13-14
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter13 Configuring RADIUS and TACACS+ Servers
Configuring and Enabling RADIUS
To return to the default CSID format, use the no form of the dot11 aaa csid command, or enter
dot11 aaa csid default.
Note You can also use the wlccp wds aaa csid command to select the CSID format.
Starting RADIUS Accounting
The AAA accounting feature tracks the services that users are accessing and the amount of network
resources that they are consuming. When AAA accounting is enabled, the access point reports user
activity to the RADIUS security server in the form of accounting records. Each accounting record
contains accounting attribute-value (AV) pairs and is stored on the security server. This data can then be
analyzed for network management, client billing, or auditing. See the “RADIUS Attributes Sent by the
Access Point” section on page 13-20 for a complete list of attributes sent and honored by the access
point.
Beginning in privileged EXEC mode, follow these steps to enable RADIUS accounting for each Cisco
IOS privilege level and for network services:
To disable accounting, use the no aaa accounting {network | exec} {start-stop} method1... global
configuration command.
ietf 00-07-85-b3-5f-4a
unformatted 000785b35f4a
Table13-1 CSID Format Options
Option MAC Address Example
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 aaa accounting network start-stop
radius
Enable RADIUS accounting for all network-related service requests.
Step3 ip radius source-interface bvi1 Configure the access point to send its BVI IP address in the
NAS_IP_ADDRESS attribute for accounting records.
Step4 aaa accounting update periodic minutes Enter an accounting update interval in minutes.
Step5 end Return to privileged EXEC mode.
Step6 show running-config Verify your entries.
Step7 copy running-config startup-config (Optional) Save your entries in the configuration file.