the registration
network while specifying the DNS server IP to use (e.g. nslookup
pf1.emu.edu 10.9.0.2)

iptables running on pf1 only
Pf1: succeeds
Pf2: succeeds
Pf3: failed
Pfcluster: succeeded

iptables running on pf2 only
Pf1: failed
Pf2: succeeded
Pf3: failed
Pfcluster: failed

iptables running on pf3 only
Pf1: succeeded
Pf2: failed
Pf3: failed
Pfcluster: succeeded

I'm baffled.  Has anyone else experienced this?  Should I report this
as an issue on GitHub?
(Version 13.1, fresh install from PacketFence ISO)


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Captive Portal or DNS Enforcement

2024-03-30 Thread Angela Foster via PacketFence-users

Hello,

I am trying to implement PacketFence in a way that will force all connected 
clients to an external URL. Currently, I don't really need these devices to go 
through any kind of registration process - the fact that they are in the VLAN 
talking to PacketFence is enough reason to force the clients to do this. For my 
use case, the VLAN provisioning is being done outside of PacketFence. Ie, once 
a client connects to the external URL and completes what they need to there, 
the VLAN will be reprovisioned by another server and service. Is there a way to 
implement inline mode, and force all users - registered or not - to an external 
URL? Or do I need to use DNS Enforcement with another device serving as the 
gateway to the VLAN to achieve this?

I currently have PacketFence Zen 13.1 installed and running. Appreciate any 
guidance!

Angela




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Captive Portal Aruba Switch

2024-03-05 Thread Westfalia Spielgeräte GmbH

Hello,

I am attempting to achieve a Captive Portal setup with PacketFence for external
users using Aruba Switches. I have successfully configured authentication via
Active Directory for internal computers and users, which is functioning
properly. However, I am probably encountering an issue with the Switch
configuration, as the Captive Portal isn't displayed automatically.

My Aruba 2540 Switch is configured as follows:

snmpv3 enable
snmpv3 restricted-access
snmpv3 group managerpriv user "packetfence" sec-model ver3
snmpv3 notify "Packetfencenotify" tagvalue "xx" type inform
snmpv3 targetaddress "PacketfenceTargetaddress" params "x"
172.25.0.124
taglist ""
snmpv3 user "packetfence"
aaa server-group radius "PacketFence" host 172.25.0.124
aaa accounting network start-stop radius server-group "PacketFence"
aaa authentication port-access eap-radius server-group "PacketFence"
aaa authentication mac-based chap-radius server-group "PacketFence"
aaa authentication captive-portal enable
aaa authentication captive-portal profile "CaptiveGuestPortal"
aaa port-access authenticator 20
aaa port-access authenticator 20 tx-period 10
aaa port-access authenticator active
aaa port-access mac-based 20
aaa port-access mac-based 20 addr-moves
aaa port-access mac-based 20 reauth-period 14400
aaa port-access 20 auth-order authenticator mac-based

I can confirm that the MAC address is being accepted by PacketFence, and the
laptop is gaining access to the network. However, when I open a browser, no
Captive Portal is displayed automatically. I can manually open it by entering
"172.25.0.124/captive-portal", and I can see that PacketFence is applying the
Guest role. But when I click on the node, it says the node (Mac-Address) does
not exist.

I am also a bit confused about the network device guide: [PacketFence Network
Devices Configuration
Guide](https://www.packetfence.org/doc/PacketFence_Network_Devices_Configuration_Guide.html#_aruba).
It states that I should enter "Role by Web Auth URL" as
"http://172.25.0.124/Aruba::ArubaOS_Switch_16_x;. However, when I try that link
in my browser, it says "not implemented GET not supported for current URL".
Instead, I entered "http://172.25.0.124/captive-portal;, but I'm not sure if
that is correct or if I missed something.
My main issue remains that the Captive Portal is not shown automatically. Any
help would be great, so i can understand the mistake better.

1 2 3 4 >

1 - 100 of 398 matches

Mail list logo