So sorry to trouble you. Thank you very much. Actually my VLAN filter rule
works. Thank you for your help. PF is a really great project.
Nov 30 11:17:25 localhost packetfence_httpd.aaa: httpd.aaa(16117) INFO:
[mac:xx:xx:xx:77:cc:xx] Match rule linux_autoreg2:ssid&linux
(pf::access_filter::test)
------------------ ???????? ------------------
??????: "Yan";<1136723...@qq.com>;
????????: 2017??11??30??(??????) ????12:53
??????: "packetfence-users"<packetfence-users@lists.sourceforge.net>;
????: "Durand fabrice"<fdur...@inverse.ca>;
????: Re?? [PacketFence-users] VLAN filter rule to temporarily allowspecific
switch
Hi Fabrice,
Thank you very much. I have one more question. We have a one more portal to
user after device passed 802.1x auth, and we don't need Linux and IoT device to
meet this portal. I write below rule to bypass linux and IoT device via
device_class but it seems not work. Is there any wrong configuration ?
[linux]
filter = node_info.device_class
operator = is
value = Linux
[IoT]
filter = node_info.device_class
operator = is
value = Internet of Things (IoT)
[linux_autoreg1:ssid&linux]
scope = AutoRegister
role = employees
[linux_autoreg2:ssid&linux]
scope = NodeInfoForAutoReg
role = employees
[IoT_autoreg1:ssid&IoT]
scope = AutoRegister
role = employees
[IoT_autoreg2:ssid&IoT]
scope = NodeInfoForAutoReg
role = employees
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
