WDS & AAA Accounting

[cmorrissey]

I don't understand how AAA accounting is supposed to work if using WDS/WLCCP. I want to generate accounting records for start/stop.

When WDS is configured should only the WDS generate/forward the AAA records since it is processing the authentication request? If so does anyone have a configuration example? If not then each AP needs a radius accounting server configured?

Thank you for any insight!

[smahbub]

In a WDS environment, all RADIUS messaging originates at the WDS, not at the member AP's. The policies configured at the AAA server for the member AP's (Infrastructure, WLSE) and clients (Clients) will be assigned via appropriate RADIUS attributes upon successful authentication.

Infrastructure AP's authenticate to WDS using RADIUS session timer configured under session timeout in ACS (RADIUS IETF 027-global or Cisco Aironet session timeout- Group or User) This parameter is set in units of seconds in ACS application.

[mbubani]

I've the same problem. Did you solved it? What is the right AP (WDS master and client) configuration?

Thanks in advance

marco

[cmorrissey]

Not really. I have it working now but not pretty - had to load the AAA accounting servers on every AP (not just the WDSs). AAA authentication works fine via WDS, but I could only get accounting working via each individual AP.

[mbubani]

Thanks for the reply!!!

In this way did you define every AP as AAA Client on Cisco ACS?