wx5004 not reporting ip address via radius accounting

[Mikeybyte]

Hi All

I have an issue where we have a WX5004 wireless controller providing wireless using wpa2/802.1x authentication which works just fine and dandy.

I need to be able to use the radius accounting information to provide a web filtering solution with username and ip address.

I have done this before with Cisco and other wireless vendors, however the wx5004 does not appear to even report the ip address of the device as part of the accounting information.

Can anyone assist me with sorting this out ?

We are running the latest firmware from the website as of today.

Ta.

P.S. This thread has been moved from Lagacy to Comware Wireless / Unified Series. - Hp forum Moderator

[Peter_Debruyne]

Hi,

2 settings:

1/ AC needs to be configured to learn the wlan client IP address information.

Either use dhcp-snooping (only for central wlan) or the arp/dhcp snooping (central+decentral).

Dhcp-snooping:

 # enable global dhcp snooping

dhcp-snooping

 # make the uplink trusted, assuming uplink on AC is BAGG1 here:

int bridge 1

 dhcp-snooping trust

arp/dhcp snooping

 # enable global option

wlan client learn-ipaddr enable

You can verify the operation (after reconnect with wlan client, so you need fresh dhcp/arp traffic to learn IP) with

display wlan client 

2/ Learning the client IP takes a few seconds after the association is made. Initial radius accounting will start directly after the association is made, so you may need to configure the accounting-delay. This is a fairly new feature and available for both mac and dot1x auth.

Example for dot1x accounting delay:

int wlan-ess 1

 dot1x accounting-delay

Default delay is 10 seconds. Some tuning options are available, check release notes

Hope this helps,

best regards,Peter