Menu
▾
▴
[PacketFence-users] Aruba 2930 DACLs not working on version 12.2
|
From: Yassine B. <yas...@gm...> - 2023-04-03 08:10:20
|
<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>Hello everyone ,<br/> I'm currently testing packetfence for my company. I started with version 11.2 but I decided to upgrade to 12.2 because of an issue that I think prevented getting the captive portal to work in vlan enforcement mode (A guest computer placed in the registration VLAN was redirected to "packetfence.domain/captive-portal" that points to 66.70.255.147 but the page was loading indefinitely). The problem is that after the update I have the following error when trying to save ACLs for registration VLAN: <div> </div> <div> "AccessListMapping.0.accesslist: WARNING: Syntax error in ACL:packetfence, near: >in<.</div> <div><small>config/switch/192.168.1.10" </small></div> <div> </div> <div>I also had an AD authentication source for the domain computers that worked fine before the update, but stopped working now (Audit tab shows successfuls authentications, but the computers don't get internet access anymore).</div> <div> </div> <div>Here is my switches.conf :<br/> <div>[default]<br/> description=aruba sw<br/> VlanMap=N<br/> ExternalPortalEnforcement=Y<br/> deauthOnPrevious=N</div> <div>[192.168.1.10]<br/> group=default<br/> description=ARUBA 2930<br/> wsPwd=xxxxxx<br/> wsUser=xxxxxx<br/> SNMPPrivProtocolWrite=md5<br/> SNMPPrivProtocolRead=md5<br/> SNMPAuthProtocolRead=md5<br/> SNMPAuthProtocolWrite=md5<br/> SNMPUserNameWrite=xxxxxx<br/> SNMPVersion=3<br/> SNMPUserNameRead=xxxxxx<br/> SNMPAuthPasswordWrite=xxxxxx<br/> SNMPAuthPasswordRead=xxxxxx<br/> SNMPPrivPasswordRead=xxxxxx<br/> SNMPPrivPasswordWrite=xxxxxx<br/> SNMPEngineID=xxxxxx<br/> SNMPPrivProtocolTrap=AES<br/> SNMPUserNameTrap=xxxxxx<br/> SNMPAuthProtocolTrap=md5<br/> SNMPVersionTrap=3<br/> SNMPAuthPasswordTrap=xxxxxx<br/> SNMPPrivPasswordTrap=xxxxxx<br/> guestVlan=10<br/> defaultVlan=10<br/> registrationVlan=20<br/> type=Aruba::2930M<br/> radiusSecret=xxxxxx<br/> VlanMap=Y<br/> coaPort=3799<br/> isolationVlan=99<br/> UserVlan=10<br/> macDetectionVlan=20<br/> ExternalPortalEnforcement=N<br/> registrationUrl=http://192.168.1.4/Aruba::2930M<br/> UrlMap=Y<br/> AccessListMap=Y</div> <div> </div> <div> </div> <div>The ACLS that I try to save are the one from the Network Devices Configuration Guide for Aruba 2930 switch:</div> <div> </div> <div>permit in tcp from any to 192.168.1.4 80<br/> permit in tcp from any to 192.168.1.4 443<br/> deny in tcp from any to any 80 cpy<br/> deny in tcp from any to any 443 cpy<br/> permit in udp from any to any 53<br/> permit in udp from any to any 67</div> <div> </div> <div>Any help would be really appreciated</div> </div> <div> </div> <div> </div> </div> <div> </div> <div class="signature"> </div></div></body></html> |
