[PacketFence-users] 802.1x AD first connexion

2022-04-22 Thread José Ramos via PacketFence-users
Hello everyone ! I was wondering how to do user 802.1x authentication from Windows Login screen with an AD account on which nobody has logged in yet. It works with an account that has already logged in on the pc but of course can't work with new user since the computer can't reach the AD to check i

[PacketFence-users] MAC Authentication help pls

2022-04-22 Thread José Ramos via PacketFence-users
Hello dear PacketFence users and developers ! I have successfully configured PacketFence with 802.1x (PF directly connected on the switch to manage). But I can't figure out how to to MAC authentication. I have enabled MAB on my Cisco switch and registered the MAC address in the node tab. But nothi

Re: [PacketFence-users] MAC Authentication help pls

2022-04-24 Thread José Ramos via PacketFence-users
net> wrote: > please paste your config on the switchport and the general settings on the > switch. > > you can also use the log (sh log) to see what happens when you plug in > something in the switch. > > April 21, 2022 8:30 AM, "José Ramos via PacketFe

[PacketFence-users] Profiling per port

2022-04-26 Thread José Ramos via PacketFence-users
Hello everyone! Is it possible to force a type of device on a switch port ? For exemple the device connected to f0/1 has to be a printer or something like that ? Thanks ! ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://

Re: [PacketFence-users] MAC Authentication help pls

2022-04-26 Thread José Ramos via PacketFence-users
> *!* > *!* > *line con 0* > * exec-timeout 0 0* > * privilege level 15* > * logging synchronous* > *line aux 0* > * exec-timeout 0 0* > * privilege level 15* > * logging synchronous* > *line vty 0 4* > *!* > *end* > > > On Sun, Apr 24, 2022 at 2:11 PM

[PacketFence-users] specific MAC registration

2022-05-10 Thread José Ramos via PacketFence-users
Hello everyone ! I would like to do something maybe impossible : automatically register a device based on a list of Mac addresses only if they want to use a specific VLAN. Is it possible ? Thanks, Jose ___ PacketFence-users mailing list PacketFence-user

Re: [PacketFence-users] specific MAC registration

2022-05-16 Thread José Ramos via PacketFence-users
com/AkamaiTechnologies> > <http://www.linkedin.com/company/akamai-technologies> > <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > > On May 9, 2022, at 2:56 AM, José Ramos via PacketFence-users < > packetfence-users@lists.sourceforge.net> w

[PacketFence-users] 802.1x computer + user

2022-05-16 Thread José Ramos via PacketFence-users
Hello everyone. Is it possible to combine 802.1x computer + user authentication ? I only do user authentication so far but would like to give VLAN only if the AD user uses AD computer :) Thank you ! José Ramos ___ PacketFence-users mailing list PacketFen

Re: [PacketFence-users] 802.1x computer + user

2022-05-17 Thread José Ramos via PacketFence-users
ser authentication. > > MJ > > On 16/05/2022 14:19, José Ramos via PacketFence-users wrote: > > Hello everyone. > > Is it possible to combine 802.1x computer + user authentication ? > > I only do user authentication so far but would like to give VLAN only if > > the AD

[PacketFence-users] 802.1x role error

2022-05-22 Thread José Ramos via PacketFence-users
Hello ! I have configured 802.1x and mab. When I use mab and authenticate with an AD user on the portal I'm put in the right VLAN of my authentication source. 802.1x works aswell but always put me in VLAN 1 and does not assign roles. I tried to enable stripped username in the DEFAULT realm but it

Re: [PacketFence-users] 802.1x role error

2022-05-22 Thread José Ramos via PacketFence-users
I don't need help anymore on that ! On Sat, May 21, 2022 at 2:22 PM José Ramos wrote: > Hello ! I have configured 802.1x and mab. When I use mab and authenticate > with an AD user on the portal I'm put in the right VLAN of my > authentication source. > > 802.1x works aswell but always put me in

Re: [PacketFence-users] 802.1x computer + user

2022-05-22 Thread José Ramos via PacketFence-users
t is what we do. >> >> First the computer authenticates, and as soon as a user logs on, it >> switches to user authentication. >> >> MJ >> >> On 16/05/2022 14:19, José Ramos via PacketFence-users wrote: >> > Hello everyone. >> > Is it possi

Re: [PacketFence-users] 802.1x computer + user

2022-05-22 Thread José Ramos via PacketFence-users
I went the wrong way actually I didn't want to do that. What I would like to do is give the user a role if he is on a domain computer. I guess it is just a condition in my AD-users authentication source.but I can't do it. Does someone have a suggestion ? :) _

Re: [PacketFence-users] 802.1x computer + user

2022-05-22 Thread José Ramos via PacketFence-users
ketfence.org/doc/PacketFence_Installation_Guide.html#_using_the_corporate_machine_role > > Regards > Fabrice > > > > > > Le dim. 22 mai 2022 à 12:41, José Ramos via PacketFence-users < > packetfence-users@lists.sourceforge.net> a écrit : > >> I went the wrong way ac

Re: [PacketFence-users] 802.1x computer + user

2022-05-24 Thread José Ramos via PacketFence-users
>> The difference between the 2 will be the username attribute , for user >>>>> it´s sAMAccountName and for computer it´s userPrincipalName (btw create >>>>> authentication rules for user and machines) >>>>> >>>>> So once you have the 2 authentication

Re: [PacketFence-users] 802.1x computer + user

2022-05-24 Thread José Ramos via PacketFence-users
machines) >>>> >>>> So once you have the 2 authentication sources , assign them on the same >>>> connection profile (per example the one you use to filter on the secure >>>> ssid) . >>>> >>>> >>>> https://www.p

Re: [PacketFence-users] User conditions

2022-05-29 Thread José Ramos via PacketFence-users
Hello ! for the scan, you can choose roles to scan in scan.conf and for eula you can bypass it in the portal module in advanced configuration Regards On Tue, May 24, 2022 at 3:57 PM Joachim Leroy via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > And same for the SCAN act