Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

How to have AP1232 pass user IP to ACS and reflect in the radius log?

Currently, we are able to get the User-Name [radius attribute 1] to reflect in the ACS log. A debug radius at the AP show this radius attribute is passed back to ACS. However, cannot seem to find the attribute to pass user IP address back to the ACS.

We are using MS-PEAP authentication for 802.1x.

Pls advise and thks

2 REPLIES
Silver

Re: How to have AP1232 pass user IP to ACS and reflect in the ra

In the accounting stop record there should be a Framed-IP-Address attribute to show this info.

You will not get this in the Passed Auths logs because at that point an IP address will not have been assigned.

Similarly 802.1x via RADIUS sends the accounting start prior to IP being up and running.

So goto system config, logging, radius accounting and make sure Framed-IP-Address is enabled.

Darran

New Member

Re: How to have AP1232 pass user IP to ACS and reflect in the ra

we have done that already in the ACS prior posting this post. Additionally, have also enabled the radius attribute 8 in the AP1200 series configuration, the Frame-IP-Address field still does not show the ip address.

In link-framed connections using such protocols as SLIP and PPP, the Framed-IP-Address attribute carries the value of the IP address to be assigned to the connection

The Frame-IP-Address is for PPP and SLIP protocol, can advise if this work for Wireless authentication via EAPOW.

Pls advise.

217
Views
0
Helpful
2
Replies
CreatePlease to create content