Enabling And Disabling 802.1X Radius Accounting And Tracking - Cisco WS-C6506 Software Manual

Configuring 802.1X Authentication on the Switch
This example shows how to clear all the existing VLAN groups:
Console> (enable) clear dot1x vlan-group all
Console> (enable) show dot1x vlan-group all
No vlan groups are present for display.
Console> (enable)

Enabling and Disabling 802.1X RADIUS Accounting and Tracking

You can use 802.1X RADIUS accounting and tracking to send the 802.1X user accounting information
to the RADIUS server. The feature uses UDP port number 1813.
An 802.1X accounting packet can indicate the following information to the RADIUS server:
•
•
•
•
•
The attributes of the accounting packets are as follows (some attributes are optional):
•
•
•
•
The accounting packet format is as follows:
<NAS-IP> <user-id> <date> <time> <random16bit#>
An example of the accounting packet format is as follows:
9.9.150.140 rameshp 31/07/2003 12:40:00 12345
The attributes listed above are common regardless of the ACCT-STATUS-TYPE attribute (for
START/STOP/INTERIM).
These attributes are specific to the INTERIM updates:
•
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
40-34
When a user successfully authenticates
When a user logs off
When the link goes down on an 802.1X port
When a reauthentication succeeds
When a reauthentication fails
Attribute [1] USERNAME—The username that is going to be authenticated.
Attribute [4] NAS-IP—The IP address of the switch that initiated the authentication/accounting
session (typically, this is the sc0 interface IP address).
Attribute [40] ACCT-STATUS-TYPE—START/STOP/INTERIM
START is sent when the authentication succeeds and the port is moved to the authorized state.
–
STOP is sent when the user sends a logoff, when the link goes down, or when reauthentication
–
fails.
INTERIM is sent when a reauthentication succeeds.
–
Attribute [44] ACCT-SESSION-ID—The unique session identifier that is associated with every
accounting session.
Attribute [8] FRAMED-IP-ADDRESS—The IP address that is assigned to the user (this address can
be obtained through a static assignment or through DHCP).
Chapter 40 Configuring 802.1X Authentication
OL-8978-04