|
From: Nicolas W. <nic...@ho...> - 2023-09-05 11:48:27
|
Good morning,
I'm trying to set up a connection portal for guests in a lab for a study project, but I can't. I followed the documentation of PacketFence in particular the point "6. Enabling the Captive Portal".
When I connect the PC to the switch, the redirection takes place but I receive the error message "ERR_CONEXION_TIMED-OUT".
Here is the configuration of the switch:
Building configuration...
Current configuration : 5340 bytes
!
! Last configuration change at 03:31:01 UTC Wed Mar 30 2011 by admin
!
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
!
username admin privilege 15 password 0 ****
aaa new-model
!
aaa group server radius packetfence
server 192.168.110.225 auth-port 1812 acct-port 1813
!
aaa authentication login default local
aaa authentication dot1x default group packetfence
aaa authorization network default group packetfence
!
aaa server radius dynamic-author
client 192.168.110.225 server-key ****
port 3799
!
aaa session-id common
system mtu routing 1500
!
!
ip domain-name tdnw.labo
!
crypto pki trustpoint TP-self-signed-2312648192
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2312648192
revocation-check none
rsakeypair TP-self-signed-2312648192
!
!
crypto pki certificate chain TP-self-signed-2312648192
certificate self-signed 02
3082022B 30820194 A0030201 02020102 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32333132 36343831 3932301E 170D3131 30333330 30353335
30395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 33313236
34383139 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100AB60 3931D2A3 6230F32C 2F3B7689 1629164E 0BD961FB 624CCB38 EA9A2D77
2BF07510 0A97931D E3A600E0 6E49E3CA 694888FC EBB78534 2A610AE1 CFF4745F
DB2CE6B9 9C1F32F0 653888F5 EF659623 D75AFC90 23F3A2A9 854FEA14 6BFB5584
6D3FB5DB 997F5984 E9485C4F 10C42172 FAF4ADEE 59734318 8BE19B2C 0B514D3C
47DF0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14A4E177 CC03C988 1829FE56 2EFF52CC 8616DEFA E6301D06
03551D0E 04160414 A4E177CC 03C98818 29FE562E FF52CC86 16DEFAE6 300D0609
2A864886 F70D0101 05050003 81810093 B9456737 EB797CEF 0A1B7B58 606E28FB
688DBC8E 064D041F 0E719982 1C668C9B 650D7DD5 CAED6BFD 6D4428C3 ED6D7F65
44D8F2AF 8A835B4B E8C3DF77 6B915EF5 D771595C 2EF09EF3 9A5BD717 735F9C41
05DAEA8B AF65240A C9D312A9 2264753F 992004B8 DFCAE30C 59B5E67B 71A9C104
19ACE1AE 433970E1 33902754 053D34
quit
dot1x system-auth-control
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
ip ssh version 2
!
interface FastEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 110
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 110
switchport mode access
!
interface FastEthernet0/4
switchport trunk encapsulation dot1q
!
interface FastEthernet0/5
switchport mode access
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate 10800
authentication timer restart 10800
mab
no snmp trap link-status
dot1x pae authenticator
dot1x timeout quiet-period 2
dot1x timeout tx-period 3
!
interface FastEthernet0/6
switchport mode access
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate 10800
authentication timer restart 10800
mab
no snmp trap link-status
dot1x pae authenticator
dot1x timeout quiet-period 2
dot1x timeout tx-period 3
!
interface FastEthernet0/7
switchport mode access
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate 10800
authentication timer restart 10800
mab
no snmp trap link-status
dot1x pae authenticator
dot1x timeout quiet-period 2
dot1x timeout tx-period 3
!
interface FastEthernet0/8
switchport mode access
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate 10800
authentication timer restart 10800
mab
no snmp trap link-status
dot1x pae authenticator
dot1x timeout quiet-period 2
dot1x timeout tx-period 3
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
interface Vlan110
ip address 192.168.110.245 255.255.255.0
!
interface Vlan120
description VLAN for employe
ip address 192.168.120.245 255.255.255.0
ip helper-address 192.168.110.225
!
interface Vlan130
description vlan for guest
ip address 192.168.130.245 255.255.255.0
ip helper-address 192.168.110.225
!
interface Vlan140
description vlan for registration
no ip address
ip helper-address 192.168.110.225
!
interface Vlan150
description vlan for isolation
no ip address
ip helper-address 192.168.110.225
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
ip access-list extended registration
deny ip any host 192.168.110.225
permit tcp any any eq www
permit tcp any any eq 443
!
snmp-server community public RO
snmp-server community private RW
!
radius-server host 192.168.110.225 auth-port 1812 acct-port 1813 timeout 2 key ****
!
line con 0
line vty 5 15
!
end
[cid:fb1ded8a-4719-403e-9af7-1ed6472eff59]
[cid:936b6583-6f67-48f5-91e9-e32d06a4a30d]
[cid:431d130a-40e5-4f3f-8be8-cec7c2603d4b]
[cid:7c16cc38-f9bd-4bca-a8f0-d3218755e4e0]
[cid:bb92b0a5-a067-403f-ab11-c826d1ce6973]
If anyone could help me solve this problem I would appreciate it.
Sincerely,
Nicolas
|