Hivemanager NG and packetfence

  • 1
  • Question
  • Updated 5 months ago
We're rolling out multiple Aerohive 245x ap's with Hivemanager NG and looking to control authentication and vlan membership with PacketFence, the configuration guides are old and not for Hivemanager NG

we can get the AP into PacketFence and get into the registration page, and authenticate

the AP then tries to move the client into the correct VLAN but fails and it remians in the registration VLAN.

has anyone managed to get PacketFence working with Hivemanager NG
Photo of Scott Mungall

Scott Mungall

  • 3 Posts
  • 0 Reply Likes

Posted 6 months ago

  • 1
Photo of Gary Smith

Gary Smith, Official Rep

  • 299 Posts
  • 61 Reply Likes
Scott,

Can you give us some more details on how the SSID is configured please? I would look at running a debug on the AP CLI to see what is happening at the time of the authentication; "_debug auth info"

I assume a user profile attribute should be assigned in order to change the VLAN - is this happening? Is the User Profile Application Sequence correct on the SSID config? Are you seeing the attribute being returned by the PF?

Thanks,
Gary
Photo of Scott Mungall

Scott Mungall

  • 3 Posts
  • 0 Reply Likes
Hi Gary,

thanks for the reply

the SSID is set to open using MAC authentication.

there are user profiles setup for registration, isolation and production vlans, with the correct vlan tags

the registration profile is set as the default and devices get an IP from it when they connect, users can authenticate with packet fence and get the alert that their network will change and disconnect and reconnect but their vlan doesn't change.

we noticed that we cannot do a SNMP walk from the packet fence server to the AP, using the correct SNMP settings with SNMP enabled within the hivemanager, this works to the switch the AP is connected to but the AP returns a timeout.
Photo of Scott Mungall

Scott Mungall

  • 3 Posts
  • 0 Reply Likes
Thanks for all your help Gary, pointed us in the right direction to find the issue was due to a typo.