I have an existing FreeRadius setup for an 802.1x wireless network.
Currently the accounting is done to a MySQL database. Presently, the
username appearing in these records is the outer identity. I want to use
the authenticated inner identity, such that I can rely on my accounting
data e.g. for billing.
I know that accounting packets are not sent through the inner-tunnel and
so I can't simply move my accounting to the inner-tunnel. I suppose what
I'm after is a way to tie a session at authentication to the associated
session in accounting. Is there any sort of ID that is used both in
inner-tunnel authentication and accounting, that can be relied upon?
Otherwise am I looking at using something like the MAC address of the
client?
The other option might be using vendor supplied attributes from the
Cisco controllers. Has anyone done this before?
Thanks,
Jonathan
----------------------------
Jonathan Gazeley
Systems Support Specialist
ResNet | Wireless & VPN Team
Information Services
University of Bristol
----------------------------
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
