AAA Accounting with WLSM

[tracey.marshall]

I have a customer with Cat6500 and WLSM running WDS. The APs and dot1x clients can authenticate with the ACS server. However, we cannot get any accounting information. We have tried configuring the WLSM with the following commands:

aaa accounting network default start-stop group ClientDevices

aaa accounting resource default start-stop group ClientDevices

aaa accounting auth-proxy default start-stop group ClientDevices

but none of these work. Devices are running the following code:

Cat6500/Sup720 - 12.2(18)SXD5

WLSM - 12.3(4)JA

1200APs - 12.3(7)JA2

Any assistance would be greatly appreciated.

Tracey

[bbaley]

Looks like there is some configuration issue. Can you post the full configuration. This setup should work.

[tracey.marshall]

I set this up in the lab using an AP as the WDS and got the same problem; authentication logs but no accounting logs. Here are excerpts from the configs:

AP:

no aaa new-model

!

dot11 ssid eduroam

vlan 1800

authentication open eap eap_methods

authentication network-eap eap_methods

authentication key-management wpa

mobility network-id 180

!

!

wlccp ap username xxxx password xxxx

wlccp ap wds ip address 172.30.2.174

WLSM:

aaa new-model

!

!

aaa group server radius AccessPoints

server 130.x.x.139 auth-port 1645 acct-port 1646

!

aaa group server radius ClientDevices

server 130.x.x.32 auth-port 1812 acct-port 1813

!

aaa authentication login Leap-devices group AccessPoints

aaa authentication login client-authentication group ClientDevices

aaa session-id common

!

radius-server host 130.x.x.32 auth-port 1812 acct-port 1813 key 7

radius-server host 130.209.13.139 auth-port 1645 acct-port 1646 key 7

!

wlccp authentication-server infrastructure Leap-devices

wlccp authentication-server client any client-authentication

wlccp wds interface Ethernet0/0.2

wlccp wnm ip address 172.20.18.58

The WLSM currently does not have any aaa accounting config. The following commands have been tried with no success:

aaa accounting network default start-stop group ClientDevices

aaa accounting resource default start-stop group ClientDevices

aaa accounting auth-proxy default start-stop group ClientDevices

Thanks for your help.

Tracey

[jsteffensen]

Did you find a sollution?

I've seen the "radius-server vsa send accounting" commando - but couldn't make it work.

Greetings

Jarle

[tracey.marshall]

Hi Jarle,

Cisco advised that aaa accounting is not supported with WDS.

Sorry......Tracey