Ieee 802.1X Accounting; Ieee 802.1X Accounting Attribute-Value Pairs - Cisco 3020 - Catalyst Blade Switch Configuration Manual

Chapter 7 Configuring IEEE 802.1x Port-Based Authentication

IEEE 802.1x Accounting

The IEEE 802.1x standard defines how users are authorized and authenticated for network access but
does not keep track of network usage. IEEE 802.1x accounting is disabled by default. You can enable
IEEE 802.1x accounting to monitor this activity on IEEE 802.1x-enabled ports:
•
•
•
•
•
The switch does not log IEEE 802.1x accounting information. Instead, it sends this information to the
RADIUS server, which must be configured to log accounting messages.

IEEE 802.1x Accounting Attribute-Value Pairs

The information sent to the RADIUS server is represented in the form of Attribute-Value (AV) pairs.
These AV pairs provide data for different applications. (For example, a billing application might require
information that is in the Acct-Input-Octets or the Acct-Output-Octets attributes of a RADIUS packet.)
AV pairs are automatically sent by a switch that is configured for IEEE 802.1x accounting. Three types
of RADIUS accounting packets are sent by a switch:
•
•
•
Table 7-1
Table 7-1
Attribute Number
Attribute[1]
Attribute[4]
Attribute[5]
Attribute[8]
Attribute[25]
Attribute[30]
Attribute[31]
Attribute[40]
Attribute[41]
Attribute[42]
Attribute[43]
Attribute[44]
Attribute[45]
OL-8915-01
User successfully authenticates.
User logs off.
Link-down occurs.
Re-authentication successfully occurs.
Re-authentication fails.
START–sent when a new user session starts
INTERIM–sent during an existing session for updates
STOP–sent when a session terminates
lists the AV pairs and when they are sent are sent by the switch:
Accounting AV Pairs
AV Pair Name
User-Name
NAS-IP-Address
NAS-Port
Framed-IP-Address
Class
Called-Station-ID
Calling-Station-ID
Acct-Status-Type
Acct-Delay-Time
Acct-Input-Octets
Acct-Output-Octets
Acct-Session-ID
Acct-Authentic
Understanding IEEE 802.1x Port-Based Authentication
START INTERIM
Always Always
Always Always
Always Always
Never Sometimes
Always Always
Always Always
Always Always
Always Always
Always Always
Never Never
Never Never
Always Always
Always Always
Cisco Catalyst Blade Switch 3020 for HP Software Configuration Guide
STOP
Always
Always
Always
1 1
Sometimes
Always
Always
Always
Always
Always
Always
Always
Always
Always
7-9