Hello Experts
Could you give me advise?
[Condition]
We are using 802.1x authentication on Catalyst with IOS and IOS-XE.
And our RADIUS server set attribute "class(25)" on Access-Accept packets.
When Catalyst send Accounting-request "start" or "stop".
IOS on Catalyst set "class" attribute and sent Accouting-Request, but IOS-XE Catalyst don't set "class".
*We are using this attribute for some purposes.
Could you tell me how to set "class" attribute on IOS-XE Catalyst?
or is this behavior is bug?
I read "RFC 2865 Remote Authentication Dial In User Service (RADIUS)" and think that the client(=Catalyst) have to send Accounting-Request include "class" attribute.
.
==============================
5.25. Class
Description
This Attribute is available to be sent by the server to the client
in an Access-Accept and SHOULD be sent unmodified by the client to
the accounting server as part of the Accounting-Request packet if
accounting is supported. The client MUST NOT interpret the
attribute locally.
==============================
Best Regards
