Allied Telesis AT-S63 - Manual (Page 731)

AT-S63 Management Software Menus Interface User’s Guide
Section VII: Port Security 731
The information sent by the switch to the RADIUS server for an event
includes:
ˆ Port number where the event occurred
ˆ The date and time when the event occurred
ˆ The number of packets transmitted and received by the switch port
during a supplicant’s session. (This information is sent only when the
client logs off.)
You can also configure the accounting feature to send interim updates so
you can monitor which clients are still active.
Here are the guidelines to using the accounting feature:
ˆ The AT-S63 management software supports the Network level of
accounting, but not the System or Exec.
ˆ This feature is only available for ports operating in the Authenticator
role. No accounting is provided for ports operating in the Supplicant or
None role.
ˆ You must configure 802.1x Port-based Network Access Control as
explained in this chapter and designate the Authenticator ports.
ˆ You must also specify from one to three RADIUS servers. The
instructions for this are in “Configuring RADIUS” on page 836.
For instructions on configuring this feature, refer to “Configuring RADIUS
Accounting” on page 746.
General Steps
Following are the general steps to implementing 802.1x Port-based
Network Access Control and RADIUS accounting on the switch:
1. You must install RADIUS server software on one or more of your
network servers or management stations. Authentication protocol
server software is not available from Allied Telesyn. Funk Software
Steel-Belted Radius and Free Radius have been verified as fully
compatible with the AT-S63 management software.
Note
This feature is not supported with the TACACS+ authentication
protocol.
2. You need to install 802.1x client software on those workstations that
are to be supplicants. Microsoft WinXP client software and Meeting
House Aegis client software have been verified as fully compatible with
the AT-S63 management software.