Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] Enabling accounting for dotlx ssid in WLC

0

0

Article ID: KB33487 KB Last Updated: 21 Mar 2020Version: 2.0
Summary:

Accounting helps to keep track of a user's session when connected to the Wireless Controller (WLC).

This article describes how to enable accounting for dotlx ssid in Wireless Controller (WLC).

Solution:

Accounting records come in three types: start, stop and update, and Wireless Controller (WLC) generates these records based on the configured accounting mode, which is either start-stop or stop-only.

  • When the start-stop mode is configured:

    • A start record is generated when a user is first connected

    • An update record is generated when a user roams from one WLA access point to another

    • A stop record is generated when a user terminates the session

  • When the stop-only mode is configured, a stop record is generated when a user terminates the session.

 

Configuration on WLC

 

Step 1: Configuring a service-profile for dotlx ssid

set service-profile tac-dotlx ssid-name tac-dotlx
set service-profile tac-dotlx wpa-ie auth-dot1x disable
set service-profile tac-dotlx rsn-ie cipher-ccmp enable
set service-profile tac-dotlx rsn-ie enable
set service-profile tac-dotlx attr vlan-name default
 

Step 2: Configuring a radio-profile

set radio-profile tac-dotlx service-profile tac-dotlx
 

Step 3: Configuring an Access Point and mapping it to the radio-profile

set ap 9999 serial-id a28112402359 model MP-522
set ap 9999 radio 1 radio-profile PSK-ssid  mode enable
set ap 9999 radio 2 radio-profile PSK-ssid  mode enable
 

Step 4: Verifying client connectivity

JTAC-lab# show sessions

1 sessions total

User Name             SessID  Type  Address              VLAN            AP/Rdo
--------------------- ------  ----- -------------------- --------------  -------
lab-test              505* dotlx  10.9.221.205,V6      default           9997/2
 

Step 5: Configuring accounting for the dotlx ssid locally in WLC

set accounting dot1x ssid tac-dotlx ** start-stop local
 

To view the accounting statistics, use the following command in WLC:

JTAC-Lab# show accounting statistics

Accounting Start

Acct-Status-Type=START
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-519-513030-903274-3e2f4
Acct-Session-Id=SESS-519-513030-903274-3e2f4
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903254
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/1
Called-Station-Id=00-00-00-0B-00-0E
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488

Accounting Update

Acct-Status-Type=UPDATE
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-519-513030-903274-3e2f4
Acct-Session-Id=SESS-519-513030-903274-3e2f4
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903278
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/1
Called-Station-Id=00-00-00-0B-00-0E
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488
Class=<binary value>
Acct-Session-Time=2
Acct-Output-Octets=5200
Acct-Input-Octets=1051
Acct-Output-Packets=21
Acct-Input-Packets=14

When the user disconnects from the AP, accounting stop is sent.

Accounting Stop

Acct-Status-Type=STOP
Acct-Authentic=1
Acct-Multi-Session-Id=SESS-514-513030-902663-5a32b
Acct-Session-Id=SESS-514-513030-902663-5a32b
User-Name=Tac-test
AAA_ACCT_SVC_ATTR=2
Event-Timestamp=1543903283
Vlan-Name=default
Calling-Station-Id=54-33-CB-5D-AD-73
Nas-Port-Id=AP9997/2
Called-Station-Id=00-00-00-0B-00-0F
AAA_SSID_ATTR=tac-dotlx
NAS-Port=519
Framed-IP-Address=10.9.221.205
Framed-Interface-Id=0c94:8446:b9f5:8488
Nas-Identifier=Trapeze
Class=<binary value>
Acct-Session-Time=594
Acct-Output-Octets=223074
Acct-Input-Octets=49594
Acct-Output-Packets=359
Acct-Input-Packets=489

 

Modification History:

2020-03-21: Archived

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search