[Archive] Enabling accounting for dotlx ssid in WLC

Accounting records come in three types: start, stop and update, and Wireless Controller (WLC) generates these records based on the configured accounting mode, which is either start-stop or stop-only.

When the start-stop mode is configured:
- A start record is generated when a user is first connected
- An update record is generated when a user roams from one WLA access point to another
- A stop record is generated when a user terminates the session
When the stop-only mode is configured, a stop record is generated when a user terminates the session.

Configuration on WLC

Step 1: Configuring a service-profile for dotlx ssid

set service-profile tac-dotlx ssid-name tac-dotlx
set service-profile tac-dotlx wpa-ie auth-dot1x disable
set service-profile tac-dotlx rsn-ie cipher-ccmp enable
set service-profile tac-dotlx rsn-ie enable
set service-profile tac-dotlx attr vlan-name default

Step 2: Configuring a radio-profile

set radio-profile tac-dotlx service-profile tac-dotlx

Step 3: Configuring an Access Point and mapping it to the radio-profile

set ap 9999 serial-id a28112402359 model MP-522
set ap 9999 radio 1 radio-profile PSK-ssid  mode enable
set ap 9999 radio 2 radio-profile PSK-ssid  mode enable

Step 4: Verifying client connectivity

JTAC-lab# show sessions

1 sessions total

User Name             SessID  Type  Address              VLAN            AP/Rdo
--------------------- ------  ----- -------------------- --------------  -------
lab-test              505* dotlx  10.9.221.205,V6      default           9997/2

Step 5: Configuring accounting for the dotlx ssid locally in WLC

set accounting dot1x ssid tac-dotlx ** start-stop local

To view the accounting statistics, use the following command in WLC:

JTAC-Lab# show accounting statistics

Accounting Start

Acct-Status-Type=START
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-519-513030-903274-3e2f4
Acct-Session-Id=SESS-519-513030-903274-3e2f4
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903254
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/1
Called-Station-Id=00-00-00-0B-00-0E
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488

Accounting Update

Acct-Status-Type=UPDATE
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-519-513030-903274-3e2f4
Acct-Session-Id=SESS-519-513030-903274-3e2f4
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903278
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/1
Called-Station-Id=00-00-00-0B-00-0E
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488
Class=<binary value>
Acct-Session-Time=2
Acct-Output-Octets=5200
Acct-Input-Octets=1051
Acct-Output-Packets=21
Acct-Input-Packets=14

When the user disconnects from the AP, accounting stop is sent.

Accounting Stop

Acct-Status-Type=STOP
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-514-513030-902663-5a32b
Acct-Session-Id=SESS-514-513030-902663-5a32b
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903283
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/2
Called-Station-Id=00-00-00-0B-00-0F
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488
Nas-Identifier=Trapeze
Class=<binary value>
Acct-Session-Time=594
Acct-Output-Octets=223074
Acct-Input-Octets=49594
Acct-Output-Packets=359
Acct-Input-Packets=489

Knowledge Base