Chapter 54: 802.1x Port-based Network Access Control
730 Section VIII: Port Security
RADIUS Accounting
The switch supports RADIUS accounting for switch ports set to the
Authenticator role. This feature sends information about the status of the
supplicants to the RADIUS server so that you can monitor network activity
and use.
The switch sends accounting information to the RADIUS server when the
following events occur:
Supplicants log on
Supplicants logs off
Authenticator ports change states during active supplicant sessions
(for example, a port is reset or is changed from the Authenticator role
to None role while a supplicant is logged on)
The information that the switch sends to the RADIUS server for an event
includes:
The port number where an event occurred
The date and time when an event occurred
The number of packets transmitted and received by a switch port
during a supplicant’s session. (This information is sent only when a
client logs off.)
You can also configure the accounting feature to send interim updates so
you can monitor which clients are still active.
Here are the guidelines to using the accounting feature:
The management software supports the Network level of accounting,
but not the System or Exec.
This feature is only available for ports operating in the Authenticator
role. No accounting is provided for ports operating in the Supplicant or
None role.
You must configure 802.1x Port-based Network Access Control as
explained in this chapter and designate the Authenticator ports.
You must also specify from one to three RADIUS servers.
To Next Page
Loading...
