Re: [PacketFence-users] getting started - interface questions

[Martijn L. <MLa...@de...>]

Hi,

I Think that you had to change the native vlan on your switch to something else mayby vlan 1 or something.

Try it.

[http://www.dezb.nl/content/dam/zeeland/zeeuwse/bestanden/logo-zb-email.jpg]



Martijn Langendoen
Network Administrator
Storage Administrator
mla...@de...<mailto:mla...@de...>



T: 0118 654307

[http://www.dezb.nl/content/dam/zeeland/zeeuwse/icoontjes-social-media/facebook.jpg]<https://www.facebook.com/dezbnl>[http://www.dezb.nl/content/dam/zeeland/zeeuwse/icoontjes-social-media/twitter.jpg]<https://www.twitter.com/dezbnl>[http://www.dezb.nl/content/dam/zeeland/zeeuwse/icoontjes-social-media/linkedin.jpg]<https://www.linkedin.com/company/dezbnl>[http://www.dezb.nl/content/dam/zeeland/zeeuwse/icoontjes-social-media/instagram.jpg]<https://www.instagram.com/dezbnl>/dezbnl
www.dezb.nl<http://www.dezb.nl>



Kousteensedijk 7
4331 JE Middelburg
Postbus 8004
4330 EA Middelburg





Ik werk op:
ma, wo ochtend
di,do,vr 7:30 - 17:00



Van: Jessica Cohen via PacketFence-users <pac...@li...>
Verzonden: woensdag 8 januari 2020 00:08
Aan: pac...@li...
CC: Jessica Cohen <jc...@al...>
Onderwerp: Re: [PacketFence-users] getting started - interface questions

I've been trying to get the ZEN deployment going for months now and have been failing miserably. I have a large network with 22 vlans. I've been trying to get this up with just a few vlans so I can test it.

Vlan 49 = network management - none
Vlan 50 = servers - management
Vlan 51 = user desktops - registration
Vlan 59 = guest network - isolated

I changed the vm port to just the vlan. The native vlan on the Cisco switch is 50. It gets an IP via dhcp 192.168.55.155. I can access it via the web gui and start the configuration. My desktop PC is on vlan 51. When I add vlans, I add vlan 51 and set it to registration and I immediately lose connection. If I shutdown that interface, I'm able to access it again. Can someone define what the "management" interface used for? Is it just a single IP? I've been setting the dhcp IP on the 50 vlan to management but ultimately, I want to be able to control what devices go on the 50 vlan as well. Does the "management" IP need to be on a completely separate vlan from anything else? Also, Is there some reason I can't manage the vm on the 50 vlan from my desktop on the 51 vlan? Is it because I defined the 51 vlan as registration? Will I be able to connect to and manage the NAC on the 50 vlan from my desktop on the 51 vlan?