Security

Reply
Aruba Employee
Posts: 10
Registered: ‎08-28-2008

Open-SSID-Accounting

  • Radius accounting support for open system ssid profile.
  • Used case: When you want to bill users who are all connected in open system SSID. 
  •  Radius accounting has been extended to stations connecting to Open SSID from 6.4.3.0 release.
  • This can be done by enabling the Open SSID accounting knob in AAA profile.

We support Radius Accounting Start, Interim & Stop messages

 

Enable Open SSID Accounting:

# aaa profile Paaa

#open-system-radius-accounting

#!

#show aaa profile Paaa

 

RADIUS Accounting Server Group      svrGrp  

Open SSID radius accounting         Enabled

 

To Disable Open SSID Accounting:

# aaa profile Paaa

#no open-system-radius-accounting

#!

 

  • Navigate to Configuration ->All Profile ->Select Wireless LAN
  • Select Specified aaa profile under AAA section
  • Enable “Open SSID accounting” knob in aaa profile

Picture2.png

 

Enable Below Logs to get the accounting info in Security Logs:

  • logging level debugging security
  • logging level debugging security process authmgr subcat aaa

Show log security output:

  • Radius Accounting Start Message details:

Picture3.png

Radius Accounting  Stop  Message

Picture4.png

Radius interim accounting Message:

Picture5.png

auth-tracebuf output:

  • Jan 18 23:06:39 rad-acct-start ->  00:1c:7b:9e:d9:3a  00:24:6c:80:42:c5/RADIUS  -  -
  • Jan 18 23:11:20 rad-acct-stop ->  00:1c:7b:9e:d9:3a  00:24:6c:80:42:c5/RADIUS

Jan 18 23:25:45  rad-acct-int-update   ->  00:1c:7b:9e:d9:3a  00:24:6c:80:42:c5/RADIUS  -

 

  • It is not recommended to enable “open ssid radius accounting” for wired users aaa profile.
  • On enabling the same the radius accounting packets will be sent for unauthenticated wired users as well.
  • No Platform dependency to enable this feature.

 

Preethi Devarajan
Sr. Network Engineer
Customer Advocacy | Aruba Networks Inc.
Did something you read in the Community solve a problem for you? If so, click "Accept as Solution" in the bottom right hand corner of the post.
Contributor I
Posts: 31
Registered: ‎03-19-2015

Re: Open-SSID-Accounting

[ Edited ]

 

thanks for your helpful post! 


Thanks,

Balazs

Thanks,
Balazs
Search Airheads
Showing results for 
Search instead for 
Did you mean: