Re: [PacketFence-users] The role of PacketFence with 802.1x

[Derek W. <dwu...@in...>]

Well hello Sir!

> I'm looking to install PacketFence shortly but have a few question relating to the role of PacketFence with 802.1x.

Stop looking at it and try it! ;) ahah

>  I plan to use 802.1x to change the port VLAN based on the authenticated(against Active Directoy or maybe certificates) device and I would like to use the captive port to register guest onto a restricted VLAN.

You found what you need then !

> From reading the documentation it looks like Packetfence uses FreeRadius to implement 802.1x. 

You are right

> In this scenario what role would the PacketFence GUI play?

It basically allows you to manage the different devices (nodes) that connects to your network, manage the different authentication sources used on the captive-portal for guest registration, manage the roles that will be assigned to the devices depending on their location, authentication source or a lot more!

> Would I set my switches up inside the PacketFence GUI or in the FreeRadius configuration files?(or both?)

You will have to set your switches in PacketFence (using either the GUI or the command line). PacketFence will then populate FreeRADIUS clients list dynamically using MySQL.

> Will PacketFence show reports of the devices/users who have authenticated with 802.1x?

Yup! Actually with some tweaking, PacketFence can triggers your coffee machine to brew a fresh espresso when you arrive at the office and connect on the WiFi (it is not part of it, of course, but just to demonstrate you how far we can customize it ;)). But yeah, the reports are part of it.

> Does anyone have a current set up of PacketFence with 802.1x for wired and wireless? If so, would you be willing to spare 20minutes for a discussion about your experiences?

The mailing-list is full of experienced and highly motivated users. I’m pretty sure someone will enjoy sharing with you.

Cheers!
dw.

—
Derek Wuelfrath
dwu...@in... :: www.inverse.ca
+1.514.447.4918 (x110) :: +1.866.353.6153 (x110)
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org)

> On Oct 23, 2014, at 14:58, Steve Allen <ste...@gm...> wrote:
> 
> Hi
> 
> I'm looking to install PacketFence shortly but have a few question relating to the role of PacketFence with 802.1x.
> 
> I plan to use 802.1x to change the port VLAN based on the authenticated(against Active Directoy or maybe certificates) device and I would like to use the captive port to register guest onto a restricted VLAN.
> 
> From reading the documentation it looks like Packetfence uses FreeRadius to implement 802.1x. 
> 
> In this scenario what role would the PacketFence GUI play?
> Would I set my switches up inside the PacketFence GUI or in the FreeRadius configuration files?(or both?)
> Will PacketFence show reports of the devices/users who have authenticated with 802.1x?
> 
> Does anyone have a current set up of PacketFence with 802.1x for wired and wireless? If so, would you be willing to spare 20minutes for a discussion about your experiences?
> 
> Thanks in advance.
> 
> -- 
> Regards,
> 
> Steve
> 
> 
> ------------------------------------------------------------------------------
> _______________________________________________
> PacketFence-users mailing list
> Pac...@li...
> https://lists.sourceforge.net/lists/listinfo/packetfence-users