Controllerless Networks

Reply
Contributor II

Different RADIUS server for Accounting on an Instant?

Hi all

 

I have come across a proxy server called Litespeed a couple of times recently and it seems that it uses RADIUS accounting data to decide to allow/disallow users web access. One customer was using a controller so could simply tell the AAA profile to use litespeed as the Accounting server and freeRADIUS as the authentication server. However, the other customer was using instants and this doesn't seem to be an option.

 

Is it possible? Alternatively, is it possible to use CPPM to forward the Accounting data to a second server?

 

Cheers

Re: Different RADIUS server for Accounting on an Instant?

This isn't possible today.

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Aruba Employee

Re: Different RADIUS server for Accounting on an Instant?

It will be possible in the upcoming 4.1.1 release.

Thanks

Yan Liu

Sent from my iPhone
Contributor II

Re: Different RADIUS server for Accounting on an Instant?

Thanks Seth and Yan.

 

Yan: Do we have a release date? I suspect the customer would accept beta if that is available earlier.

 

Is there any way to do this on CPPM? I am happy to raise this in the Clearpass section of Airheads if that is more likely to get a response.

 

Cheers

Occasional Contributor II

Re: Different RADIUS server for Accounting on an Instant?

Hello, 

 

I was looking for an update as this is my exact problem currently. 

I saw mention of a release version 4 and I know we are now on version 6 of the firmware, if I'm not mistaken. 

 

My current setup is that I have serveral campuses with a virtual controller and local Radius server (which is NPS) but I have a central content filter which can take Radius accounting messages for a SSO purpose.  I need to authenticate locally and send the accounting infomration to the remote content filter. This is an easy affair in my older Cisco untis and I am very much in need of it for my IAP virtual controllers. 

 

If this is possible a little direction is needed.  

 

Thank you.

Contributor II

Re: Different RADIUS server for Accounting on an Instant?

this is avaible now in the 4.1.1.1 and later release of instant.

Just enable accounting and you can choose a specific account server to send the accounting to.

Occasional Contributor II

Re: Different RADIUS server for Accounting on an Instant?

I hope this goes by email.

We are talking about the firmware of the Instant APs right?
I have enabled accounting on (3)Security of my Network's page but I don't see any options to specify the accounting server my firmware (while the Dell fork) is 6.3.1.8-4.0.0.8_46401 model AP105

________________________________
This email, including any attachments, may contain confidential information which is intended only for the use of the individual(s) or entity named. If you received this e-mail message in error, please immediately notify the sender by e-mail and delete it. Dissemination, forwarding, printing or copying of this email without the prior consent of the sender is strictly prohibited.
Contributor II

Re: Different RADIUS server for Accounting on an Instant?

yes the problem is your firmware: 4.0.0.8 you need 4.1.1.1 i think the recommended version is 4.1.1.3 for the early ones full firmware name: 6.4.2.3 - 4.1.1.3 this is also availble on the Dell Series.

Occasional Contributor II

Re: Different RADIUS server for Accounting on an Instant?

Okay, I see, were talking about the FW numbers after the dash.  I just did an update (and only one AP came back, whoops!) but it only took me to 4.0.0.9 wtih no new updates listed when I check..

 

I'll wait until dell catches up, thanks. 

Contributor II

Re: Different RADIUS server for Accounting on an Instant?

Hi,

 

dont you have access to: download.dell-pcw.com

 

Dells always up to speed, just login an download latest firmware and do the upgrade.

We are also running Dell so..

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: