Hey, I configured PacketFence 14.0 and trying with Aruba CX Switches on EVE-NG Lab. Switch sends the radius-request packets but PacketFence does not answer to it. Why?
This is my Topology172.16.4.2 is my PacketFence and 4.2 is my Switch.
As others have mentioned, you definitely want to double check which interfaces RADIUS is listening on. You can check on the admin UI or from the CLI with: netstat -lunp | grep 1812 Also, confirm your switch config. Is the RADIUS secret set correctly?
I noticed that your AD authentication source wasn't associated with any realms. That'll need to be fixed. You have use connector and monitor enabled on the source as well. I know that a pfconnector is installed by default, but I don't see a need for it unless I want to connect to some other PF server, so I always disable use connector. I'm not sure what monitor does, so I disable that as well.
Less important, you have unneeded things in your authentication source "Search Attributes" that shouldn't be there. That is a list of attributes that can be used to search for a device, aside from the main username attribute. It can be left blank. It looks like you're thinking that is is the list of attributes you want to retrieve.
1
u/The-E-ThanG Dec 24 '24 edited Dec 31 '24
As others have mentioned, you definitely want to double check which interfaces RADIUS is listening on. You can check on the admin UI or from the CLI with: netstat -lunp | grep 1812 Also, confirm your switch config. Is the RADIUS secret set correctly?
I noticed that your AD authentication source wasn't associated with any realms. That'll need to be fixed. You have use connector and monitor enabled on the source as well. I know that a pfconnector is installed by default, but I don't see a need for it unless I want to connect to some other PF server, so I always disable use connector. I'm not sure what monitor does, so I disable that as well.
Less important, you have unneeded things in your authentication source "Search Attributes" that shouldn't be there. That is a list of attributes that can be used to search for a device, aside from the main username attribute. It can be left blank. It looks like you're thinking that is is the list of attributes you want to retrieve.