|
From: 平嘉伟 <jia...@le...> - 2025-12-02 07:56:09
|
Hi all:
I am using pf 11.2 for wire / wireless authentication with eap and no-eap;
The setup works fine for years;
Today, one node(X) became “unreg” with no reason, I check all logs I can find and can not find out why, here is the details:
1 check web ui right after client reported, the bypass-role of X is “OA-USER-NO-WAN”, the status is “unregistered”, the unregistration is “empty”; change status to “registered”, do “reevaluate”, all good.
2 X works fine before “2025-12-02 10:52:08”(T0)
3 the audit log show “disconnect-ack” at T0
4 latest log before T0 of X is “accept” at “2025-12-02 10:29:25”(T1)
5 the “access duration” of authen policy for bypass role “OA-USER-NO-WAN” is 6 month.
5 packetfence.log shows
Dec 2 10:52:07 nac01 packetfence_httpd.webservices[1285279]: httpd.webservices(1187) WARN: [mac:c8:5a:cf:06:d7:73] Unable to pull accounting history for device c8:5a:cf:06:d7:73. The history set doesn't exist yet. (pf::accounting_events_history::latest_mac_history)
Dec 2 10:52:07 nac01 packetfence[1382039]: pfperl-api(1311921) INFO: Request to /api/v1/dhcp/mac/c8:5a:cf:06:d7:73 is unauthorized, will perform a login (pf::api::unifiedapiclient::call)
Dec 2 10:52:07 nac01 packetfence[1382039]: pfperl-api(1311921) INFO: re-evaluating access (manage_deregister called) (pf::enforcement::reevaluate_access)
Dec 2 10:52:07 nac01 packetfence[1382039]: pfperl-api(1311921) INFO: Instantiate profile CP-DOT1X (pf::Connection::ProfileFactory::_from_profile)
Dec 2 10:52:07 nac01 packetfence[1382039]: pfperl-api(1311921) INFO: is currentlog connected at (10.155.99.156) ifIndex 32798 OA-USER-NO-WAN (pf::enforcement::_should_we_reassign_vlan)
Dec 2 10:52:07 nac01 packetfence[1382039]: pfperl-api(1311921) INFO: is of status unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
Dec 2 10:52:07 nac01 packetfence[1382039]: pfperl-api(1311921) INFO: VLAN reassignment required (current VLAN = 30 but should be in VLAN 2) (pf::enforcement::_should_we_reassign_vlan)
Dec 2 10:52:07 nac01 packetfence[1382039]: pfperl-api(1311921) INFO: switch port is (10.155.99.156) ifIndex 32798connection type: Wired 802.1x (pf::enforcement::_vlan_reevaluation)
Dec 2 10:52:07 nac01 packetfence[1382039]: pfperl-api(1311921) INFO: modified c8:5a:cf:06:d7:73 from status 'reg' to 'unreg' based on unregdate colum (pf::node::nodes_maintenance)
Which component changed “status”? and why?
Any advice is appreciated.
BR
joel
|