Q: Can we enable Wired accounting on IAP?
A: Wired-Accounting support Radius accounting for wired client. With this feature enabled, IAP will send Radius accounting packet to accounting server after client
pass Radius authentication. The behavior of wired accounting is same with wireless accounting. This article is applicable to IAP running 4.2 code.
Enable accounting in wired-port-profile
00:0b:86:a0:d9:00 (config) # wired-port-profile test
00:0b:86:a0:d9:00 (wired ap profile test) # radius-accounting ------ enable accounting
00:0b:86:a0:d9:00 (wired ap profile test) # radius-interim-accounting-interval 10 ------ accounting interval
00:0b:86:a0:d9:00 (wired ap profile test) # end
00:0b:86:a0:d9:003# commit apply
Running config would be as below:-
Use separate accounting mode
00:0b:86:a0:d9:00 (config) # wired-port-profile test
00:0b:86:a0:d9:00 (wired ap profile test) # radius-accounting ------ enable accounting
00:0b:86:a0:d9:00 (wired ap profile test) # radius-interim-accounting-interval 10 ------ accounting interval
00:0b:86:a0:d9:00 (wired ap profile test) # accounting-server acct-server-1 ------ configure separate accounting server
00:0b:86:a0:d9:00 (wired ap profile test) # accounting-server acct-server-2 ------ configure separate accounting server
00:0b:86:a0:d9:00 (wired ap profile test) # end
00:0b:86:a0:d9:003# commit apply
Enable wired accounting via UI
show clients status <mac>”, check client accounting status and session-id
“show ap debug auth-trace-buf”, check accouting record
security syslog, check accounting packet detail info
Packet capture for accounting packet
