cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
316
Views
0
Helpful
2
Replies

ISE - Report Radius Accounting - Missing logs of Interim-Update

ACpinna
Level 1
Level 1

Hi guys,
I´m using ISE version 3.1 with Aruba Access Point.
From RADIUS Accounting Report, there are information about START and STOP, but I CANNOT SEE Account Status Type equal INTERIM-UPDATE.
Analyzing the absence of interim-update logs of the radius account using wireshark. I verified that the network device sends the packet  AVP: t=Acct-Status-Type(40) l=6 val=Alive(3) and the ISE responds Code: Accounting-Response (5).

Despite the exchange of radius packets, this information is not appearing in the report.
Shouldn't ISE translate these packets and show them in the report?
Does anyone have the same problem or have any suggestions on what can be done to make this information appear?
We use the report for troubleshooting and this information is very important.

Thanks in advance and if need more information feel free.

2 Replies 2

Arne Bier
VIP
VIP

Acct-Status-Type(40) Val(3) is indeed Interim-Accounting - but perhaps something is missing in the request from the Aruba device? Maybe @ahollifield has an example of an Aruba Interim-Update he can share (for the Aruba Access Point) ?

ISE often needs certain mandatory attributes in an Access or Accounting Request before it considers it acceptable - below is an IOS-XE example (ignore the t=Vendor-Specific attributes - those are the Cisco Device Sensor - not mandatory)

The IOS-XE specific Accounting commands 

aaa accounting update newinfo periodic 2880
aaa accounting identity default start-stop group dnac-client-radius-group

 

ArneBier_0-1749673469962.png

 

Thanks for the tag @Arne Bier. Is this IAP? AOS10? Mobility Controller?