06-07-2018 04:34 PM - edited 03-08-2019 03:17 PM
I've got 3 x WS-C2960CX-8PC-L units and for some reason I can not get accounting interim updates to work. Normal start-stop accounting is working fine.
If I compare the output of show authentication sessions int <intname> details command, on the 2960cx the "Periodic Acct timeout:" line is missing, see comparisons.
Output from 2960CX
show authentication sessions int g0/5 details Interface: GigabitEthernet0/5 MAC Address: 0023.247f.5000 IPv6 Address: Unknown IPv4 Address: ******** User-Name: ******** Device-type: Un-Classified Device Status: Authorized Domain: DATA Oper host mode: multi-auth Oper control dir: both Session timeout: N/A Restart timeout: N/A Common Session ID: AC11001B000000160203C6F1 Acct Session ID: 0x00000009 Handle: 0x6F00000A Current Policy: POLICY_Gi0/5
Output from 2960X
show authentication sessions int g1/0/31 details Interface: GigabitEthernet1/0/31 MAC Address: 0023.247f.ba3d IPv6 Address: Unknown IPv4 Address: ******** User-Name: ******** Device-type: Un-Classified Device Status: Authorized Domain: DATA Oper host mode: multi-auth Oper control dir: both Session timeout: N/A Restart timeout: N/A Periodic Acct timeout: 180s (local), Remaining: 174s Session Uptime: 6687s Common Session ID: AC11004700001529B6DEC078 Acct Session ID: 0x00001B43 Handle: 0x52000529 Current Policy: POLICY_Gi1/0/31
The AAA config I'm using for both models is
aaa authentication login default group edir_replicas local aaa authentication dot1x default group edir_replicas aaa authorization exec default group edir_replicas local aaa authorization network default group edir_replicas aaa authorization config-commands aaa accounting dot1x default start-stop group edir_replicas aaa accounting update periodic 3
Interim updates works fine on WS-C2960X-48FPD-L with this same config. iOS versions are
2960CX:15.2(4)E2
2960X:15.2(2)E6
Has anyone successfully got accounting interim updates working for a 2960cx?