From: Jan B. <jbe...@mp...> - 2012-09-21 14:26:15
|
Hi Olivier, thanks for your quick answer. On 09/20/2012 05:10 PM, Olivier Bilodeau wrote: > On 09/20/2012 04:53 AM, Jan Behrend wrote: > You want port-security or MAC-Auth / 802.1X? We have been recommending > the latter lately. I was going after port-security, because your guide favors that. I have not but I am going to try MAC-Auth ifg you say so ;-) > Can you attach a few traps from the logs/snmptrapd.log file from that > switch? I don't think the unrecognized one is the one we are after. I attached my complete packetfence.log and snmptrapd.logfor your reference. I have been playing with all HP switch types but none seems to work. I have been playing with "pfcmd_vlan" and I got this: root@packetfence:~/pf/bin# ./pfcmd_vlan -deauthenticate -mac 00:15:58:81:79:b8 -switch 134.104.29.11 -verbose 4 DEBUG - instantiating new SwitchFactory object DEBUG - reading config file /usr/local/pf/conf/switches.conf DEBUG - creating new pf::SNMP::HP::Procurve_2600 object DEBUG - start handling 'deauthenticate' command WARN - Unimplemented! First, make sure your configuration is ok. If it is then we don't support your hardware. Open a bug report with your hardware type. DEBUG - finished handling 'deauthenticate' command If you need anything else, please tell me. I can spend time debugging or (almost) anything else you wish if that helps. Cheers Jan -- MAX-PLANCK-INSTITUT fuer Radioastronomie Jan Behrend - Rechenzentrum ---------------------------------------- Auf dem Huegel 69, D-53121 Bonn Tel: +49 (228) 525 359, Fax: +49 (228) 525 229 jbe...@mp... http://www.mpifr-bonn.mpg.de ------------------------------------------------------------------------ Die digitale Unterschrift dieser Mail kann durch das Zertifikat der DFN Global Hierarchie überprüft werden: https://ca.mpg.de/certs/root-DGP/deutsche-telekom-ca2-root-cert.der Weitere Informationen zur CA der MPG finden Sie unter: https://ca.mpg.de ------------------------------------------------------------------------ |