Configuring Radius Accounting - HP procurve 5300xl Series Access Security Manual

Note
This section assumes you have already:
Configured RADIUS authentication on the switch for one or more
■
access methods
■ Configured one or more RADIUS servers to support the switch
If you have not already done so, refer to "General RADIUS Setup Procedure"
on page 5-5 before continuing here.
RADIUS accounting collects data about user activity and system events and
sends it to a RADIUS server when specified events occur on the switch, such
as a logoff or a reboot. The Series 5300XL switches support three types of
accounting services:
Network accounting: Provides records containing the information
■
listed below on clients directly connected to the switch and operating
under Port-Based Access Control (802.1x):
• Acct-Session-Id
• Acct-Status-Type
• Acct-Terminate-Cause
• Acct-Authentic
• Acct-Delay-Time
• Acct-Input-Packets
(For 802.1x information for the switch, refer to chapter 8, "Configuring
Port-Based Access Control (802.1x)" .)
■ Exec accounting: Provides records holding the information listed
below about login sessions (console, Telnet, and SSH) on the switch:
• Acct-Session-Id
• Acct-Status-Type
• Acct-Terminate-Cause
• Acct-Authentic
■ System accounting: Provides records containing the information
listed below when system events occur on the switch, including
system reset, system boot, and enabling or disabling of system
accounting.
• Acct-Session-Id
• Acct-Status-Type
• Acct-Terminate-Cause
• Acct-Authentic
RADIUS Authentication and Accounting

Configuring RADIUS Accounting

• Acct-Output-Packets
• Acct-Input-Octets
• Nas-Port
• Acct-Output-Octets
• Acct-Session-Time
• Username
• Acct-Delay-Time
• Acct-Session-Time
• Username
• Service-Type
• Acct-Delay-Time
• Username
• Service-Type
• NAS-IP-Address
• Service-Type
• NAS-IP-Address
• NAS-Identifier
• Called-Station-Id
• NAS-IP-Address
• NAS-Identifier
• Calling-Station-Id
• NAS-Identifier
• Calling-Station-Id
5-17