Log Guest access

koksm · ‎02-09-2007

Is it possible to log guest access when using guest webaccess and accounts created by the lobby admin?

One of our customers wants to use the feature if it is possible to keep track of when users were granted access via guest access. Can this be done via accounting?

claeysg · ‎02-09-2007

Hello,

Today, there are two options available depending if you use an anchor controller or not.

Option 1 (no anchor required): you can send accounting records to a Radius server. You will get the following info:

"Date","Time","RAS-Client","Record-Type","Full-Name","Auth-Type","User-N

ame","NAS-IP-Address","NAS-Port"....."Called-Station-ID","Calling-Statio

n-ID","NAS-Identifier"... "Acct-Session-Id"...

"09/03/2006","23:30:01","192.168.0.15","Start","Unknown","Unknown","Gues

t","192.168.0.15","29",,,,,,,,,,,,,,,,,,,,"192.168.0.15","192.168.201.74

","4400-C5",,"1",,,,"44fb9db3/00:40:96:aa:5c:83/25","1",,,,,,,,,"13","6"

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Option 2 (requires an anchor controller). You can log the guest user access.

YOu have to enter the following commands on the anchor controller:

> config msglog level verbose

> show msglog

You will get the following info:

Fri Nov 3 15:08:06 2006 [SECURITY] aaa.c 661: Authentication succeeded for admin user 'admin'

Fri Nov 3 15:07:01 2006 [VERBOSE] pem_api.c 5839: Guest user logged out with user account (guest123) MAC Addr 00:40:96:ad:12:39 IP Address 172.20.225.149

Fri Nov 3 15:06:11 2006 [VERBOSE] pem_api.c 5761: Guest user logged in with user account (guest123) MAC Address 00:40:96:ad:12:39 IP Address 172.20.225.149

Fri Nov 3 15:06:11 2006 [SECURITY] aaa.c 666: Authentication succeeded for net work user 'guest123'

Fri Nov 3 15:05:30 2006 [VERBOSE] apf_foreignap.c 1075: Guest user with MAC Address 00:40:96:ad:12:39 assigned IP Address 172.20.225.149

Hope it helps,

Rgds,

Gaetan

koksm · ‎02-12-2007

yes, this helps.

Thanks!