[Archive] Enabling accounting for the Pre-Shared Key SSID in WLC

Accounting records come in three types: start, stop, and update. WLC generates these records based on the configured accounting mode, which is either start-stop or stop-only:

When the start-stop mode is configured, a start record is generated when a user is first connected, and an update record is generated when a user roams from one WLA access point to another. A stop record is generated when a user terminates the session.
When the stop-only mode is configured, a stop record is generated when a user terminates the session.

Configuration on WLC

Step 1: Configure a service-profile for the PSK SSID.

set service-profile PSK-ssid ssid-name PSK-ssid
set service-profile PSK-ssid auth-fallthru last-resort
set service-profile PSK-ssid psk-encrypted 13504f145d0a057c28757a6664721204435100525a0900555e551913080c0655000700535807060a0e5245035d0b5d5709221916504b0015410d5d562872257835
set service-profile PSK-ssid wpa-ie auth-dot1x disable
set service-profile PSK-ssid rsn-ie cipher-ccmp enable
set service-profile PSK-ssid rsn-ie auth-psk enable
set service-profile PSK-ssid rsn-ie auth-dot1x disable
set service-profile PSK-ssid rsn-ie enable
set service-profile PSK-ssid attr vlan-name default

Step 2: Configure a radio-profile.

set radio-profile PSK-ssid service-profile PSK-ssid

Step 3: Configure an Access Point and map it to the radio-profile.

set ap 9999 serial-id a28112402359 model MP-522
set ap 9999 radio 1 radio-profile PSK-ssid  mode enable
set ap 9999 radio 2 radio-profile PSK-ssid  mode enable

Step 4: Verify client connectivity. To verify client connectivity, issue the following command from WLC:

JTAC-lab# show sessions

1 sessions total

User Name             SessID  Type  Address              VLAN            AP/Rdo
--------------------- ------  ----- -------------------- --------------  -------
LR-5ghz-256              490* open  10.9.221.205,V6      default           9999/1

Step 5: Configure accounting for the PSK SSID.

set accounting last-resort ssid PSK-ssid start-stop local

To view the accounting statistics, use the following command in WLC:

JTAC-Lab# show accounting statistics

Accounting Start

Acct-Status-Type=START
Acct-Authentic=0
Acct-Multi-Session-Id=SESS-489-513030-566369-19882
Acct-Session-Id=SESS-489-513030-566369-19882
User-Name=last-resort-PSK-ssid-256
AAA_ACCT_SVC_ATTR=6
Event-Timestamp=4218566369
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9999/1
Called-Station-Id=00-26-3E-AA-FF-40
AAA_SSID_ATTR=PSK-ssid
NAS-Port=489

Accounting Update

Acct-Status-Type=UPDATE
Acct-Authentic=0
Acct-Multi-Session-Id=SESS-489-513030-566369-19882
Acct-Session-Id=SESS-489-513030-566369-19882
User-Name=last-resort-PSK-ssid-256
AAA_ACCT_SVC_ATTR=6
Event-Timestamp=4218566369
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9999/1
Called-Station-Id=00-26-3E-AA-FF-40
AAA_SSID_ATTR=PSK-ssid
NAS-Port=489
Framed-Interface-Id=0c94:8446:b9f5:8488
Acct-Session-Time=0
Acct-Output-Octets=2575
Acct-Input-Octets=236
Acct-Output-Packets=14
Acct-Input-Packets=3

Accounting Stop

When a user disconnects from the AP, accounting stop is sent:

 Acct-Status-Type=STOP
 Acct-Authentic=0
 Acct-Multi-Session-Id=SESS-484-513030-564059-e0184
 Acct-Session-Id=SESS-484-513030-564059-e0184
 User-Name=last-resort-PSK-ssid-256
 AAA_ACCT_SVC_ATTR=6
 Event-Timestamp=4218564987
 Vlan-Name=default
 Calling-Station-Id=54-33-CB-5D-AD-73
 Nas-Port-Id=AP9999/1
 Called-Station-Id=00-26-3E-AA-FF-40
 AAA_SSID_ATTR=PSK-ssid
 NAS-Port=484
 Framed-IP-Address=10.9.221.205
 Framed-Interface-Id=0c94:8446:b9f5:8488
 Nas-Identifier=Trapeze
 Acct-Session-Time=928
 Acct-Output-Octets=1190987
 Acct-Input-Octets=321874
 Acct-Output-Packets=2257
 Acct-Input-Packets=3047

Knowledge Base