|
Notes |
|
|
|
if you are bitten by this, right now you can apply the following patch until we do a release:
#
# old_revision [0ec2fb1de198850e403ac44ebae47a7f206ee51c]
#
# patch "pf/lib/pf/vlan.pm"
# from [804c8a96848f4ba25c0dd8f86fbaa12854714ba5]
# to [7543ef21e77148ed2d91512a41da2e794dfdff57]
#
============================================================
--- pf/lib/pf/vlan.pm 804c8a96848f4ba25c0dd8f86fbaa12854714ba5
+++ pf/lib/pf/vlan.pm 7543ef21e77148ed2d91512a41da2e794dfdff57
@@ -142,9 +142,13 @@ sub custom_doWeActOnThisTrap {
return 1;
}
if ( $trapType eq 'dot11Deauthentication' ) {
- # we no longer act on dot11Deauth traps see bug 0000880
- # http://www.packetfence.org/mantis/view.php?id=880 [^]
- return 0;
+ if ($switch->{_ip} eq '127.0.0.1') {
+ return 1;
+ } else {
+ # we no longer act on non-local dot11Deauth traps see bug 0000880
+ # http://www.packetfence.org/mantis/view.php?id=880 [^]
+ return 0;
+ }
}
my $ifType = $switch->getIfType($ifIndex);
|
|
|
|
|
|
I need to do more testing to confirm this one, the code path is impossible to reach. I added more logging and i'll retest before confirming this is actually a bug. |
|
|
|
|
|
We will try to look at it for 1.9.1. |
|
|
|
|
|
Reminder sent to: rbalzard
I'm confused by this one. We will need to look at it and talk about it together. |
|
|
|
|
dot11Deauthenticate traps are not required for proper isolation, only for proper locationlog management.
dot11Deauthenticate traps should never be sent by 127.0.0.1 so this fix is irrelevant.
deAssociate traps are sent from 127.0.0.1 and we should act upon them which the code currently does. |
|