Allen-Bradley 1783-WAPAK9, User Manual

Page: 421 / 612

Rockwell Automation Publication 1783-UM006A-EN-P - May 2014 421
Configuring RADIUS and Servers Chapter 14
string —The shared-secret text string that is shared between the
network access server and the client workstation. This shared-secret
must be the same on both systems.
aaa pod server [port port number]
[auth-type {any | all | session-key}] [clients
client 1...] [ignore {server-key string...|
session-key }] | server-key string...]}
3.
Return to privileged EXEC mode.
end
4.
Verify your entries.
show running-config
5.
(Optional) Save your entries in the configuration file.
copy running-config startup-config
Starting RADIUS Accounting
The AAA accounting feature tracks the services that users are accessing and the
amount of network resources that they are consuming. When AAA accounting is
enabled, the access point reports user activity to the RADIUS security server in
the form of accounting records.
Each accounting record contains accounting attribute-value (AV) pairs and is
stored on the security server. This data can then be analyzed for network
management, client billing, or auditing.
See RADIUS Attributes Sent by the Access Point on page 428 for a complete list
of attributes sent and honored by the access point.
Beginning in privileged EXEC mode, follow these steps to enable RADIUS
accounting for each Cisco IOS privilege level and for network services:
1.
Enter global configuration mode.
configure terminal
2.
Enable RADIUS accounting for all network-related service requests.
aaa accounting network start-stop radius
3.
Configure the access point to send its BVI IP address in the
NAS_IP_ADDRESS attribute for accounting records.
ip radius source-interface bvi1
4.
Enter an accounting update interval in minutes.
aaa accounting update periodic minutes
5.
Return to privileged EXEC mode.
end
TIP Any data entered after this parameter is treated as the shared secret string.