Re: [PacketFence-users] Unifi APs and CoA

2018-02-10 Thread Nathan, Josh via PacketFence-users
Hey Just FYI... Running both the Guest and RADIUS-Assigned VLANs on the same AP (separate SSIDs, of course), does NOT work on Unifi's 3.8.15 firmware. It works with firmware version 3.8.3, broke at 3.8.6, and it's working again at least as of 3.9.19. So if you need that firmware version, it

Re: [PacketFence-users] Unifi APs and CoA

2018-02-10 Thread E.P. via PacketFence-users
Yes, David, this is my plan to test the captive portal on wired connections to rule out the unruly Unifi APs Ideally I would love to make it also work with HP switches 1820/1920 model because this is the majority of switches installed in our organization. But will try it on Cisco switch as a

[PacketFence-users] SSH password unexpectedly doesn't work

2018-02-10 Thread Trinklein, Jason R via PacketFence-users
This is a new clustered install of Packetfence-Zen. I have not intentionally changed the default terminal password. I find myself not being able to log into any of the three cluster members by SSH today for no known reason. Has this happened to anyone else before? How did you get back into the

Re: [PacketFence-users] Radius Filter

2018-02-10 Thread John Sayce via PacketFence-users
I've given it a go but it doesn't seem to apply. I simplified it further to: [mac] filter = node_info.mac operator = match value = 00:11:22:33:44:55 [2:mac] scope = RegisteredRole role = REJECT This didn't seem to apply either. Am I missing something obvious? Is there a way to debug this?

[PacketFence-users] Detecting WIFI Routers using violations

2018-02-10 Thread Tomasz Karczewski via PacketFence-users
Hi, I would like to create a violation that will automatically detect wireless routers in the cable network. I would like to apply this violation for "Smartphones / PDAs / Tablets" and "Routers and APs" connected to a particular switch group. I tried to run this but the violation does not

[PacketFence-users] Meru 3200 & packetfence 7.4

2018-02-10 Thread Derek Brabrook via PacketFence-users
Hi, First email to this list, so excuse if my netiquette isn't up to muster. We run a Meru 3200 controller (software Version 5.1-75), I have Packetfence (7.4) running from an ESXi VM on a trunked connection on a Debian Jessie flavour of linux and everything seems to be working. except for

Re: [PacketFence-users] Role Assignment (G Suite/SAML)

2018-02-10 Thread David Harvey via PacketFence-users
I switched from GSuite Auth to LDAP for almost exactly this reason.. using LDAP groups makes it very easy. I didn't find a way of making it work with GSuite, but someone else here may have been more adventurous or creative! It "should" be technically possible with enough hacking, as the federated

Re: [PacketFence-users] Packetfence RADIUS and Unifi Out of Band

2018-02-10 Thread E.P. via PacketFence-users
As a quick update to it, I captured traffic coming from UniFi controller to PF during the connection of the client to guest SSID and see that there’s a request coming to port 9000 (172.16.0.222 is my PF)

[PacketFence-users] Captive portal configuration basics

2018-02-10 Thread E.P. via PacketFence-users
Folks, I'm struggling to put all pieces together to make it work like it is described in this guide: https://www.puc.edu/__data/assets/pdf_file/0005/162455/PacketFence-Login-For -Guests.pdf Would appreciate if someone will give me an advice where to start in PF. Or alternatively if my

[PacketFence-users] Meru 3200

2018-02-10 Thread Derek Brabrook via PacketFence-users
Hi, First email to this list, so excuse if my netiquette isn't up to muster. We run a Meru 3200 controller (software Version 5.1-75), I have Packetfence (7.4) running from an ESXi VM on a trunked connection on a Debian Jessie flavour of linux and everything seems to be working. except for

[PacketFence-users] Reinstall Packetfence

2018-02-10 Thread Chris Abel via PacketFence-users
Hello all, Something in my packetfence config is messing up my networking on the centos machine. It seems to have assigned a self assigned ip address to all of my interfaces and when I remove my vlan interfaces, they reappear after a reboot. I'm really not sure what happened, but I've already

Re: [PacketFence-users] Role Assignment (G Suite/SAML)

2018-02-10 Thread Truax, Peter via PacketFence-users
We map ours to AD Groups. We created an AD authentication source, joined the domain, added an Authentication Rule for each Role that AD is going to authenticate. For devices that don’t authenticate with AD, (ie printers, IP phones, etc) we set up auto registration by setting up a violation that

Re: [PacketFence-users] vlan interface cannot ping outside of it's subnet on CentOS

2018-02-10 Thread Chris Abel via PacketFence-users
I realize the 169.254 addresses are link=local addresses that are assigned from the /etc/networks file? Could these be causing issues. Does anyone else have these addresses with their working packetfence? Also, my routed networks do not show up in my routing table, but do show up in my routing

[PacketFence-users] Meru 3200 & packetfence 7.4

2018-02-10 Thread Derek Brabrook via PacketFence-users
Excuse repeat post I've added log data from packetfence.log on SSH failure as well First email to this list, so excuse if my netiquette isn't up to muster. We run a Meru 3200 controller (software Version 5.1-75), I have Packetfence (7.4) running from an ESXi VM on a trunked connection on a

Re: [PacketFence-users] Packetfence RADIUS and Unifi Out of Band

2018-02-10 Thread E.P. via PacketFence-users
Hi Tim and gang, Any idea where I should start looking into PF to troubleshoot WebAuth for WiFi ? I finally had time to prepare UniFi according to screenshots published at github https://github.com/inverse-inc/packetfence/tree/ae18f50b4879cc2d4132490fcee33f2fbe53b36f/docs/images Namely this