Re: [PacketFence-users] PacketFence, Meraki and CoA

2017-10-30 Thread Fabrice Durand via PacketFence-users
Hello Gonzague, it will not really complicate to add the CoA support for Meraki switches in PacketFence. Can you try the attached switch module and let me know. Also for the 802.1x issue , did you joined the server to your AD ? Did you created realm associated to your domain ? Regards Fabrice

Re: [PacketFence-users] PF cluster deployment and remote mysqlintegration problem

2017-10-30 Thread Fabrice Durand via PacketFence-users
Hello Yan, Le 2017-10-30 ?? 11:28, Yan via PacketFence-users a ??crit?0?2: > Hi Fabrice, > > Thank you very much. You are right. It seems my problem was caused by > not excuting "pfcmd configreload hard" and to "restart > packetfence-config". After doing this, the nodes dashboard are loaded > cor

Re: [PacketFence-users] Stuck on a packetfence implementation

2017-10-30 Thread Fabrice Durand via PacketFence-users
Hello John, so first your 802.1x authentication failled because the device is not able to recognize the radius certificate. On the device side uncheck verify server certificate and retry. Next you need to register the device in order to have a production vlan instead of the registration. When i

Re: [PacketFence-users] local database authentication fail

2017-10-30 Thread Fabrice Durand via PacketFence-users
Hello Nicolay, can you restart packetfence and retry a complete authentication. Btw post me the content of packetfence.log for the device you are testing with. Regards Fabrice Le 2017-10-30 à 11:21, Nicolay Rytchev via PacketFence-users a écrit : > Hello Fabrice, > > I have applied the patch

[PacketFence-users] PacketFence, Meraki and CoA

2017-10-30 Thread Gonzague Dambricourt via PacketFence-users
Hi guys I have installed the latest version of PacketFence (ZEN) on my network do try integration with Cisco Meraki devices. I have both MR access points and a MS220 8 port switch I found the Meraki::MS220_8 switch type for my switch .. but I think it might be a package that was developed back w

Re: [PacketFence-users] local database authentication fail

2017-10-30 Thread Nicolay Rytchev via PacketFence-users
Hello Fabrice, I have applied the patch, but without success. I still see that local PF Freeradius does not send the new AVP with ACL after authentication. RADIUS Request User-Name = "2c:0e:3d:f2:bd:e4" User-Password = "**" NAS-IP-Address = 10.49.253.84 NAS-Port = 4 Service-Type = Call-Check

Re: [PacketFence-users] Stuck on a packetfence implementation

2017-10-30 Thread john--- via PacketFence-users
Hey Fabrice, Thanks so much for offering to help. I have attached the output from your request below: Cisco 3650 switch running IOS 12 Packetfence 6.5 Just reverted to SNMP v1 to see if it was V2 that was causing the issue. The port comes up, joins the registration VLAN (302), receives a

Re: [PacketFence-users] Stuck on a packetfence implementation

2017-10-30 Thread john--- via PacketFence-users
From: Fabrice Durand via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: 30 October 2017 13:07 To: packetfence-users@lists.sourceforge.net Cc: Fabrice Durand Subject: Re: [PacketFence-users] Stuck on a packetfence implementation Hello John, i need a little bit

Re: [PacketFence-users] PF cluster deployment and remote mysqlintegration problem

2017-10-30 Thread Yan via PacketFence-users
Hi Fabrice, Thank you very much. You are right. It seems my problem was caused by not excuting "pfcmd configreload hard" and to "restart packetfence-config". After doing this, the nodes dashboard are loaded correctly. But there are 2 other issues hope your help. 1. It always shows error "Can

Re: [PacketFence-users] local database authentication fail

2017-10-30 Thread Fabrice Durand via PacketFence-users
Hello Nicolay, can you test this patch: cd /usr/local/pf curl https://github.com/jrouzierinverse/packetfence/commit/71968ad725dda6878f1765b991fd8375ab18fd10.diff | patch -p1 Regards Fabrice Le 2017-10-30 à 09:31, Nicolay Rytchev via PacketFence-users a écrit : > Hello Fabrice, > > Please s

Re: [PacketFence-users] local database authentication fail

2017-10-30 Thread Nicolay Rytchev via PacketFence-users
Hello Fabrice, Please see the result below. I noted also that RADIUS does not send new ACL AVP after authentication: RADIUS Request User-Name = "2c:0e:3d:f2:bd:e4" User-Password = "**" NAS-IP-Address = 10.49.253.84 NAS-Port = 4 Service-Type = Call-Check Framed-MTU = 1300 Called-Station-Id =

Re: [PacketFence-users] Stuck on a packetfence implementation

2017-10-30 Thread Fabrice Durand via PacketFence-users
Hello John, i need a little bit of log. First radius log when the device connect: raddebug -f /usr/local/pf/var/run/radiusd.sock -t 3000 Then the packetfence.log. Regards Fabrice Le 2017-10-30 à 07:33, john--- via PacketFence-users a écrit : > > Good day everyone, > >   > > I have an issue

Re: [PacketFence-users] PF cluster deployment and remote mysql integration problem

2017-10-30 Thread Fabrice Durand via PacketFence-users
Hello Yan, yes of course it's possible to move the db from local to remote. When you export the db, be sure to export the procedures too, or use the db schema in db directory then import your data. Also don't forget to do a pfcmd configreload hard and to restart packetfence-config. Regards Fa

[PacketFence-users] Stuck on a packetfence implementation

2017-10-30 Thread john--- via PacketFence-users
Good day everyone, I have an issue with an installation of Packetfence that I just cant seem to work out. Everything seems to run fine, the user gets a login prompt, uses active directory to successfully login (MAB as dot1x fails), on the switch gets added to the registration VLAN and on the la

[PacketFence-users] PF cluster deployment and remote mysql integration problem

2017-10-30 Thread Yan via PacketFence-users
Hi dear users, We are going to deploy PF v7.3 in our production network recently. Our PF works fine in standalone mode. Since I'm not so familiar with DB operation, I think it's a little difficult for me to operate the mariadb clustering after reading the cluster deployment guide. I'm afraid I