Cisco Systems 3130 IEEE 802.1x Accounting, IEEE 802.1x Accounting Attribute-Value Pairs

9-9
Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide
OL-13270-01
Chapter9 Configuring IEEE 802 . 1x Port-Based Authentication Understanding IEEE 802.1x Port-Based Authentication
Figure9-5 Multiple Host Mode Example
IEEE 802.1x Accounting
The IEEE 802.1x standard defines how users are authorized and authenticated for network access but
does not keep track of network usage. IEEE 802.1x accounting is disabled by default. You can enable
IEEE 802.1x accounting to monitor this activity on IEEE 802.1 x-e nabl ed p or ts:
•User successfully authenticates.
•User logs off.
•Link-down occurs.
•Re-authentication successfully occurs.
•Re-authentication fails.
The switch does not log IEEE 802.1x accounting information. Instead, it sends this informat ion to the
RADIUS server, which must be configured to log accounting messages.
IEEE 802.1x Accounting Attribute-Value Pairs
The information sent to the RADIUS server is represented in the form of Attribute-Value (AV) pairs.
These AV pairs provide data for different applications. (For example, a billing application might require
information that is in the Acct-Input-Octets or the Acct-Output-Octets attributes of a RADIUS packet.)
AV pairs are automatically sent by a switch that is configured for IEEE 802.1x accounting. Three types
of RADIUS accounting packets are sent by a switch:
•START–sent when a new user session starts
•INTERIM–sent during an existing session for updates
•STOP–sent when a session terminates
Table 9 -1 lists the AV pairs and when they are sent are sent by the switch:
1
01227
W
ireless clients
Access point
Authenticatio
n
server
(RADIUS)
Table9-1 Accounting AV Pairs
Attribute Number AV Pair Name START INTERIM STOP
Attribute[1] User-Name Always Always Always
Attribute[4] NAS-IP-Address Always Always Always
Attribute[5] NAS-Port Always Always Always