White Papers

Table 70. RADIUS Accounting Stop Record Attributes for dot1x supplicant (continued)
RADIUS Attribute code RADIUS Attribute Description
40 Acct-Status-Type STOP
44 Acct-Session-Id <Supplicant MAC> | Running number
50 Acct-Multi-Session-Id <Supplicant MAC>|<Switch MAC>|<Timestamp>
51 Acct-Link-Count 1
46 Acct-Session Time Time the user has received the service.
49 Acct-Terminate-Cause Reason for session termination.
61 NAS-Port-Type Ethernet
NOTE: During the administrative initiated reload and system failover events, the accounting Stop records for the 802.1x
authorized supplicants are not sent to RADIUS server.
Table 71. Use cases for dot1x supplicant to trigger RADIUS Accounting Start/Stop records
dot1x event Accounting type Attributes
Dot1x user authentication success Start Start record attributes for dot1x supplicant.
Dot1x user logoff Stop Stop record attributes with termination cause as
User Request (1).
Dot1x Supplicant de-auth due to
link down
Stop Stop record attributes with termination cause as
Lost carrier (2).
Dot1x Supp De-Auth due to
supplicant shutdown
Stop Stop record attributes with termination cause as
Lost carrier (2).
Administrative shut of dot1x
authorized interface
Stop Stop record attributes with termination cause as
Lost carrier (2).
CLI user session disconnects due
to dynamic authorization (CoA
port bounce/session termination/
VLAN change)
Stop Stop record attributes with termination cause as
Admin Reset (6).
Deauthorization due to VLAN
change
Stop Stop record attributes with termination cause as
Admin Reset (6).
CLI configuration of the dot1x
authorized port to mab-only auth-
type
Stop Stop record attributes with termination cause as
port-reinitialized (21).
Configure Port control to force
unauth
Stop Stop record attributes with termination cause as
port-reinitialized (21).
Interface Host mode change
(single/multihost/multiauth)
Stop Stop record attributes with termination cause as
port-reinitialized (21).
Configure max supplicant per
interface
Stop Stop record attributes with termination cause as
port-reinitialized (21).
Supplicant goes off without
explicitly sending EAP logoff
Stop Stop record attributes with termination cause as Idle
Timeout (4).
Periodic Reauth of supplicant Stop Stop record attributes with termination cause as
Supplicant restart (19).
Failure of dot1x authorized port
assignment to untagged VLAN
Stop Stop record attributes with termination cause as
Port error (8).
dot1x user Reauth-failure Stop Stop record attributes with termination cause as
Reauthentication Failure (20).
662 Security