[PacketFence-users] 答复: VLANs Problem

平嘉伟 via PacketFence-users Tue, 16 Apr 2024 04:26:23 -0700

Hi kai:
       Is there any PC in vlan 11 get 192.168.0.0/24 address if connected 
switch port does NOT have any radius authentication setting?
       Port setting example for cisco:
       switchport mode access
       switchport access vlan 11


       if NO, check ur switch config;
       if YES, pull authentication detail using [ sh authentication sessions 
interface Gx/x/x details ];
发件人: Kai Bass (Westfalia Spielgeräte GmbH) <[email protected]>
发送时间: 2024年4月16日 15:01
收件人: 平嘉伟 <[email protected]>
抄送: Zammit, Ludovic via PacketFence-users 
<[email protected]>
主题: AW: VLANs Problem

Hey Jiawei Ping,

thank you for your assistance.
Unfortunately, I do not believe that the issue lies with the Switch 
configuration in Packetfence, as the packetfence.log indicates that the correct 
VLAN has been assigned.

here an example:

Mar 13 11:07:53 packetfence httpd.aaa-docker-wrapper[3265]: httpd.aaa(8) INFO: 
[mac:] handling radius autz request: from switch_ip => (172.25.1.38), 
connection_type => Ethernet-NoEAP,switch_mac => (mac), mac => [mac], port => 
20, username => "mac" (pf::radius::authorize)
Mar 13 11:07:53 packetfence httpd.aaa-docker-wrapper[3265]: httpd.aaa(8) INFO: 
[mac:] Instantiate profile guest (pf::Connection::ProfileFactory::_from_profile)
Mar 13 11:07:53 packetfence httpd.aaa-docker-wrapper[3265]: httpd.aaa(8) INFO: 
[mac:] is of status unreg; belongs into registration VLAN 
(pf::role::getRegistrationRole)
Mar 13 11:07:53 packetfence httpd.aaa-docker-wrapper[3265]: httpd.aaa(8) INFO: 
[mac: (172.25.1.38) Added VLAN 11 to the returned RADIUS Access-Accept 
(pf::Switch::returnRadiusAccessAccept)
Mar 13 11:07:53 packetfence httpd.aaa-docker-wrapper[3265]: httpd.aaa(8) INFO: 
[mac:] Updating locationlog from accounting request 
(pf::api::handle_accounting_metadata)


Vielen Dank und freundliche Grüße aus Hövelhof


Kai Bass | IT - Auszubildender

Telefon: +49 5257 98891-655 | Fax: -11
E-Mail: 
[email protected]<mailto:[email protected]>

[cid:[email protected]]


________________________________
Von: 平嘉伟 <[email protected]<mailto:[email protected]>>
Gesendet: Dienstag, 16. April 2024 03:04
An: 
[email protected]<mailto:[email protected]>
 
<[email protected]<mailto:[email protected]>>
Cc: Kai Bass (Westfalia Spielgeräte GmbH) 
<[email protected]<mailto:[email protected]>>
Betreff: 答复: VLANs Problem


Hi kai:

       Check this:

https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_adjust_switch_configuration_in_packetfence<https://atpscan.global.hornetsecurity.com/index.php?atp_str=WSgwh1WymmFSv0gSqDuPtDwZlThcfDpgp6cbJFgkx5g71KgzyPGiZCrgJ4Romjn9D-3cOMXgCnZLjh3IfA3q2Pbi-vcajMFBvurxtkhsie_wFaUl0zTMNEfCZ0PhwLH63l8gZ8NCdGWRZ_MulbD0wX_Ct4SLkxH_jIHbpAwToTKbINas2wufWvlRl9IaynsovBw4FI0NOLnIKxDR5ZyIDwluIYobPbnff1j5QbxkxlSQR-D7lA5qofG2h-_lZW8n2RmESCjcV28Fub3ehLHd5C6Z-n8pcpXqJY4JL9ELlu_66cx91AenTBKqjEE5E4_qyDAB9dfonj1tIWjDTxC0qIte846zaPbgA_EiVeX_AXkF49psX-PPPlNKK59IXbPeP91aowu_radcgMslrtq4QmLAzZj71gMcWj_BsuX_nqv15h9OSoXKSbnmHvLz8dBv3lZN-3FXPlHfpNYTzyM6OiOgCOL2BhU9SuLDV8AjOjojNealYNufBQsYfwGMmj1_mQ>



发件人: Kai Bass (Westfalia Spielgeräte GmbH) via PacketFence-users 
<[email protected]<mailto:[email protected]>>
发送时间: 2024年4月15日 21:59
收件人: 
[email protected]<mailto:[email protected]>
抄送: Kai Bass (Westfalia Spielgeräte GmbH) 
<[email protected]<mailto:[email protected]>>
主题: [PacketFence-users] VLANs Problem



Hello everyone,



I have successfully installed Packetfence with Active Directory authentication.

However, I am encountering some issues while trying to grant my test client 
access to a specific VLAN. My Clients dont get any IP Informations.

Currently, we are only using the default VLAN (1), which is assigned to all our 
IP addresses (172.25.0.0/24) and where my Access switch and Packetfence VM are 
located.



Can VLANs be configured using the IP range 192.168.0.0/24 in this setup? If 
yes, what are the considerations?

Is a secondary NIC required?  Do i need to configure the Switchport where the 
packetfence server is connected as Trunk and do i need to see my VM-MAC-Adress 
with "sh lldp info remote-device"? And do i need to configure my Access Port 
where my test-client is connected as Trunk with all VLANS too?

Do i need to configure something spezial in VMware Workstation Player other 
than my NICs as brided? How could i trobleshoot this problem?





Thank you very much for any help!



Regards,



Kai

_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] 答复: VLANs Problem

Reply via email to