topic Re: WDS & AAA Accounting in Wireless

WDS & AAA Accounting

cmorrissey — Sun, 04 Jul 2021 18:00:37 GMT

I don't understand how AAA accounting is supposed to work if using WDS/WLCCP. I want to generate accounting records for start/stop.

When WDS is configured should only the WDS generate/forward the AAA records since it is processing the authentication request? If so does anyone have a configuration example? If not then each AP needs a radius accounting server configured?

Thank you for any insight!

Re: WDS & AAA Accounting

smahbub — Fri, 05 Aug 2005 18:38:29 GMT

In a WDS environment, all RADIUS messaging originates at the WDS, not at the member AP's. The policies configured at the AAA server for the member AP's (Infrastructure, WLSE) and clients (Clients) will be assigned via appropriate RADIUS attributes upon successful authentication.

Infrastructure AP's authenticate to WDS using RADIUS session timer configured under session timeout in ACS (RADIUS IETF 027-global or Cisco Aironet session timeout- Group or User) This parameter is set in units of seconds in ACS application.

Re: WDS & AAA Accounting

mbubani — Tue, 31 Jan 2006 13:34:56 GMT

I've the same problem. Did you solved it? What is the right AP (WDS master and client) configuration?

Thanks in advance

marco

Re: WDS & AAA Accounting

cmorrissey — Tue, 31 Jan 2006 20:38:43 GMT

Not really. I have it working now but not pretty - had to load the AAA accounting servers on every AP (not just the WDSs). AAA authentication works fine via WDS, but I could only get accounting working via each individual AP.

Re: WDS & AAA Accounting

mbubani — Wed, 01 Feb 2006 07:56:17 GMT

Thanks for the reply!!!

In this way did you define every AP as AAA Client on Cisco ACS?