![]() ![]() The user’s device issues a DHCP/DNS request to PacketFence (which is a DHCP/DNS server on this VLAN or for this role) which sends the IP and DNS information. PacketFence server directs WLAN controller via RADIUS (RFC2868 attributes) to put the device in an "unauthenticated role“ (set of ACLs that would limit/redirect the user to the PacketFence captive portal for registration, or we can also use a registration VLAN in which PacketFence does DNS blackholing and is the DHCP server). If it does not recognize the MAC address, go to step 4. PacketFence server conducts address audit in its database. The WLAN controller transmits MAC address via RADIUS to the PacketFence server to authenticate/authorize that MAC address on the AP. If user accesses network via a registered device in PacketFence, go to step 8. User initiates association to WLAN AP and transmits MAC address. Step 4 - Confirmation - save the passwords in a secure location and start PacketFence! Without a Fingerbank API key, device profiling will not be available in PacketFence It is recommended to have a key for your PacketFence deployment. Fingerbank is used to accurately identify Internet of Things (IoT) devices, medical devices, industrial and robotics equipment and more on your network. ![]() Step 3 - Fingerbank - provide your Fingerbank API key. Make you sure to provide the PacketFence’s admin username and password to be used Step 2 - Configure PacketFence - provide the required information to properly create the PacketFence database and also provide your domain name, hostname and other required information. To set the interface to the "Management" type, click on the logical name to edit it The management interface of PacketFence and the Cisco 2960 should normally be in the same network. That network interface will be the one to which the Cisco 2960 access switch will talk to. Step 1 - Configure Network - make sure you define only one interface with the "Management" type.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |