We are using PacketFence (in non-clustered mode) in a VM for handling out guest and device networks. I've been really happy with it, and the support from inverse is pretty awesome.
Our 802.1x network is powered by FreeRADIUS 3 with a Kerberos backend. We have a in house built system that manages the MAC address registration and the MAC address blacklisting. It pushes the registrations down to the PacketFence server via API call, and the radius server pulls the blacklist via an API call on regular intervals. The captive portal for the black listed devices is also powered by PacketFence. Sent from Nine<http://www.9folders.com/> ________________________________ From: Ian Lyons <ily...@rollins.edu> Sent: Monday, April 2, 2018 18:10 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] ClearPass - not so clear anymore Jason That price *was* real, many years ago. I got a pair of 5000 user licenses for ~15k, last year. Word of caution, I have seen some vendors that say they sell Cisco and Aruba products "forget' discounting on Aruba. Shop around, that is not necessarily accurate. Having said that, quantity of users and features where not mentioned. 50k or more users and all the features enabled.....I can not speak to that. Hector I have had clearpass, on and off, for 6 years...it has always been concurrent users....yes to a rolling average, but not an immediate cut off if you exceed once or twice. Can you elaborate? Get Outlook for Android<https://aka.ms/ghei36> From: Trinklein, Jason R Sent: Monday, April 2, 17:48 Subject: Re: [WIRELESS-LAN] ClearPass - not so clear anymore To: wireless-lan@listserv.educause.edu We are considering clearpass for our guest network captive portal. We have a case of sticker shock, however…at a cost of nearly $50K, it seems expensive for a captive portal. What alternative solutions are people using? We are very happy with FreeRADIUS for wireless auth, but we need a robust captive portal that allows OAuth/social media login or validated email/sms login. We tried packetfence, but in cluster mode, it wasn’t reliable. -- Jason Trinklein Wireless Engineering Manager College of Charleston 81 St. Philip Street | Office 311D | Charleston, SC 29403 trinkle...@cofc.edu<mailto:trinkle...@cofc.edu> | (843) 300–8009 From: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Hector J Rios <hr...@lsu.edu> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Date: Monday, April 2, 2018 at 5:23 PM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] ClearPass - not so clear anymore I’ve got two complaints about this product. One, it seems like with every patch or upgrade, this solution is getting worse and worse. This is disappointing because when we bought this solution two years ago it was rock solid. Second, due to the new licensing scheme, we are now exceeding our licensing capacity. How convenient for Aruba, right? As some of you might know, the new licensing scheme is based on concurrency. When we purchased the solution the licensing scheme was based on rolling averages. Yes, the new licensing scheme is attempting to make things simpler, but at a higher cost. Ask your rep how much a 25K server costs and you’ll see what I’m talking about. Hector Rios Louisiana State University ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fdiscuss&data=02%7C01%7C%7C416aa0adcd3740e218df08d598dffc6e%7Ce285d438dbba4a4c941c593ba422deac%7C0%7C0%7C636583010131355986&sdata=L2hgyGRxLEshPCcPVnAxQCrmoaMp%2FlC8Nq8V0B8IdaM%3D&reserved=0>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.