0001247: consistency problem with new access types (dot1x, mac-auth and inline) and port-security - PacketFence

Bug Tracking System

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0001247

PacketFence

core

public

2011-08-17 16:41

2015-02-18 10:55

Reporter

obilodeau

Assigned To

Priority

high

Severity

minor

Reproducibility

sometimes

Status

closed

Resolution

open

Platform

OS Version

Product Version

Target Version

3.6.1

Fixed in Version

Summary

0001247: consistency problem with new access types (dot1x, mac-auth and inline) and port-security

Description

To reproduce:
- plug in port-security port, get the registration VLAN
(at this point the MAC is authorized on the port-security port)
- unplug and plug into a port where the access type is different (dot1x, mac-auth, inline)
- register the device
Now if you move back to the port-security port, you will still be authorized and because of that your VLAN won't be re-assigned.

To fix: when a node changes access-type, the MAC on the port-security port should be removed.

This is unlikely to happen in production and the workaround is just to plug in another port or deauthorize the MAC manually.

Tags

No tags attached.

fixed in git revision

fixed in mtn revision

Attached Files

Relationships

Notes
(0003903) lmunro (administrator) 2015-02-18 10:55	Obsolete bug tracker entries. PF 4 introduced changes that either make these irrelevant or impossible to reproduce. New issues are moving to github issues.

Issue History
Date Modified	Username	Field	Change
2011-08-17 16:41	obilodeau	New Issue
2012-10-26 16:06	fgaudreault	Target Version	general => 3.6.1
2015-02-18 10:55	lmunro	Note Added: 0003903
2015-02-18 10:55	lmunro	Status	new => closed