Dell FCX624-I Laptop User Manual


  Open as PDF
of 1494
 
1246 PowerConnect B-Series FCX Configuration Guide
53-1002266-01
Configuring 802.1X accounting
34
Configuring 802.1X accounting
802.1X accounting enables the recording of information about 802.1X clients who were
successfully authenticated and allowed access to the network. When 802.1X accounting is
enabled on the Dell PowerConnect device, it sends the following information to a RADIUS server
whenever an authenticated 802.1X client (user) logs into or out of the Dell PowerConnect device:
The session ID
The user MAC address
The authenticating physical port number
An Accounting Start packet is sent to the RADIUS server when a user is successfully authenticated.
The Start packet indicates the start of a new session and contains the user MAC address and
physical port number. The 802.1X session state will change to Authenticated and Permit after
receiving a response from the accounting server for the accounting Start packet. If the Accounting
service is not available, the 802.1X session status will change to Authenticated and Permit after a
RADIUS timeout. The device will retry authentication requests three times (the default), or the
number of times configured on the device.
An Accounting Stop packet is sent to the RADIUS server when one of the following events occur:
The user logs off
The port goes down
The port is disabled
The user fails to re-authenticate after a RADIUS timeout
The 802.1X port control-auto configuration changes
The MAC session clears (through use of the clear dot1x mac-session CLI command)
The Accounting Stop packet indicates the end of the session and the time the user logged out.
802.1X Accounting attributes for RADIUS
Dell PowerConnect devices support the following RADIUS attributes for 802.1X accounting.
TABLE 211 802.1X accounting attributes for RADIUS
Attribute name Attribute ID Data Type Description
Acct-Session-ID 44 Integer The account session ID, which is a number from 1 to
4294967295.
Acct-Status-Type 40 integer Indicates whether the accounting request marks the
beginning (start) or end (stop) of the user service.
1 – Start
2 – Stop
Calling-Station-Id 31 string The supplicant MAC address in ASCII format (upper case
only), with octet values separated by a dash (-). For
example 00-10-A4-23-19-C0
NAS-Port 5 integer The physical port number.
NAS-Port-Type 61 integer The physical port type.