Users Guide

274 | Authentication Servers Dell Networking W-Series ArubaOS 6.4.x| User Guide
2. The controller sends an Accounting Stop packet when a user logs off; the packet information includes
various statistics such as elapsed time, input and output bytes, and packets. The RADIUS server sends an
acknowledgment of the packet.
The following is the list of attributes that the controller can send to a RADIUS accounting server:
l Acct-Status-Type: This attribute marks the beginning or end of accounting record for a user. Current
values are Start, Stop, and Interim Update.
l User-Name: Name of user.
l Acct-Session-Id: A unique identifier to facilitate matching of accounting records for a user. It is derived
from the user name, IP address, and MAC address. This is set in all accounting packets.
l Acct-Authentic: This indicates how the user was authenticated. Current values are 1 (RADIUS), 2 (Local),
and 3 (LDAP).
l Acct-Session-Time: The elapsed time, in seconds, that the client was logged in to the controller. This is only
sent in Accounting-Request records, where the Acct-Status-Type is Stop or Interim Update.
l Acct-Terminate-Cause: Indicates how the session was terminated and is sent in Accounting-Request
records where the Acct-Status-Type is Stop. Possible values are:
1: User logged off
4: Idle Timeout
5: Session Timeout. Maximum session length timer expired.
7: Admin Reboot: Administrator is ending service, for example prior to rebooting the controller.
l NAS-Identifier: This is set in the RADIUS server configuration.
l NAS-IP-Address: IP address of the master controller. You can configure a “global” NAS IP address:
n In the WebUI, navigate to the Configuration > Security > Authentication > Advanced page.
n In the CLI, use the, ip radius nas-ip command.
l NAS-Port: Physical or virtual port (tunnel) number through which the user traffic is entering the controller.
l NAS-Port-Type: Type of port used in the connection. This is set to one of the following:
n 5: admin login
n 15: wired user type
n 19: wireless user
l Framed-IP-Address: IP address of the user.
l Calling-Station-ID: MAC address of the user.
l Called-station-ID: MAC address of the controller.
The following attributes are sent in Accounting-Request packets when Acct-Status-Type value is Start:
l Acct-Status-Type
l User-Name
l NAS-IP-Address
l NAS-Port
l NAS-Port-Type
l NAS-Identifier
l Framed-IP-Address
l Calling-Station-ID
l Called-station-ID
l Acct-Session-ID
l Acct-Authentic