Controller-less WLANs

Does IAP support accounting for wired client?
Q:

  Does IAP support accounting for wired client?



A:

Yes; IAP support accounting for wired client as well from IAP code 4.2 and above.

  • Before 4.2

 IAP doesn’t support  accounting for wired client.

  • In 4.2

Wired-Accounting support Radius accounting for wired client. With this feature enabled,  IAP will send Radius accounting packet to accounting server after client pass Radius authentication. The behavior of wired accounting is same with wireless accounting.

Enable accounting in wired-port-profile

 

00:0b:86:a0:d9:00 (config) # wired-port-profile test

00:0b:86:a0:d9:00 (wired ap profile test) # radius-accounting                                                            ------ enable accounting

00:0b:86:a0:d9:00 (wired ap profile test) # radius-interim-accounting-interval  10                             ------ accounting interval

00:0b:86:a0:d9:00 (wired ap profile test) # end

00:0b:86:a0:d9:003# commit apply

 

Configuration in running-cfg

 

wired-port-profile test

 switchport-mode trunk

 allowed-vlan all

 native-vlan guest

 no shutdown

 access-rule-name test

 speed auto

 duplex auto

 poe

 type employee

 auth-server cppm244

 captive-portal disable

 dot1x

 radius-accounting

 radius-interim-accounting-interval 10

 

Use separate accounting mode

 

00:0b:86:a0:d9:00 (config) # wired-port-profile test

00:0b:86:a0:d9:00 (wired ap profile test) # radius-accounting                                                            ------ enable accounting

00:0b:86:a0:d9:00 (wired ap profile test) # radius-interim-accounting-interval  10                             ------ accounting interval

00:0b:86:a0:d9:00 (wired ap profile test) # accounting-server acct-server-1                                      ------ configure separate accounting server

00:0b:86:a0:d9:00 (wired ap profile test) # accounting-server acct-server-2                                      ------ configure separate accounting server

 

00:0b:86:a0:d9:00 (wired ap profile test) # end

00:0b:86:a0:d9:003# commit apply

Configuration in running-cfg

 

wired-port-profile test

 switchport-mode trunk

 allowed-vlan all

 native-vlan guest

 no shutdown

 access-rule-name test

 speed auto

 duplex auto

 poe

 type employee

 auth-server cppm244

 accounting-server acct-server-1

 accounting-server acct-server-2

 captive-portal disable

 dot1x

 radius-accounting

 radius-interim-accounting-interval 10

 

Enable wired accounting via UI

 

 

“show clients status <mac>”, check client accounting status and session-id

 

  • show ap debug auth-trace-buf”,  check accounting record

 

  • security syslog,  check accounting packet detail info 

 

packet-capture

Version History
Revision #:
2 of 2
Last update:
‎11-25-2015 01:42 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.