Skip to content

Captive portal looping issue 15.x version #8854

@ghoshd02

Description

@ghoshd02

When redirect to Captive portal its keep os looping on newer version. screenshot attached for artifact I suspect this issue happen due to template issue IOS XE identify as an AireOS

Image

logs as well

2025-12-11T21:54:46.690566+00:00 packetfence auth[298284]: (472) Login OK: [fa132c2a4a33] (from client 192.168.10.110/32 port 111 cli fa:13:2c:2a:4a:33)
2025-12-11T21:54:46.649973+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:fa:13:2c:2a:4a:33] Unable to extract audit-session-id of Cisco-AVPair: service-type=Call Check (pf::Switch::getCiscoAvPairAttribute)
2025-12-11T21:54:46.652372+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:fa:13:2c:2a:4a:33] handling radius autz request: from switch_ip => (192.168.10.110), connection_type => Wireless-802.11-NoEAP, switch_mac => (48:00:b3:f1:c6:e0), mac => [fa:13:2c:2a:4a:33], port => 111, username => "fa132c2a4a33", ssid => GUEST (pf::radius::authorize)
2025-12-11T21:54:46.665761+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:fa:13:2c:2a:4a:33] Instantiate profile Guest (pf::Connection::ProfileFactory::_from_profile)
2025-12-11T21:54:46.679627+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:fa:13:2c:2a:4a:33] is of status unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
2025-12-11T21:54:46.683086+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:fa:13:2c:2a:4a:33] (192.168.10.110) Added VLAN 104 to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T21:54:46.683189+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:fa:13:2c:2a:4a:33] (192.168.10.110) Added role PF_REDIRECT to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T21:54:46.684801+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:fa:13:2c:2a:4a:33] Adding web authentication redirection to reply using role: 'PF_REDIRECT' and URL: 'http://192.168.10.75/captive-portal?PORTAL=Guest/sidb0a83c?' (pf::Switch::Cisco::Cisco_WLC_AireOS::returnRadiusAccessAccept)
2025-12-11T21:54:46.755802+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:fa:13:2c:2a:4a:33] Updating locationlog from accounting request (pf::api::handle_accounting_metadata)
2025-12-11T21:55:02.058182+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T21:55:02.058731+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T21:55:03.094613+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T21:55:03.312526+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(10) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490103.27193 1765490103.31172) (pf::security_event::security_event_maintenance)
2025-12-11T21:55:06.197063+00:00 packetfence pfqueue-backend[296514]: pfqueue(296514) INFO: [mac:unknown] Running task api (main::process_data)
2025-12-11T21:55:06.197587+00:00 packetfence pfqueue-backend[296514]: pfqueue(296514) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T21:56:03.111528+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(13) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T21:56:03.116464+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490163.10147 1765490163.11562) (pf::security_event::security_event_maintenance)
2025-12-11T21:56:03.121484+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T21:56:03.125490+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T21:57:01.908225+00:00 packetfence pfqueue-backend[296491]: pfqueue(295099) INFO: [mac:unknown] Running task api (main::process_data)
2025-12-11T21:57:01.908630+00:00 packetfence pfqueue-backend[296491]: pfqueue(295099) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T21:57:03.092684+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(12) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T21:57:03.104890+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T21:57:03.105442+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T21:57:03.137759+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490223.09509 1765490223.13695) (pf::security_event::security_event_maintenance)
2025-12-11T21:57:17.249498+00:00 packetfence auth[298284]: Adding client 192.168.10.110/32
2025-12-11T21:57:17.249913+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T21:57:17.249978+00:00 packetfence auth[298284]: BlastRADIUS check: Received packet without Proxy-State.
2025-12-11T21:57:17.250047+00:00 packetfence auth[298284]: Setting "limit_proxy_state = true" for client 192.168.10.110/32
2025-12-11T21:57:17.250093+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T21:57:17.250141+00:00 packetfence auth[298284]: The packet contains Message-Authenticator.
2025-12-11T21:57:17.250183+00:00 packetfence auth[298284]: The client has likely been upgraded to protect from the attack.
2025-12-11T21:57:17.250232+00:00 packetfence auth[298284]: Please set "require_message_authenticator = true" for client 192.168.10.110/32
2025-12-11T21:57:17.250278+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T21:57:17.348197+00:00 packetfence auth[298284]: (624) Login OK: [aa61b2484a64] (from client 192.168.10.110/32 port 111 cli aa:61:b2:48:4a:64)
2025-12-11T21:57:17.289627+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:[undef]] Unable to extract audit-session-id of Cisco-AVPair: service-type=Call Check (pf::Switch::getCiscoAvPairAttribute)
2025-12-11T21:57:17.294387+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] handling radius autz request: from switch_ip => (192.168.10.110), connection_type => Wireless-802.11-NoEAP, switch_mac => (48:00:b3:f1:c6:e0), mac => [aa:61:b2:48:4a:64], port => 111, username => "aa61b2484a64", ssid => GUEST (pf::radius::authorize)
2025-12-11T21:57:17.321332+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Instantiate profile Guest (pf::Connection::ProfileFactory::_from_profile)
2025-12-11T21:57:17.332961+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] is of status unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
2025-12-11T21:57:17.336923+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] (192.168.10.110) Added VLAN 104 to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T21:57:17.337172+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] (192.168.10.110) Added role PF_REDIRECT to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T21:57:17.341031+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Adding web authentication redirection to reply using role: 'PF_REDIRECT' and URL: 'http://192.168.10.75/captive-portal?PORTAL=Guest/sida86f46?' (pf::Switch::Cisco::Cisco_WLC_AireOS::returnRadiusAccessAccept)
2025-12-11T21:57:17.372980+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Updating locationlog from accounting request (pf::api::handle_accounting_metadata)
2025-12-11T21:58:02.103895+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T21:58:02.105288+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T21:58:02.137106+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(13) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490282.0863 1765490282.13642) (pf::security_event::security_event_maintenance)
2025-12-11T21:58:03.078964+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T21:59:02.163674+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(11) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490342.11831 1765490342.16282) (pf::security_event::security_event_maintenance)
2025-12-11T21:59:03.080486+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T21:59:03.087543+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(11) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T21:59:03.087772+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(11) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T21:59:03.768177+00:00 packetfence pfqueue-backend[296514]: pfqueue(296514) INFO: [mac:unknown] Running task api (main::process_data)
2025-12-11T21:59:03.768177+00:00 packetfence pfqueue-backend[296514]: pfqueue(296514) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T22:00:02.071308+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:00:02.071308+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:00:02.088595+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:00:02.094431+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490402.08032 1765490402.09353) (pf::security_event::security_event_maintenance)
2025-12-11T22:01:03.093730+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:01:03.093730+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:01:03.132982+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490463.09105 1765490463.13211) (pf::security_event::security_event_maintenance)
2025-12-11T22:01:03.265437+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:01:07.668104+00:00 packetfence pfqueue-backend[296514]: pfqueue(296514) INFO: [mac:unknown] Running task api (main::process_data)
2025-12-11T22:01:07.668574+00:00 packetfence pfqueue-backend[296514]: pfqueue(296514) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T22:02:02.073970+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:02:02.106325+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(11) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490522.06706 1765490522.10553) (pf::security_event::security_event_maintenance)
2025-12-11T22:02:03.287036+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(11) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:02:03.287036+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(11) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:02:19.978105+00:00 packetfence auth[298284]: Adding client 192.168.10.110/32
2025-12-11T22:02:19.978537+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:02:19.978611+00:00 packetfence auth[298284]: BlastRADIUS check: Received packet without Proxy-State.
2025-12-11T22:02:19.978674+00:00 packetfence auth[298284]: Setting "limit_proxy_state = true" for client 192.168.10.110/32
2025-12-11T22:02:19.978727+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:02:19.978770+00:00 packetfence auth[298284]: The packet contains Message-Authenticator.
2025-12-11T22:02:19.978809+00:00 packetfence auth[298284]: The client has likely been upgraded to protect from the attack.
2025-12-11T22:02:19.978851+00:00 packetfence auth[298284]: Please set "require_message_authenticator = true" for client 192.168.10.110/32
2025-12-11T22:02:19.978910+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:02:20.014189+00:00 packetfence auth[298284]: (927) Login OK: [aa61b2484a64] (from client 192.168.10.110/32 port 111 cli aa:61:b2:48:4a:64)
2025-12-11T22:02:19.983821+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Unable to extract audit-session-id of Cisco-AVPair: service-type=Call Check (pf::Switch::getCiscoAvPairAttribute)
2025-12-11T22:02:19.985108+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] handling radius autz request: from switch_ip => (192.168.10.110), connection_type => Wireless-802.11-NoEAP, switch_mac => (48:00:b3:f1:c6:e0), mac => [aa:61:b2:48:4a:64], port => 111, username => "aa61b2484a64", ssid => GUEST (pf::radius::authorize)
2025-12-11T22:02:19.993621+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Instantiate profile Guest (pf::Connection::ProfileFactory::_from_profile)
2025-12-11T22:02:19.996782+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] is of status unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
2025-12-11T22:02:19.998728+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] (192.168.10.110) Added VLAN 104 to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T22:02:19.998938+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] (192.168.10.110) Added role PF_REDIRECT to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T22:02:20.000454+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Adding web authentication redirection to reply using role: 'PF_REDIRECT' and URL: 'http://192.168.10.75/captive-portal?PORTAL=Guest/sid04e1d7?' (pf::Switch::Cisco::Cisco_WLC_AireOS::returnRadiusAccessAccept)
2025-12-11T22:02:20.160169+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Updating locationlog from accounting request (pf::api::handle_accounting_metadata)
2025-12-11T22:03:02.057519+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:03:03.100333+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:03:03.100989+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:03:03.117204+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490583.10004 1765490583.11616) (pf::security_event::security_event_maintenance)
2025-12-11T22:03:09.525333+00:00 packetfence pfqueue-backend[296511]: pfqueue(295099) INFO: [mac:[undef]] Running task api (main::process_data)
2025-12-11T22:03:09.525914+00:00 packetfence pfqueue-backend[296511]: pfqueue(295099) INFO: [mac:[undef]] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T22:04:02.082576+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(13) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:04:02.111160+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490642.09595 1765490642.11023) (pf::security_event::security_event_maintenance)
2025-12-11T22:04:03.087052+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:04:03.087837+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:05:02.060202+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:05:03.100117+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:05:03.100117+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:05:03.138516+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490703.09324 1765490703.13752) (pf::security_event::security_event_maintenance)
2025-12-11T22:05:20.596120+00:00 packetfence pfqueue-backend[296511]: pfqueue(295099) INFO: [mac:unknown] Running task api (main::process_data)
2025-12-11T22:05:20.596596+00:00 packetfence pfqueue-backend[296511]: pfqueue(295099) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T22:06:02.063437+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:06:02.063437+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:06:03.094494+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(11) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:06:03.307439+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(13) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490763.26586 1765490763.30657) (pf::security_event::security_event_maintenance)
2025-12-11T22:07:03.085684+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:07:03.129950+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490823.08653 1765490823.12904) (pf::security_event::security_event_maintenance)
2025-12-11T22:07:03.272393+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(15) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:07:03.272393+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(15) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:07:14.265422+00:00 packetfence pfqueue-backend[296515]: pfqueue(295099) INFO: [mac:[undef]] Running task api (main::process_data)
2025-12-11T22:07:14.266006+00:00 packetfence pfqueue-backend[296515]: pfqueue(295099) INFO: [mac:[undef]] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T22:07:40.071705+00:00 packetfence auth[298284]: Adding client 192.168.10.110/32
2025-12-11T22:07:40.072178+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:07:40.072297+00:00 packetfence auth[298284]: BlastRADIUS check: Received packet without Proxy-State.
2025-12-11T22:07:40.072350+00:00 packetfence auth[298284]: Setting "limit_proxy_state = true" for client 192.168.10.110/32
2025-12-11T22:07:40.072400+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:07:40.072443+00:00 packetfence auth[298284]: The packet contains Message-Authenticator.
2025-12-11T22:07:40.072497+00:00 packetfence auth[298284]: The client has likely been upgraded to protect from the attack.
2025-12-11T22:07:40.072549+00:00 packetfence auth[298284]: Please set "require_message_authenticator = true" for client 192.168.10.110/32
2025-12-11T22:07:40.072595+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:07:40.079142+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Unable to extract audit-session-id of Cisco-AVPair: service-type=Call Check (pf::Switch::getCiscoAvPairAttribute)
2025-12-11T22:07:40.124301+00:00 packetfence auth[298284]: (1249) Login OK: [aa61b2484a64] (from client 192.168.10.110/32 port 111 cli aa:61:b2:48:4a:64)
2025-12-11T22:07:40.081228+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] handling radius autz request: from switch_ip => (192.168.10.110), connection_type => Wireless-802.11-NoEAP, switch_mac => (48:00:b3:f1:c6:e0), mac => [aa:61:b2:48:4a:64], port => 111, username => "aa61b2484a64", ssid => GUEST (pf::radius::authorize)
2025-12-11T22:07:40.096425+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Instantiate profile Guest (pf::Connection::ProfileFactory::_from_profile)
2025-12-11T22:07:40.110588+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] is of status unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
2025-12-11T22:07:40.114433+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] (192.168.10.110) Added VLAN 104 to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T22:07:40.114700+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] (192.168.10.110) Added role PF_REDIRECT to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T22:07:40.117521+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Adding web authentication redirection to reply using role: 'PF_REDIRECT' and URL: 'http://192.168.10.75/captive-portal?PORTAL=Guest/sidda79fb?' (pf::Switch::Cisco::Cisco_WLC_AireOS::returnRadiusAccessAccept)
2025-12-11T22:07:40.182313+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Updating locationlog from accounting request (pf::api::handle_accounting_metadata)
2025-12-11T22:08:02.068445+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(15) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:08:02.105202+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(13) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490882.06513 1765490882.10443) (pf::security_event::security_event_maintenance)
2025-12-11T22:08:03.115061+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:08:03.115061+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:09:02.090229+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(10) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:09:03.120585+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(15) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:09:03.121252+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(15) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:09:03.170470+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(10) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765490943.12245 1765490943.1695) (pf::security_event::security_event_maintenance)
2025-12-11T22:09:12.024765+00:00 packetfence pfqueue-backend[296514]: pfqueue(296514) INFO: [mac:unknown] Running task api (main::process_data)
2025-12-11T22:09:12.025183+00:00 packetfence pfqueue-backend[296514]: pfqueue(296514) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T22:10:02.056543+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:10:03.112090+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:10:03.112972+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:10:03.153420+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(11) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765491003.09976 1765491003.15248) (pf::security_event::security_event_maintenance)
2025-12-11T22:11:02.075865+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:11:02.116354+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765491062.07491 1765491062.11558) (pf::security_event::security_event_maintenance)
2025-12-11T22:11:03.097944+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:11:03.097944+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:11:21.048313+00:00 packetfence pfqueue-backend[296515]: pfqueue(295099) INFO: [mac:unknown] Running task api (main::process_data)
2025-12-11T22:11:21.048786+00:00 packetfence pfqueue-backend[296515]: pfqueue(295099) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T22:12:02.088512+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(10) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:12:02.089367+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(10) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:12:02.099181+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(17) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765491122.0829 1765491122.09827) (pf::security_event::security_event_maintenance)
2025-12-11T22:12:03.271707+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(15) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:12:40.464867+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Unable to extract audit-session-id of Cisco-AVPair: service-type=Call Check (pf::Switch::getCiscoAvPairAttribute)
2025-12-11T22:12:40.466942+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] handling radius autz request: from switch_ip => (192.168.10.110), connection_type => Wireless-802.11-NoEAP, switch_mac => (48:00:b3:f1:c6:e0), mac => [aa:61:b2:48:4a:64], port => 111, username => "aa61b2484a64", ssid => GUEST (pf::radius::authorize)
2025-12-11T22:12:40.481842+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Instantiate profile Guest (pf::Connection::ProfileFactory::_from_profile)
2025-12-11T22:12:40.496151+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] is of status unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
2025-12-11T22:12:40.500538+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] (192.168.10.110) Added VLAN 104 to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T22:12:40.500712+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] (192.168.10.110) Added role PF_REDIRECT to the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
2025-12-11T22:12:40.503849+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Adding web authentication redirection to reply using role: 'PF_REDIRECT' and URL: 'http://192.168.10.75/captive-portal?PORTAL=Guest/sid8f7ceb?' (pf::Switch::Cisco::Cisco_WLC_AireOS::returnRadiusAccessAccept)
2025-12-11T22:12:40.456760+00:00 packetfence auth[298284]: Adding client 192.168.10.110/32
2025-12-11T22:12:40.457208+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:12:40.457262+00:00 packetfence auth[298284]: BlastRADIUS check: Received packet without Proxy-State.
2025-12-11T22:12:40.457332+00:00 packetfence auth[298284]: Setting "limit_proxy_state = true" for client 192.168.10.110/32
2025-12-11T22:12:40.457374+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:12:40.457415+00:00 packetfence auth[298284]: The packet contains Message-Authenticator.
2025-12-11T22:12:40.457454+00:00 packetfence auth[298284]: The client has likely been upgraded to protect from the attack.
2025-12-11T22:12:40.457488+00:00 packetfence auth[298284]: Please set "require_message_authenticator = true" for client 192.168.10.110/32
2025-12-11T22:12:40.457529+00:00 packetfence auth[298284]: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
2025-12-11T22:12:40.511779+00:00 packetfence auth[298284]: (1550) Login OK: [aa61b2484a64] (from client 192.168.10.110/32 port 111 cli aa:61:b2:48:4a:64)
2025-12-11T22:12:46.898131+00:00 packetfence httpd.aaa-docker-wrapper[295391]: httpd.aaa(7) INFO: [mac:aa:61:b2:48:4a:64] Updating locationlog from accounting request (pf::api::handle_accounting_metadata)
2025-12-11T22:13:02.119440+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(10) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765491182.07466 1765491182.11861) (pf::security_event::security_event_maintenance)
2025-12-11T22:13:03.095301+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(14) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:13:03.100045+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(10) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:13:03.100339+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(10) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)
2025-12-11T22:13:22.900684+00:00 packetfence pfqueue-backend[296511]: pfqueue(295099) INFO: [mac:unknown] Running task api (main::process_data)
2025-12-11T22:13:22.901160+00:00 packetfence pfqueue-backend[296511]: pfqueue(295099) INFO: [mac:unknown] Calling api task process_dhcpv6 (pf::task::api::doTask)
2025-12-11T22:14:03.072308+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] getting security_events triggers for accounting cleanup (pf::accounting::acct_maintenance)
2025-12-11T22:14:03.135429+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] processed 0 security_events during security_event maintenance (1765491243.09802 1765491243.13466) (pf::security_event::security_event_maintenance)
2025-12-11T22:14:03.310920+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] Using 300 resolution threshold (pf::pfcron::task::cluster_check::run)
2025-12-11T22:14:03.314262+00:00 packetfence pfperl-api-docker-wrapper[294515]: pfperl-api(16) INFO: [mac:[undef]] All cluster members are running the same configuration version (pf::pfcron::task::cluster_check::run)

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions