Re: [PacketFence-users] Unsupported Device [WAS: PF sending out SNMP De-Auth when set to RADIUS]

[Sallee, J. <Jak...@um...>]

Loius:

Sorry, its been so long in getting back with you.  I decided to use a test server to finish our testing with since putting our production server in debug mode was going to generate insane amounts of logs only a small percentage of which we would be interested in.

Currently I am getting 15-20 authorizations a second (and that's a slow period) ... debug mode would have been ... interesting.

So! New server, in debug mode : )

Saw this line in the packetfence.log file:

Sep 29 11:06:06 httpd.aaa(4076) WARN: (10.11.40.252) Sending REJECT since switch is unsupported (pf::radius::_switchUnsupportedReply)


... how do I tell PF to use RADIUS with this device.

Here is my switches.conf

[10.11.40.252]
type=Aruba
radiusSecret=[REDACTED]
guestVlan=112
defaultRole=default
defaultVlan=111
deauthMethod=RADIUS
AccessListMap=N
gamingRole=gaming
type=Aruba::Controller_200
guestRole=guest
gamingVlan=112

I have tried both aruba switch types with no luck.

How do I force PF to use RADIUS with these APs?

Jake Sallee
Godfather of Bandwidth
System Engineer
University of Mary Hardin-Baylor
WWW.UMHB.EDU

900 College St.
Belton, Texas
76513

Fone: 254-295-4658
Phax: 254-295-4221
________________________________
From: Louis Munro [lm...@in...]
Sent: Monday, September 28, 2015 3:22 PM
To: pac...@li...
Subject: Re: [PacketFence-users] PF sending out SNMP De-Auth when set to RADIUS


On Sep 28, 2015, at 14:47 , Sallee, Jake <Jak...@um...<mailto:Jak...@um...>> wrote:


I did some more testing and we cannot see any RADIUS messages on any port other than access-request, access-accept, account-request, and accounting-response.



Hi Jake,

Just to be sure, there is nothing at all going out from that server on port 3799?
Not even going to the wrong IP for the controller or AP?

Could you show me the switches.conf's section for that AP?

Try changing the loglevel to the httpd.portal and httpd.webservices to “DEBUG”.
That should give us additional insight into what is going on.

Regards,
--
Louis Munro
lm...@in...<mailto:lm...@in...>  ::  www.inverse.ca<http://www.inverse.ca>
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and PacketFence (www.packetfence.org<http://www.packetfence.org>)