[Fwd: Cisco Aironet 1200 accounting problem]

[Marcos Gonzalez]

I had already found that page but Thank you Konstantin.

Well, I finally found the solution... accidentally:

* If I use EAP-TLS authentication, the input-octets, output-octets and 
so are missing, as I said, but...
* But if I use no authentication (open network), only accounting, THE 
VALUES ARE CORRECTLY TRACKED!

Mon Jan  9 11:01:10 2006
      Acct-Session-Id = "00000009"
      Called-Station-Id = "0013.60e7.e900"
      Calling-Station-Id = "0040.96a8.2b73"
      Cisco-AVPair = "ssid=wifi2005"
      Cisco-AVPair = "nas-location=unspecified"
      Cisco-AVPair = "connect-progress=Call Up"
      Acct-Session-Time = 56
      Acct-Input-Octets = 7857
      Acct-Output-Octets = 160
      Acct-Input-Packets = 104
      Acct-Output-Packets = 2
      User-Name = "004096a82b73"
      Acct-Status-Type = Alive
      NAS-Port-Type = Wireless-802.11
      Cisco-NAS-Port = "261"
      NAS-Port = 261
      Service-Type = Framed-User
      NAS-IP-Address = 192.168.100.1
      Acct-Delay-Time = 0
      Client-IP-Address = 192.168.100.1
      Acct-Unique-Session-Id = "f5f4ca44acedd04f"
      Timestamp = 1136800870


Of course I want authentication, so I can link an user with his use of 
resources. This is not a valid solution.
I'm now trying other "flavours" of EAP, to see if any of them track the 
octets. Is this a Cisco IOS bug? I'm doing something wrong? Thanks in 
advance.



Konstantin Chekushin escribió:
> As I know, accounting configuration was fully described here: 
> http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur_c/scprt1/scacct.htm 
>
> You have "Network accounting", can you configure NAS manualy? 
> (http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/secur_c/scprt1/scacct.htm#xtocid1837310 
> here are examples)
>
> Marcos Gonzalez wrote:
>
>> Konstantin Chekushin escribió:
>>
>>> http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801bd035.shtml 
>>>
>>> Did you read this?
>>>
>> Yes, I've already read that proccess. Thank you for the help, 
>> Konstantin. In fact, it explains Radius authentication, but that is 
>> already working perfectly in my setup.
>>
>> I have problems with the _accounting_ part, not the authentication 
>> part. Clients authenticate sucessfully, and can use the network. The 
>> problem is, their octets/packets usage of the net isn't being sent to 
>> the radius server, althought accounting _seems_ to be well 
>> configured, as the session time duration is being reported correctly.
>>
>> Again thank you for the answer. Hope somebody could at least tell me 
>> the Aironet 1200 is reporting that statistics (octets/packets) 
>> correctly for him (or if it's not possible).
>> - List info/subscribe/unsubscribe? See 
>> http://www.radius.cistron.nl/list/
>>
> - List info/subscribe/unsubscribe? See http://www.radius.cistron.nl/list/
>