Table of Contents
Advertisement
Configuring IEEE 802.1x Port-Based Authentication
Information About Configuring IEEE 802.1x Port-Based Authentication
802.1x Accounting Attribute-Value Pairs
The information sent to the RADIUS server is represented in the form of Attribute-Value (AV) pairs. These AV pairs
provide data for different applications. (For example, a billing application might require information that is in the
Acct-Input-Octets or the Acct-Output-Octets attributes of a RADIUS packet.)
AV pairs are automatically sent by a switch that is configured for 802.1x accounting. Three types of RADIUS accounting
packets are sent by a switch:
START—Sent when a new user session starts
INTERIM—Sent during an existing session for updates
STOP—Sent when a session terminates
Attribute Number
Attribute[1]
Attribute[4]
Attribute[5]
Attribute[8]
Attribute[25]
Attribute[30]
Attribute[31]
Attribute[40]
Attribute[41]
Attribute[42]
Attribute[43]
Attribute[44]
Attribute[45]
Attribute[46]
Attribute[49]
Attribute[61]
1.
The Framed-IP-Address AV pair is sent only if a valid Dynamic Host Control Protocol (DHCP) binding exists for the
host in the DHCP snooping bindings table.
You can view the AV pairs that are being sent by the switch by entering the debug radius accounting privileged EXEC
command.
For more information about AV pairs, see RFC 3580, "802.1x Remote Authentication Dial In User Service (RADIUS)
Usage Guidelines."
802.1x Readiness Check
The 802.1x readiness check monitors 802.1x activity on all the switch ports and displays information about the devices
connected to the ports that support 802.1x. You can use this feature to determine if the devices connected to the switch
ports are 802.1x-capable. You use an alternate authentication such as MAC authentication bypass or web authentication
for the devices that do not support 802.1x functionality.
This feature only works if the supplicant on the client supports a query with the NOTIFY EAP notification packet. The client
must respond within the 802.1x timeout value.
AV Pair Name
User-Name
NAS-IP-Address
NAS-Port
Framed-IP-Address
Class
Called-Station-ID
Calling-Station-ID
Acct-Status-Type
Acct-Delay-Time
Acct-Input-Octets
Acct-Output-Octets
Acct-Session-ID
Acct-Authentic
Acct-Session-Time
Acct-Terminate-Cause
NAS-Port-Type
START
INTERIM
Always
Always
Always
Always
Always
Always
Never
Sometimes
Always
Always
Always
Always
Always
Always
Always
Always
Always
Always
Never
Always
Never
Always
Always
Always
Always
Always
Never
Always
Never
Never
Always
Always
200
STOP
Always
Always
Always
1
1
Sometimes
Always
Always
Always
Always
Always
Always
Always
Always
Always
Always
Always
Always
- Quick Links:
- Configuration Overview
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
