Controller Based WLANs

What is RADIUS accounting and does Aruba supports RADIUS accounting in bridge mode?

by on ‎06-29-2014 10:21 AM

Environment : This article applies to all the controller models and OS version 6.3 onwards

 

The accounting features of the RADIUS protocol can be used independently of RADIUS authentication or authorization. The RADIUS accounting functions allow data to be sent at the start and end of sessions, indicating the amount of resources (such as time, packets, bytes, and so on) used during the session. An Internet service provider (ISP) might use RADIUS access control and accounting software to meet special security and billing needs. The accounting port for RADIUS for most Cisco devices is 1646, but it can also be 1813 (because of the change in ports as specified in RFC 2139).
 
Transactions between the client and RADIUS server are authenticated through the use of a shared secret, which is never sent over the network. In addition, user passwords are sent encrypted between the client and RADIUS server to eliminate the possibility that someone snooping on an insecure network could determine a user's password.

To configure RADIUS accounting feature on the Aruba controller please refer the below steps.

1. Log into controller webUI and navigate to configuration - Authentication - AAA profile
2. Select the AAA profile - Enable the option "RADIUS interim accounting"

Note:
RADIUS accounting in bridge mode is supported only from AOS 6.3 onwards. 
RADIUS accounting information is not sent if the authentication mode is set to "open"

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.