Administrator Guide

RADIUS Attribute code RADIUS Attribute Description
51 Acct-Link-Count 1
46 Acct-Session Time Time the user has received the service.
49 Acct-Terminate-Cause Reason for session termination.
61 NAS-Port-Type Ethernet
NOTE: During the administrative initiated reload and system failover events, the accounting Stop records for the 802.1x
authorized supplicants are not sent to RADIUS server.
Table 72. Use cases for dot1x supplicant to trigger RADIUS Accounting Start/Stop records
dot1x event Accounting type Attributes
Dot1x user authentication success Start Start record attributes for dot1x supplicant.
Dot1x user logoff Stop Stop record attributes with termination cause as User
Request (1).
Dot1x Supplicant de-auth due to link
down
Stop Stop record attributes with termination cause as Lost
carrier (2).
Dot1x Supp De-Auth due to
supplicant shutdown
Stop Stop record attributes with termination cause as Lost
carrier (2).
Administrative shut of dot1x
authorized interface
Stop Stop record attributes with termination cause as Lost
carrier (2).
CLI user session disconnects due to
dynamic authorization (CoA port
bounce/session termination/VLAN
change)
Stop Stop record attributes with termination cause as Admin
Reset (6).
Deauthorization due to VLAN change Stop Stop record attributes with termination cause as Admin
Reset (6).
CLI configuration of the dot1x
authorized port to mab-only auth-
type
Stop Stop record attributes with termination cause as port-
reinitialized (21).
Configure Port control to force
unauth
Stop Stop record attributes with termination cause as port-
reinitialized (21).
Interface Host mode change (single/
multihost/multiauth)
Stop Stop record attributes with termination cause as port-
reinitialized (21).
Configure max supplicant per
interface
Stop Stop record attributes with termination cause as port-
reinitialized (21).
Supplicant goes off without explicitly
sending EAP logoff
Stop Stop record attributes with termination cause as Idle
Timeout (4).
Periodic Reauth of supplicant Stop Stop record attributes with termination cause as
Supplicant restart (19).
Failure of dot1x authorized port
assignment to untagged VLAN
Stop Stop record attributes with termination cause as Port
error (8).
dot1x user Reauth-failure Stop Stop record attributes with termination cause as
Reauthentication Failure (20).
Disable dot1x globally/interface Stop Stop record attributes with termination cause as Port
Administratively Disabled (22).
656 Security