- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2018 07:54 AM - edited 07-05-2021 08:33 AM
Hi
I want to know which users are using the ares application, Is this is possible?
I have WLC 5508 with IOS 8.2.166.0
Solved! Go to Solution.
- Labels:
-
Other Wireless Topics
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2018 08:01 AM
Hi there,
Configure netflow on the WLC and a server as a neflow collector/ analyser.
Looking at the Cisco NBAR protocol list:
...use these details to filter the netflow data to find source IPs (your wireless clients). Using time, date and IP address cross reference with your authentication logs to determine the user ID.
cheers,
Seb.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2018 02:08 PM
With 5508, it does not support enhanced netflow fields that supported in 8540/5520 with AireOS 8.2.x. With those newer platform, you get wireless username (if it is 802.1X configured SSID) as part of netflow data. If you have a netflow collector understand all these WLC netflow fields, you can work it out. (see below)
https://mrncciew.com/2018/02/20/wlc-netflow-with-extrahop/
With 5508, you may get something similar to below
https://mrncciew.com/2013/02/12/configuring-netflow-on-wlc-7-4/
Using WLC, CLI commands you can't get information you wanted.
HTH
Rasika
*** Pls rate all useful responses ***
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2018 08:01 AM
Hi there,
Configure netflow on the WLC and a server as a neflow collector/ analyser.
Looking at the Cisco NBAR protocol list:
...use these details to filter the netflow data to find source IPs (your wireless clients). Using time, date and IP address cross reference with your authentication logs to determine the user ID.
cheers,
Seb.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2018 02:08 PM
With 5508, it does not support enhanced netflow fields that supported in 8540/5520 with AireOS 8.2.x. With those newer platform, you get wireless username (if it is 802.1X configured SSID) as part of netflow data. If you have a netflow collector understand all these WLC netflow fields, you can work it out. (see below)
https://mrncciew.com/2018/02/20/wlc-netflow-with-extrahop/
With 5508, you may get something similar to below
https://mrncciew.com/2013/02/12/configuring-netflow-on-wlc-7-4/
Using WLC, CLI commands you can't get information you wanted.
HTH
Rasika
*** Pls rate all useful responses ***
