07-15-2024 10:26 AM
I need to prevent a Cisco 2960 switch from sending accounting information that is not related to 802.1x session to a radius server. Currently, I have the switches configured with radius authentication and accounting, but it is not enabled at the interface level (there is no 802.1x or authentication configuration on the interfaces). However, the switch still sends accounting information for other things such as 'cisco-avpair connect-progress=call up' which I do not need. Is there a way to prevent it from sending this data and only send the 802.1x session information? The command I use to enable accounting is 'aaa accounting dot1x default start-stop group xxxxx'.
It's important to note that the switch sends this information even without authentication commands on the interfaces.
can you help me please?
07-15-2024 10:55 AM
Why do you have RADIUS Accounting enabled without any RADIUS authentication enabled?
07-15-2024 11:03 AM
I think you use radius for PPPoE other protocols.
You can use
Aaa accounting Delay-start
This will delay acc until user get IP.
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide