Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread Louis Munro 

> On Jun 3, 2016, at 10:40 , PROST pierrick  wrote:
> 
> An other question,
>  
> If we take Bronze support, we could have help with eduroam ?

Hi Pierrick,
Business related questions are best handled off list.

I suggest you contact inverse to discuss this (i...@inverse.ca 
).

Best regards,
--
Louis Munro
lmu...@inverse.ca  ::  www.inverse.ca 
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread PROST pierrick 
An other question,

If we take Bronze support, we could have help with eduroam ?


Regards.


De : PROST pierrick
Envoyé : vendredi 3 juin 2016 16:29
À : packetfence-users@lists.sourceforge.net
Objet : Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

Hy Derek,

OK create a SSID with WPA2 enterprise but we are not doing VLAN assignment, our 
SSID is already configure whit the final Edoruam VLAN.  On packet fence, I have 
already two inline level 2 interface for authenticating two others user Vlan 
(guest and internal LDAP Auth) with a portal. For eduroam, I follow the admin 
guide and configure a EDORUAM proxy with real cnrs.fr.


· Witch sort  interface I must use on packet fence for our Eduoram VLAN 
?

· On my WPA2 entreprise SSID, I specify packetfence on radius server ?


Regards

Pierrick

De : Derek Wuelfrath [mailto:dwuelfr...@inverse.ca]
Envoyé : vendredi 3 juin 2016 16:11
À : ML PF
Objet : Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

Pierrick,

As previously said, eduroam requires a 802.1x EAP-PEAP secured SSID.

You could create one SSID on your network equipment that will use eduroam TLRS 
RADIUS servers.
That will handle the authentication part.

You can then assign a VLAN to that SSID in the case of a successful 
authentication. That VLAN would then be an inline VLAN managed by PacketFence.

Cheers!
-dw.

—
Derek Wuelfrath
dwuelfr...@inverse.ca<mailto:dwuelfr...@inverse.ca> :: +1.514.447.4918 (x110) 
:: +1.866.353.6153 (x110)
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and 
PacketFence (www.packetfence.org<http://www.packetfence.org>)

On Jun 3, 2016, at 10:04, PROST pierrick 
<pierrick.pr...@cnrs.fr<mailto:pierrick.pr...@cnrs.fr>> wrote:

Hi Louis, thanks for your help.

Yes admin guide refer to eduroam implementation but in our case, whe are on 
INLINE mode in or packet fence configuration.

Actually, when we try an eduroam account, we have something like this on pf 
logs:


Jun 02 15:44:17 httpd.portal(2052) INFO: [mac:38:59:f9:14:62:37] Realm source 
undef is configured in the realm cnrs.fr<http://cnrs.fr/> but is not in the 
portal profile. Ignoring it and using the portal profile sources. 
(pf::config::util::get_user_sources)


Can we use something else than a portal in inline mode ?




De : Louis Munro [mailto:lmu...@inverse.ca]
Envoyé : vendredi 3 juin 2016 15:54
À : 
packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>
Objet : Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal



On Jun 3, 2016, at 9:38 , PROST pierrick 
<pierrick.pr...@cnrs.fr<mailto:pierrick.pr...@cnrs.fr>> wrote:

We want use radius eduroam authentication on a dedicated and isolated VLAN with 
WPA2 enterprise SSID (or with an open SSID) . We already have an internal 
Radius on or entity and we want to forward Radius request from a authentication 
portal to our Radius server.

Thank you but your answer brings no useful explanation.


That’s not how Eduroam works.
Eduroam is meant to be used on an 802.1x SSID (as you plan on doing), without a 
captive portal.
It’s not meant to send the requests to your RADIUS server (although it can do 
it) but to proxy the requests to the Eduroam servers which will themselves 
proxy them to the remote RADIUS server of the authenticating user.

The point of Eduroam is that it allows j...@some.edu<mailto:j...@some.edu> to 
connect to your Eduroam SSID and authenticate transparently with the same 
credentials and configuration he can use at any other participating member of 
the Eduroam federation.


Eduroam and PacketFence are definitely compatible.
I have several clients using it, just not the way you describe it.

The way to use PacketFence with Eduroam is to configure it to proxy 
authentication to the eduroam servers.
I believe that is documented in the PacketFence administration guide.

Regards,
--
Louis Munro
lmu...@inverse.ca<mailto:lmu...@inverse.ca>  ::  
www.inverse.ca<http://www.inverse.ca/>
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu/>) and 
PacketFence (www.packetfence.org<http://www.packetfence.org/>)
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. 
https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users

-

Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread PROST pierrick 
Hy Derek,

OK create a SSID with WPA2 enterprise but we are not doing VLAN assignment, our 
SSID is already configure whit the final Edoruam VLAN.  On packet fence, I have 
already two inline level 2 interface for authenticating two others user Vlan 
(guest and internal LDAP Auth) with a portal. For eduroam, I follow the admin 
guide and configure a EDORUAM proxy with real cnrs.fr.


· Witch sort  interface I must use on packet fence for our Eduoram VLAN 
?

· On my WPA2 entreprise SSID, I specify packetfence on radius server ?


Regards

Pierrick

De : Derek Wuelfrath [mailto:dwuelfr...@inverse.ca]
Envoyé : vendredi 3 juin 2016 16:11
À : ML PF
Objet : Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

Pierrick,

As previously said, eduroam requires a 802.1x EAP-PEAP secured SSID.

You could create one SSID on your network equipment that will use eduroam TLRS 
RADIUS servers.
That will handle the authentication part.

You can then assign a VLAN to that SSID in the case of a successful 
authentication. That VLAN would then be an inline VLAN managed by PacketFence.

Cheers!
-dw.

—
Derek Wuelfrath
dwuelfr...@inverse.ca<mailto:dwuelfr...@inverse.ca> :: +1.514.447.4918 (x110) 
:: +1.866.353.6153 (x110)
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and 
PacketFence (www.packetfence.org<http://www.packetfence.org>)

On Jun 3, 2016, at 10:04, PROST pierrick 
<pierrick.pr...@cnrs.fr<mailto:pierrick.pr...@cnrs.fr>> wrote:

Hi Louis, thanks for your help.

Yes admin guide refer to eduroam implementation but in our case, whe are on 
INLINE mode in or packet fence configuration.

Actually, when we try an eduroam account, we have something like this on pf 
logs:


Jun 02 15:44:17 httpd.portal(2052) INFO: [mac:38:59:f9:14:62:37] Realm source 
undef is configured in the realm cnrs.fr<http://cnrs.fr/> but is not in the 
portal profile. Ignoring it and using the portal profile sources. 
(pf::config::util::get_user_sources)


Can we use something else than a portal in inline mode ?




De : Louis Munro [mailto:lmu...@inverse.ca]
Envoyé : vendredi 3 juin 2016 15:54
À : 
packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>
Objet : Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal



On Jun 3, 2016, at 9:38 , PROST pierrick 
<pierrick.pr...@cnrs.fr<mailto:pierrick.pr...@cnrs.fr>> wrote:

We want use radius eduroam authentication on a dedicated and isolated VLAN with 
WPA2 enterprise SSID (or with an open SSID) . We already have an internal 
Radius on or entity and we want to forward Radius request from a authentication 
portal to our Radius server.

Thank you but your answer brings no useful explanation.


That’s not how Eduroam works.
Eduroam is meant to be used on an 802.1x SSID (as you plan on doing), without a 
captive portal.
It’s not meant to send the requests to your RADIUS server (although it can do 
it) but to proxy the requests to the Eduroam servers which will themselves 
proxy them to the remote RADIUS server of the authenticating user.

The point of Eduroam is that it allows j...@some.edu<mailto:j...@some.edu> to 
connect to your Eduroam SSID and authenticate transparently with the same 
credentials and configuration he can use at any other participating member of 
the Eduroam federation.


Eduroam and PacketFence are definitely compatible.
I have several clients using it, just not the way you describe it.

The way to use PacketFence with Eduroam is to configure it to proxy 
authentication to the eduroam servers.
I believe that is documented in the PacketFence administration guide.

Regards,
--
Louis Munro
lmu...@inverse.ca<mailto:lmu...@inverse.ca>  ::  
www.inverse.ca<http://www.inverse.ca/>
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu/>) and 
PacketFence (www.packetfence.org<http://www.packetfence.org/>)
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. 
https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides

Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread Derek Wuelfrath 
Pierrick,

As previously said, eduroam requires a 802.1x EAP-PEAP secured SSID.

You could create one SSID on your network equipment that will use eduroam TLRS 
RADIUS servers.
That will handle the authentication part.

You can then assign a VLAN to that SSID in the case of a successful 
authentication. That VLAN would then be an inline VLAN managed by PacketFence.

Cheers!
-dw.

—
Derek Wuelfrath
dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110)
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

> On Jun 3, 2016, at 10:04, PROST pierrick <pierrick.pr...@cnrs.fr> wrote:
> 
> Hi Louis, thanks for your help.
>  
> Yes admin guide refer to eduroam implementation but in our case, whe are on 
> INLINE mode in or packet fence configuration.
>  
> Actually, when we try an eduroam account, we have something like this on pf 
> logs:
>  
>  
> Jun 02 15:44:17 httpd.portal(2052) INFO: [mac:38:59:f9:14:62:37] Realm source 
> undef is configured in the realm cnrs.fr <http://cnrs.fr/> but is not in the 
> portal profile. Ignoring it and using the portal profile sources. 
> (pf::config::util::get_user_sources)
>  
>  
> Can we use something else than a portal in inline mode ?
>  
>  
>  
>  
> De : Louis Munro [mailto:lmu...@inverse.ca] 
> Envoyé : vendredi 3 juin 2016 15:54
> À : packetfence-users@lists.sourceforge.net
> Objet : Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal
>  
>  
>  
> On Jun 3, 2016, at 9:38 , PROST pierrick <pierrick.pr...@cnrs.fr 
> <mailto:pierrick.pr...@cnrs.fr>> wrote:
>  
> We want use radius eduroam authentication on a dedicated and isolated VLAN 
> with WPA2 enterprise SSID (or with an open SSID) . We already have an 
> internal Radius on or entity and we want to forward Radius request from a 
> authentication portal to our Radius server.
>  
> Thank you but your answer brings no useful explanation.
>  
>  
> That’s not how Eduroam works.
> Eduroam is meant to be used on an 802.1x SSID (as you plan on doing), without 
> a captive portal.
> It’s not meant to send the requests to your RADIUS server (although it can do 
> it) but to proxy the requests to the Eduroam servers which will themselves 
> proxy them to the remote RADIUS server of the authenticating user.
>  
> The point of Eduroam is that it allows j...@some.edu <mailto:j...@some.edu> 
> to connect to your Eduroam SSID and authenticate transparently with the same 
> credentials and configuration he can use at any other participating member of 
> the Eduroam federation.
>  
>  
> Eduroam and PacketFence are definitely compatible. 
> I have several clients using it, just not the way you describe it.
>  
> The way to use PacketFence with Eduroam is to configure it to proxy 
> authentication to the eduroam servers.
> I believe that is documented in the PacketFence administration guide.
>  
> Regards,
> --
> Louis Munro
> lmu...@inverse.ca <mailto:lmu...@inverse.ca>  ::  www.inverse.ca 
> <http://www.inverse.ca/> 
> +1.514.447.4918 x125  :: +1 (866) 353-6153 x125
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu <http://www.sogo.nu/>) and 
> PacketFence (www.packetfence.org <http://www.packetfence.org/>)
> --
> What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
> patterns at an interface-level. Reveals which users, apps, and protocols are 
> consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
> J-Flow, sFlow and other flows. Make informed decisions using capacity 
> planning reports. 
> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread PROST pierrick 
Hi Louis, thanks for your help.

Yes admin guide refer to eduroam implementation but in our case, whe are on 
INLINE mode in or packet fence configuration.

Actually, when we try an eduroam account, we have something like this on pf 
logs:


Jun 02 15:44:17 httpd.portal(2052) INFO: [mac:38:59:f9:14:62:37] Realm source 
undef is configured in the realm cnrs.fr<http://cnrs.fr> but is not in the 
portal profile. Ignoring it and using the portal profile sources. 
(pf::config::util::get_user_sources)


Can we use something else than a portal in inline mode ?




De : Louis Munro [mailto:lmu...@inverse.ca]
Envoyé : vendredi 3 juin 2016 15:54
À : packetfence-users@lists.sourceforge.net
Objet : Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal



On Jun 3, 2016, at 9:38 , PROST pierrick 
<pierrick.pr...@cnrs.fr<mailto:pierrick.pr...@cnrs.fr>> wrote:

We want use radius eduroam authentication on a dedicated and isolated VLAN with 
WPA2 enterprise SSID (or with an open SSID) . We already have an internal 
Radius on or entity and we want to forward Radius request from a authentication 
portal to our Radius server.

Thank you but your answer brings no useful explanation.


That’s not how Eduroam works.
Eduroam is meant to be used on an 802.1x SSID (as you plan on doing), without a 
captive portal.
It’s not meant to send the requests to your RADIUS server (although it can do 
it) but to proxy the requests to the Eduroam servers which will themselves 
proxy them to the remote RADIUS server of the authenticating user.

The point of Eduroam is that it allows j...@some.edu<mailto:j...@some.edu> to 
connect to your Eduroam SSID and authenticate transparently with the same 
credentials and configuration he can use at any other participating member of 
the Eduroam federation.


Eduroam and PacketFence are definitely compatible.
I have several clients using it, just not the way you describe it.

The way to use PacketFence with Eduroam is to configure it to proxy 
authentication to the eduroam servers.
I believe that is documented in the PacketFence administration guide.

Regards,
--
Louis Munro
lmu...@inverse.ca<mailto:lmu...@inverse.ca>  ::  
www.inverse.ca<http://www.inverse.ca>
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and 
PacketFence (www.packetfence.org<http://www.packetfence.org>)
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread Louis Munro 


> On Jun 3, 2016, at 9:38 , PROST pierrick  wrote:
> 
> We want use radius eduroam authentication on a dedicated and isolated VLAN 
> with WPA2 enterprise SSID (or with an open SSID) . We already have an 
> internal Radius on or entity and we want to forward Radius request from a 
> authentication portal to our Radius server.
>  
> Thank you but your answer brings no useful explanation.


That’s not how Eduroam works.
Eduroam is meant to be used on an 802.1x SSID (as you plan on doing), without a 
captive portal.
It’s not meant to send the requests to your RADIUS server (although it can do 
it) but to proxy the requests to the Eduroam servers which will themselves 
proxy them to the remote RADIUS server of the authenticating user.

The point of Eduroam is that it allows j...@some.edu  to 
connect to your Eduroam SSID and authenticate transparently with the same 
credentials and configuration he can use at any other participating member of 
the Eduroam federation.


Eduroam and PacketFence are definitely compatible. 
I have several clients using it, just not the way you describe it.

The way to use PacketFence with Eduroam is to configure it to proxy 
authentication to the eduroam servers.
I believe that is documented in the PacketFence administration guide.

Regards,
--
Louis Munro
lmu...@inverse.ca  ::  www.inverse.ca 
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread PROST pierrick 
We want use radius eduroam authentication on a dedicated and isolated VLAN with 
WPA2 enterprise SSID (or with an open SSID) . We already have an internal 
Radius on or entity and we want to forward Radius request from a authentication 
portal to our Radius server.

Thank you but your answer brings no useful explanation.

No one ?

Pierrick

De : Tim DeNike [mailto:tim.den...@mcc.edu]
Envoyé : vendredi 3 juin 2016 15:09
À : packetfence-users@lists.sourceforge.net
Objet : Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

You shouldn't use eduroam without dot1x.  That's the whole point.

Sent from my iPhone

On Jun 3, 2016, at 9:07 AM, PROST pierrick 
<pierrick.pr...@cnrs.fr<mailto:pierrick.pr...@cnrs.fr>> wrote:
Hi,

No one as use case on EDUROAM integration with PF in inline mode / 
authentication Portal ?

Have a good day.

Pierrick

De : PROST pierrick
Envoyé : jeudi 2 juin 2016 15:45
À : 
packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>
Objet : [PacketFence-users] Using eduroam Radius on a packetFence Portal

Hi everybody,

Does someone has already using EDUROAM on packetfence ?  We try have an open 
SSID “eduroam” whith packetfence on Inline mode with a portal authentification 
on a dedicated Eduroam VLAN.

We configured Raddb service with eduroam proxy as it is written in the 
documentation but is it possible to dedicate a portal profile this ?

Actually, when we try an eduroam account, we have something like this on pf 
logs:


Jun 02 15:44:17 httpd.portal(2052) INFO: [mac:38:59:f9:14:62:37] Realm source 
undef is configured in the realm cnrs.fr<http://cnrs.fr> but is not in the 
portal profile. Ignoring it and using the portal profile sources. 
(pf::config::util::get_user_sources)






Or there is another way to use eduroam without out of band configuration ?


Have a good day.

Pierrick Prost

CNRS

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread Tim DeNike 
You shouldn't use eduroam without dot1x.  That's the whole point.

Sent from my iPhone

On Jun 3, 2016, at 9:07 AM, PROST pierrick <pierrick.pr...@cnrs.fr> wrote:

Hi,



No one as use case on EDUROAM integration with PF in inline mode /
authentication Portal ?



Have a good day.



Pierrick



*De :* PROST pierrick
*Envoyé :* jeudi 2 juin 2016 15:45
*À :* packetfence-users@lists.sourceforge.net
*Objet :* [PacketFence-users] Using eduroam Radius on a packetFence Portal



Hi everybody,



Does someone has already using EDUROAM on packetfence ?  We try have an
open SSID “eduroam” whith packetfence on Inline mode with a portal
authentification on a dedicated Eduroam VLAN.



We configured Raddb service with eduroam proxy as it is written in the
documentation but is it possible to dedicate a portal profile this ?



Actually, when we try an eduroam account, we have something like this on pf
logs:





Jun 02 15:44:17 httpd.portal(2052) INFO: [mac:38:59:f9:14:62:37] Realm
source undef is configured in the realm cnrs.fr but is not in the portal
profile. Ignoring it and using the portal profile sources.
(pf::config::util::get_user_sources)













Or there is another way to use eduroam without out of band configuration ?





Have a good day.



Pierrick Prost



CNRS



--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols
are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e

___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-02 Thread PROST pierrick 
Hi everybody,

Does someone has already using EDUROAM on packetfence ?  We try have an open 
SSID "eduroam" whith packetfence on Inline mode with a portal authentification 
on a dedicated Eduroam VLAN.

We configured Raddb service with eduroam proxy as it is written in the 
documentation but is it possible to dedicate a portal profile this ?

Actually, when we try an eduroam account, we have something like this on pf 
logs:


Jun 02 15:44:17 httpd.portal(2052) INFO: [mac:38:59:f9:14:62:37] Realm source 
undef is configured in the realm cnrs.fr but is not in the portal profile. 
Ignoring it and using the portal profile sources. 
(pf::config::util::get_user_sources)






Or there is another way to use eduroam without out of band configuration ?


Have a good day.

Pierrick Prost

CNRS

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users