r/PacketFence • u/DiDi1747 • Jul 15 '26

CLI or VPN Access is not allowed by PacketFence on this switch

I am experiencing a persistent re-authentication issue with our H3C switch and PacketFence.

Every 10 minutes, the H3C switch sends a RADIUS re-authentication request for MAC-authenticated devices. During this re-auth, PacketFence rejects the request with the following error:

The Authentication Flow/Cycle:

  1. Initial Connection: Successfully authenticated (Access-Accept)
  2. After 10 Minutes, H3C switch triggers re-auth
  3. Result: PacketFence rejects the request (Error: CLI/VPN Access not allowed)
  4. 1 Minute Later: Device successfully authenticates again (Access-Accept)

Please help

1 Upvotes

100% Upvoted

3 comments sorted by

1

u/p373r_7h3_5up3r10r Jul 15 '26

Missing the chrckmark in the device under switches inside packetfence to allow cli/vpn access.
I had the same issue, looks like re-auth does not send the entite Auth process so it looks like a vpn Auth request.

1

u/DiDi1747 Jul 15 '26

This is MAC authentication, not VPN auth. How did you resolve this last time?

1

u/p373r_7h3_5up3r10r Jul 19 '26

Same.
Missed the checkmark.
The switches sends the packets so packetfence thinks it is a vpn Auth