Table of Contents
Advertisement
Authentication, Authorization and Accounting (AAA) Commands
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
User Guidelines
This command enables the recording of 802.1x sessions.
If accounting is activated, the device sends start/stop messages to a RADIUS
server when a user logs in / logs out to the network, respectively.
The device uses the configured priorities of the available RADIUS servers in order
to select the RADIUS server.
If a new supplicant replaces an old supplicant (even if the port state remains
authorized), the software sends a stop message for the old supplicant and a start
message for the new supplicant.
In multiple sessions mode (dot1x multiple-hosts authentication), the software
sends start/stop messages for each authenticated supplicant.
In multiple hosts mode (dot1x multiple-hosts), the software sends start/stop
messages only for the supplicant that has been authenticated.
The software does not send start/stop messages if the port is force-authorized.
The software does not send start/stop messages for hosts that are sending traffic
on the guest VLAN or on the unauthenticated VLANs.
The following table describes the supported Radius accounting Attributes Values
and when they are sent by the switch.
Name
User-Name (1)
NAS-IP-Address (4)
NAS-Port (5)
Class (25)
Called-Station-ID (30)
Calling-Station-ID (31)
Acct-Session-ID (44)
Start
Stop
Description
Yes
Yes
Supplicant's identity.
Yes
Yes
The switch IP address
that is used for the
session with the
RADIUS server.
Yes
Yes
The switch port from
where the supplicant
has logged in.
Yes
Yes
The arbitrary value that
is included in all
accounting packets for
a specific session.
Yes
Yes
The switch MAC
address.
Yes
Yes
The supplicant MAC
address.
Yes
Yes
A unique accounting
identifier.
5
188
Advertisement
Table of Contents
