D-Link xStack DGS-3610 Series Configuration Manual page 528

Chapter 37 Configuration of 802.1X
authentication of the user and the user's logoff or when the device detects user
disconnection.
After the first successful authentication of the user, the device sends an accounting start
request to the server. When the user gets off-line or the device finds that the user has got off
line or when the physical connection of the user is broken, the device sends an accounting
end request to the server. The server group records this information in the database of the
server group. Based on such information, the NMS can provide the basis for accounting.
Our 802.1X stresses reliable accounting, and it specially supports the backup accounting
server to avoid failures of the accounting server. When a server can no longer provide the
accounting service due to various reasons, the device will automatically forward the
accounting information to another backup server. This greatly improves the reliability of
accounting.
When a user exits by itself, the accounting duration is accurate. When the connection of the
user is broken by accident, the accounting accuracy depends on the re-authentication
interval (the device detects the disconnection of a user by using the re-authentication
mechanism).
To enable the accounting function of the device, the following settings are necessary on the
device:
1. On the Radius Server, register the device as a Radius Client, like the authentication
operation.
2. Set the IP address of the accounting server.
3. Set the accounting UDP port.
4. Enable the accounting service on the precondition that the 802.1X has been enabled.
In the privileged mode, you can set the accounting service through the following steps:
Command
configure terminal
aaa new-model
aaa group server radius gs
server 192.168.4.12 acct-port 11
exit
aaa accounting network acct start-stop
group gs
dot1x accounting acct
end
write
show running-config
37-20
DGS-3610 Series Configuration Guide
Function
Enter the global configuration mode.
Enable the AAA function
Configure the accounting server group.
Add a server to the server group.
Return to the global configuration mode.
Configure the accounting method list.
Apply the accounting method list for the 802.1X.
Return to the privileged mode.
Save the configuration.
Show the configuration.