PacketFence - BTS - PacketFence
View Issue Details
0001286PacketFence802.1xpublic2011-09-27 16:022011-11-21 12:05
Bruce Osborne 
obilodeau 
normalminoralways
closedfixed 
3.0.1 
3.0.33.0.3 
bdd23557cc47c0f3f87fcd704668d0ee2f2f9ed3
0001286: 802.1x Broken on Cisco Catalyst 3750
The NasPortToIfIndex subroutine for the Catalyst 2950 does not work for the Catalyst 3700. I was able to copy the subroutine from Cataslyst_3760.pm. That appears to correct the problem. Let me know if I need to submit a diff.
Sample errors from packetfence.log for switch port Gi1/0/11
Sep 26 14:39:04 pf::WebAPI(6226) INFO: handling radius autz request: from switch_ip => 10.189.21.1, connection_type => Ethernet-EAP mac => 00:14:22:e2:4e:bf, port => 50111, username => brucetest (pf::radius::authorize)
Sep 26 14:39:04 pf::WebAPI(6226) WARN: Unknown NAS-Port format. ifIndex translation could have failed. VLAN re-assignment and switch/port accounting will be affected. (pf::SNMP::Cisco::Catalyst_2950::NasPortToIfIndex)
No tags attached.
Issue History
2011-09-27 16:02Bruce OsborneNew Issue
2011-09-27 16:06Bruce OsborneNote Added: 0002300
2011-09-28 14:02obilodeauStatusnew => assigned
2011-09-28 14:02obilodeauAssigned To => obilodeau
2011-09-28 14:03obilodeauNote Added: 0002301
2011-09-28 14:03obilodeauTarget Version => +1
2011-09-28 14:07Bruce OsborneNote Added: 0002302
2011-10-25 10:37fgaudreaultmtn revision => bdd23557cc47c0f3f87fcd704668d0ee2f2f9ed3
2011-10-25 10:37fgaudreaultNote Added: 0002396
2011-10-25 10:37fgaudreaultStatusassigned => resolved
2011-10-25 10:37fgaudreaultFixed in Version => +1
2011-10-25 10:37fgaudreaultResolutionopen => fixed
2011-10-25 12:05obilodeauNote Added: 0002402
2011-11-21 12:04obilodeauNote Added: 0002461
2011-11-21 12:04obilodeauTarget Version+1 => 3.0.3
2011-11-21 12:05obilodeauStatusresolved => closed
2011-11-21 12:05obilodeauFixed in Version+1 => 3.0.3

Notes
(0002300)
Bruce Osborne   
2011-09-27 16:06   
Let me know if you need a diff.
(0002301)
obilodeau   
2011-09-28 14:03   
What IOS version do you run? The 3750's did rely on the 2950 instead of 2960 for some port-security behavior but I believe this was streamlined by newer IOS releases.

Knowing IOS version would help us document a minimum requirement for MAC-Auth / dot1x on the 3750.

Thanks,
(0002302)
Bruce Osborne   
2011-09-28 14:07   
12.2(55)SE


Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 28 WS-C3750G-24PS 12.2(55)SE C3750-IPBASEK9-M
(0002396)
fgaudreault   
2011-10-25 10:37   
Fixed.

Module now inherits of Catalyst_2960 instead.
(0002402)
obilodeau   
2011-10-25 12:05   
Made additional changes in revno: d0abeac4a242483523e6a1cefc13e18b3daf9be1
(0002461)
obilodeau   
2011-11-21 12:04   
Fixed released in 3.0.3 today.