RADIUS Accounting

RADIUS accounting of AP events

RADIUS accounting of AP events is a network monitoring mechanism that

  • Tracks the status transitions of APs within a wireless controller environment

  • Records AP join and disjoin events

  • Provides historical visibility into AP downtime and uptime through accounting messages sent to a RADIUS server.

Feature History

This table provides release and related information for the feature explained in this module.

This feature is also available in all the releases subsequent to the one in which they are introduced in, unless noted otherwise.

Table 1. Feature history table

Feature Name

Release

Description

Device Ecosystem Data

Cisco IOS XE 17.10.1

This feature sends device analytics data that is present in the RADIUS accounting request to Cisco ISE to profile endpoints

The command is introduced:

  • dot11-tlv-accounting

Chargeable User Identity in RADIUS Accounting

Cisco IOS XE 17.9.1

Chargeable User Identity (CUI) is a unique identifier for a client visiting a network. This attribute can be used as an alternative for the client’s username as part of the authentication process.

The command is introduced:

  • dot11-tlv-accounting

Improved Logging in RADIUS Accounting

Cisco IOS XE 17.1.1

Prior to Cisco IOS XE Amsterdam 17.1.1 release, the controller did not send accounting messages for AP join and disjoin events during network issues. From Cisco IOS XE Amsterdam 17.1.1 Release and later, the RADIUS server keeps a record of all APs that were down and have come up.

Configure accounting method-list for an AP profile

Define an accounting method list within an access point (AP) profile to enable or disable accounting for AP operations.

Use this task to specify how accounting is managed for an AP profile on your device. This allows tracking of AP events and assists with auditing and troubleshooting

Before you begin

  • Identify the AP profile name you want to configure. The default AP profile name is default-ap-profile.

  • Determine the accounting method list name you wish to apply.

Procedure

Step 1

Enter global configuration mode.

Example:

Device#configure terminal

Step 2

Configures the AP profile. The default AP join profile name is default-ap-profile.

Example:

Device(config)# ap profile ap-profile-name

Step 3

Configures the accounting method list for the AP profile.

Example:

Device(config-ap-profile)# [no] accounting method-list method-list-name

Use the no form of this command to disable the accounting method list.

The system associates the specified accounting method list with the AP profile, enabling or disabling accounting

Verify the AP accounting information

Verify the AP accounting information including MAC address, packets sent, packets received, and the method list.

Device#show wireless stats ap accounting
Base MAC 	     Total packet Send    Total packet Received Methodlist
----------------------------------------------------------------------------------------
00b0.e192.0f20     4 				   3 				abc
38ed.18cc.5788     8 				   8 				ML_M
70ea.1ae0.af08     0 				   0 				ML_A

View the details of a method list that is configured for an AP profile.

Device#show ap profile name Method-list detailed
AP Profile Name               : test-profile
Description                   : 
.
.
.
Method-list name              : Method-list
Packet Sequence Jump DELBA    : ENABLED
Lag status                    : DISABLED
.
Client RSSI Statistics
  Reporting                   : ENABLED
  Reporting Interval          : 30 seconds