Hi Everyone.
I have setup FreeRadius to log all the commands entered from the procurve command line and it rocks except for on some of my 5400's it is sending the Calling-Station-Id wrong.
The Calling-Station-Id is this case should be the IP address of the device which has telneted / ssh'd into the switch. What is slightly more annoying is that the switch is definitely aware of the IP it should be sending as if I turn on
"aaa accounting exec start-stop" to log the sessions of people on the switch it is showing the correct ip in my logs (below). A "show telnet" also shows the correct IP. Basically I want to get to the point where I can pointpoint what command was entered by who, without having to create a separate login for everyone who uses the switches.
Below I have attached a few logs from my freeradius server showing that the exec accounting is logging the ip correctly, but the command logging is not:
Fri Apr 3 16:50:15 2009
Acct-Session-Id = "001600000067"
NAS-IP-Address = 128.1.8.6
NAS-Identifier = "Centuryan_House5412"
NAS-Port-Type = Virtual
Calling-Station-Id = "0.0.0.128"
Acct-Status-Type = Interim-Update
Acct-Authentic = Local
Service-Type = NAS-Prompt-User
HP-Command-String = "configure"
Acct-Delay-Time = 0
MS-RAS-Vendor = 11
Acct-Unique-Session-Id = "881be2951fb9f480"
Timestamp = 1238773815
Request-Authenticator = Verified
Fri Apr 3 16:50:33 2009
Acct-Session-Id = "001600000068"
NAS-IP-Address = 128.1.8.6
NAS-Identifier = "Centuryan_House5412"
NAS-Port-Type = Virtual
Calling-Station-Id = "0.0.0.128"
Acct-Status-Type = Interim-Update
Acct-Authentic = Local
Service-Type = NAS-Prompt-User
HP-Command-String = "show running-config"
Acct-Delay-Time = 0
MS-RAS-Vendor = 11
Acct-Unique-Session-Id = "48d69eada0b18878"
Timestamp = 1238773833
Request-Authenticator = Verified
Fri Apr 3 16:50:38 2009
Acct-Session-Id = "001600000066"
Acct-Status-Type = Stop
Service-Type = NAS-Prompt-User
Acct-Authentic = Local
Acct-Delay-Time = 0
NAS-IP-Address = 128.1.8.6
NAS-Identifier = "Centuryan_House5412"
Calling-Station-Id = "128.1.8.248"
Acct-Terminate-Cause = 0
Acct-Session-Time = 24
MS-RAS-Vendor = 11
Acct-Unique-Session-Id = "5e94f50f4e1d979d"
Timestamp = 1238773838
Request-Authenticator = Verified
Fri Apr 3 16:50:38 2009
Acct-Session-Id = "001600000069"
NAS-IP-Address = 128.1.8.6
NAS-Identifier = "Centuryan_House5412"
NAS-Port-Type = Virtual
Calling-Station-Id = "0.0.0.128"
Acct-Status-Type = Interim-Update
Acct-Authentic = Local
Service-Type = NAS-Prompt-User
HP-Command-String = "no aaa accounting exec"
Acct-Delay-Time = 0
MS-RAS-Vendor = 11
Acct-Unique-Session-Id = "24bf137d62127cbb"
Timestamp = 1238773838
Request-Authenticator = Verified
Fri Apr 3 16:50:52 2009
Acct-Session-Id = "00160000006A"
NAS-IP-Address = 128.1.8.6
NAS-Identifier = "Centuryan_House5412"
NAS-Port-Type = Virtual
Calling-Station-Id = "0.0.0.128"
Acct-Status-Type = Interim-Update
Acct-Authentic = Local
Service-Type = NAS-Prompt-User
HP-Command-String = "logout"
Acct-Delay-Time = 0
MS-RAS-Vendor = 11
Acct-Unique-Session-Id = "ed390633efe8ca74"
Timestamp = 1238773852
Request-Authenticator = Verified
