Accounting helps to keep track of a user's session when connected to the Wireless Controller (WLC).
This article describes how to enable accounting for dotlx ssid in Wireless Controller (WLC).
Accounting records come in three types: start, stop and update, and Wireless Controller (WLC) generates these records based on the configured accounting mode, which is either start-stop or stop-only.
-
When the start-stop mode is configured:
-
A start record is generated when a user is first connected
-
An update record is generated when a user roams from one WLA access point to another
-
A stop record is generated when a user terminates the session
-
When the stop-only mode is configured, a stop record is generated when a user terminates the session.
Configuration on WLC
Step 1: Configuring a service-profile for dotlx ssid
set service-profile tac-dotlx ssid-name tac-dotlx
set service-profile tac-dotlx wpa-ie auth-dot1x disable
set service-profile tac-dotlx rsn-ie cipher-ccmp enable
set service-profile tac-dotlx rsn-ie enable
set service-profile tac-dotlx attr vlan-name default
Step 2: Configuring a radio-profile
set radio-profile tac-dotlx service-profile tac-dotlx
Step 3: Configuring an Access Point and mapping it to the radio-profile
set ap 9999 serial-id a28112402359 model MP-522
set ap 9999 radio 1 radio-profile PSK-ssid mode enable
set ap 9999 radio 2 radio-profile PSK-ssid mode enable
Step 4: Verifying client connectivity
JTAC-lab# show sessions
1 sessions total
User Name SessID Type Address VLAN AP/Rdo
--------------------- ------ ----- -------------------- -------------- -------
lab-test 505* dotlx 10.9.221.205,V6 default 9997/2
Step 5: Configuring accounting for the dotlx ssid locally in WLC
set accounting dot1x ssid tac-dotlx ** start-stop local
To view the accounting statistics, use the following command in WLC:
JTAC-Lab# show accounting statistics
Accounting Start
Acct-Status-Type=START
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-519-513030-903274-3e2f4
Acct-Session-Id=SESS-519-513030-903274-3e2f4
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903254
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/1
Called-Station-Id=00-00-00-0B-00-0E
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488
Accounting Update
Acct-Status-Type=UPDATE
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-519-513030-903274-3e2f4
Acct-Session-Id=SESS-519-513030-903274-3e2f4
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903278
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/1
Called-Station-Id=00-00-00-0B-00-0E
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488
Class=<binary value>
Acct-Session-Time=2
Acct-Output-Octets=5200
Acct-Input-Octets=1051
Acct-Output-Packets=21
Acct-Input-Packets=14
When the user disconnects from the AP, accounting stop is sent.
Accounting Stop
Acct-Status-Type=STOP
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-514-513030-902663-5a32b
Acct-Session-Id=SESS-514-513030-902663-5a32b
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903283
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/2
Called-Station-Id=00-00-00-0B-00-0F
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488
Nas-Identifier=Trapeze
Class=<binary value>
Acct-Session-Time=594
Acct-Output-Octets=223074
Acct-Input-Octets=49594
Acct-Output-Packets=359
Acct-Input-Packets=489