Menu
▾
▴
Re: [PacketFence-users] 3. Re: pf server and juniper switch communication
|
From: Durand f. <fd...@in...> - 2015-07-23 17:16:59
|
Ok so from packetfence are you able to ping 10.1.32.245 ? Le 2015-07-23 11:34, Kishore a écrit : > Hi Fabrice, > > Yes, there is an interface between vlan 11 and juniper switch. > > Thank you, > > ------ > Regards, > > Kishore Thapa > System Administrator, > The Village, > United Distribution Nepal Pvt.Ltd., > Trade Tower Thapathali > > > -----Original Message----- > From: pac...@li... > [mailto:pac...@li...] > Sent: Thursday, July 23, 2015 6:12 PM > To: pac...@li... > Subject: PacketFence-users Digest, Vol 87, Issue 59 > > Send PacketFence-users mailing list submissions to > pac...@li... > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.sourceforge.net/lists/listinfo/packetfence-users > or, via email, send a message with subject or body 'help' to > pac...@li... > > You can reach the person managing the list at > pac...@li... > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of PacketFence-users digest..." > > > Today's Topics: > > 1. pf server and juniper switch communication (Kishore) > 2. Re: Rate limiting / Throttling (Fabrice DURAND) > 3. Re: pf server and juniper switch communication (Fabrice DURAND) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 23 Jul 2015 12:30:32 +0545 > From: "Kishore" <ki...@vi...> > Subject: [PacketFence-users] pf server and juniper switch > communication > To: <pac...@li...> > Message-ID: <000701d0c513$2bd3dda0$837b98e0$@com.np> > Content-Type: text/plain; charset="us-ascii" > > Hi all, > > I have installed packetfence server in a VM of zen host. I have installed > packetfence version 5.2 and ip address use for the server is 10.1.2.28. > the content of pf.conf is as follows:- > > [interface eth0.10] > enforcement=inlinel2 > ip=192.168.10.1 > type=internal > mask=255.255.255.0 > > [interface eth0.11] > ip=10.1.2.28 > type=management,high-availability > mask=255.255.255.240 > > [interface eth0.132] > enforcement=vlan > ip=192.168.132.1 > type=internal > mask=255.255.255.0 > > [interface eth0.12] > ip=192.168.12.1 > type=portal > mask=255.255.255.0 > > [interface eth0.13] > enforcement=vlan > ip=192.168.13.1 > type=internal > mask=255.255.255.0 > > > and the content of switch.conf is > > [10.1.32.245] > RoleMap=N > mode=registration > VlanMap=N > AccessListMap=N > description=Juniper Ex 2200 > type=Juniper::EX2200 > VoIPEnabled=N > uplink_dynamic=0 > uplink=1 > inlineTrigger=always::1 > > and i have a juniper ex 2200 switch. i have configure juniper to start > getting a copy of all the DHCP traffic and start populating its database. So > i use below command > The IP address of switch is 10.1.32.245 and I can ping and ssh to switch > from pf server. > > forwarding-options { > helpers { > bootp { > server 10.1.2.28; > > > Now i can see some Mac addresses in juniper switch port ge-0/0/2 but it not > being forwarde to the Nodes of packetfence. > > #run show ethernet-switching table > Ethernet-switching table: 27 entries, 26 learned, 0 persistent entries > VLAN MAC address Type Age Interfaces > default * Flood - All-members > default 00:03:0f:10:3e:a3 Learn 0 ge-0/0/2.0 > default 00:03:0f:12:18:1a Learn 33 ge-0/0/2.0 > default 00:0c:29:fc:c5:b9 Learn 0 ge-0/0/2.0 > default 00:0e:5e:14:f2:7a Learn 0 ge-0/0/2.0 > default 00:0e:5e:15:13:2a Learn 0 ge-0/0/2.0 > default 00:15:65:46:83:f3 Learn 51 ge-0/0/4.0 > default 00:1a:64:94:06:a8 Learn 4:44 ge-0/0/2.0 > default 00:e0:2b:00:00:01 Learn 1:06 ge-0/0/2.0 > default 00:e0:4c:41:05:77 Learn 1:03 ge-0/0/2.0 > default 00:e0:4c:50:ae:9a Learn 0 ge-0/0/2.0 > default 00:e0:4c:80:a3:57 Learn 0 ge-0/0/2.0 > default 08:86:3b:8d:e8:b3 Learn 51 ge-0/0/2.0 > default 10:78:d2:81:8e:51 Learn 54 ge-0/0/2.0 > default 14:f6:5a:ee:7f:fa Learn 0 ge-0/0/2.0 > default 3c:61:04:6a:e7:c1 Learn 0 ge-0/0/2.0 > default 3c:61:04:fa:9f:c1 Learn 0 ge-0/0/2.0 > default 9c:4e:20:2e:92:8d Learn 0 ge-0/0/2.0 > default 9c:4e:20:2e:92:98 Learn 0 ge-0/0/2.0 > default 9c:ad:97:6b:27:b5 Learn 0 ge-0/0/2.0 > default b0:00:b4:0e:ee:80 Learn 0 ge-0/0/2.0 > default bc:5f:f4:bf:95:95 Learn 1:27 ge-0/0/2.0 > default bc:67:1c:c8:26:ac Learn 1:35 ge-0/0/2.0 > default bc:67:1c:c8:26:ae Learn 41 ge-0/0/2.0 > default cc:e1:7f:8c:06:18 Learn 0 ge-0/0/2.0 > default cc:e1:7f:8c:b1:ff Learn 0 ge-0/0/22.0 > default dc:85:de:32:e1:9d Learn 0 ge-0/0/2.0 > > I am not able to communicate between switch and the packetfence server. > > Can anybody help me? > > > > Thank you, > > ------ > Regards, > > Kishore Thapa > System Administrator, > The Village, > United Distribution Nepal Pvt.Ltd., > Trade Tower Thapathali > > > ********************************* > > > > > ------------------------------ > > Message: 2 > Date: Thu, 23 Jul 2015 08:25:30 -0400 > From: Fabrice DURAND <fd...@in...> > Subject: Re: [PacketFence-users] Rate limiting / Throttling > To: pac...@li... > Message-ID: <55B...@in...> > Content-Type: text/plain; charset="windows-1252" > > >From the prompt, there is no configuration file yet. > > Regards > Fabrice > > Le 2015-07-23 05:01, Andy A a ?crit : >> Great, you guys are using tc too! That's perfect. I read the PDF, but >> it wasn't clear where exactly am I applying the tc rules or which >> configuration file? >> Can you tell me? >> >> ------------------------------------------------------------------------ >> Date: Wed, 22 Jul 2015 19:16:07 -0400 >> From: fd...@in... >> To: pac...@li... >> Subject: Re: [PacketFence-users] Rate limiting / Throttling >> >> Hi Andy, >> >> check that >> > http://www.packetfence.org/downloads/PacketFence/doc/PacketFence_Inline_Depl > oyment_Quick_Guide_ZEN-5.3.0.pdf >> (Traffic shaping) >> >> Regards >> Fabrice >> >> >> Le 2015-07-22 19:09, Andy A a ?crit : >> >> I am using PF 5.2.0 on CentOS 6.6 in inline mode. >> >> 1. Can PF do rate limiting or throttling / bandwidth shaping for a >> connected client device i.e. on a per user/device basis? >> 2. If so, how do I do it? >> 3. If not, what are my best options to implement something like >> this? One option could be through tc? >> >> >> > ---------------------------------------------------------------------------- > -- >> >> >> _______________________________________________ >> PacketFence-users mailing list >> Pac...@li... > <mailto:Pac...@li...> >> https://lists.sourceforge.net/lists/listinfo/packetfence-users >> >> >> >> > ---------------------------------------------------------------------------- > -- >> _______________________________________________ PacketFence-users >> mailing list Pac...@li... >> https://lists.sourceforge.net/lists/listinfo/packetfence-users >> >> >> > ---------------------------------------------------------------------------- > -- >> >> _______________________________________________ >> PacketFence-users mailing list >> Pac...@li... >> https://lists.sourceforge.net/lists/listinfo/packetfence-users > |
