Re: [PacketFence-users] Radius Server Authentication

[Fabrice D. <fd...@in...>]

Hello Daniel,

you don't have to create a radius Authentication source but you need to
configure the switch in PacketFence (with a radius secret).

Next you need to configure the switch to use PacketFence as a radius
accounting server.

Regards

Fabrice



Le 2017-05-15 à 04:37, Daniel Germann a écrit :
> Hello Packetfence Users,
>
> i've got a Problem with Packetfence. I'm using the Packetfence Zero 
> Effort NAC v7 on a Server with an HP2500 Switch in Hybrid Enforcement. I 
> want to use Bandwith Limitation and therefore i need the Radius 
> Accounting. I set up a new Authentication Sources Radius with the 
> localhost Address and set the secret on both Packetfence and Switch. I 
> created a local User in the users file from radius and want to sign in 
> but the radius server rejected. The log radius logs says:
>
> May 15 08:14:02 PacketFence-ZEN auth[4384]: Need 1 more connections to 
> reach min connections (3)
> May 15 08:14:02 PacketFence-ZEN auth[4384]: rlm_rest (rest): Opening 
> additional connection (11), 1 of 62 pending slots used
> May 15 08:14:02 PacketFence-ZEN auth[4384]: Need 1 more connections to 
> reach min connections (3)
> May 15 08:14:02 PacketFence-ZEN auth[4384]: rlm_sql (sql): Opening 
> additional connection (13), 1 of 62 pending slots used
> May 15 08:14:02 PacketFence-ZEN auth[4384]: (12) Rejected in post-auth: 
> [steve] (from client localhost port 12)
> May 15 08:14:16 PacketFence-ZEN auth[4384]: (13) rest: ERROR: Server 
> returned:
> May 15 08:14:16 PacketFence-ZEN auth[4384]: (13) rest: ERROR: 
> {"control:PacketFence-Authorization-Status":"allow","Reply-Message":"CLI 
> Access is not allowed by PacketFence on this switch"}
>
>
> Regards,
>
> Daniel
>
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> PacketFence-users mailing list
> Pac...@li...
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fd...@in... ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org)