Developers guide
Copyright © 2008-2013 Inverse inc.
iii
Table of Contents
About this Guide ................................................................................................................. 1
Othersourcesof information ......................................................................................... 1
Introduction ....................................................................................................................... 2
Features .................................................................................................................... 2
Network Integration .................................................................................................... 5
Components .............................................................................................................. 6
System Requirements .......................................................................................................... 7
Assumptions .............................................................................................................. 7
Minimum Hardware Requirements ................................................................................. 7
Operating System Requirements .................................................................................... 8
Installation ........................................................................................................................ 9
OS Installation ............................................................................................................ 9
Software Download .................................................................................................... 11
Software Installation .................................................................................................. 11
Configuration .................................................................................................................... 13
First Step ................................................................................................................. 13
Web-based Administration Interface .............................................................................. 14
Global configuration file (pf.conf) ................................................................................. 14
Apache Configuration ................................................................................................. 14
SELinux .................................................................................................................... 15
Roles Management .................................................................................................... 15
Authentication .......................................................................................................... 16
Network Devices Definition (switches.conf) .................................................................... 18
Default VLAN/role assignment ...................................................................................... 21
Inline enforcement configuration .................................................................................. 21
Hybrid mode ............................................................................................................ 22
DHCP and DNS Server Configuration (networks.conf) ........................................................ 22
Production DHCP access ............................................................................................. 23
Routed Networks ....................................................................................................... 25
FreeRADIUS Configuration ............................................................................................ 28
Starting PacketFence Services ...................................................................................... 33
Log files .................................................................................................................. 34
Passthrough ............................................................................................................. 34
Proxy Interception ..................................................................................................... 35
Configuration by example ................................................................................................... 36
Assumptions ............................................................................................................. 36
Network Interfaces .................................................................................................... 37
Switch Setup ............................................................................................................ 38
switches.conf ............................................................................................................ 39
pf.conf .................................................................................................................... 40
networks.conf ........................................................................................................... 42
Inline enforcement specifics ........................................................................................ 43
Optional components ......................................................................................................... 45
Blocking malicious activities with violations ................................................................... 45
Compliance Checks .................................................................................................... 49
RADIUS Accounting .................................................................................................... 52
Oinkmaster ............................................................................................................... 53
Floating Network Devices ............................................................................................ 53
Guests Management .................................................................................................. 55
Statement of Health (SoH) .......................................................................................... 58
Apple Wireless Profile Provisioning ............................................................................... 60