Publication Date: 2019-06-27 | Views: 264 | Downloads: 0 | Document ID: EKB1100020208
Device model: ACU2
Software version: V200R006C10SPC200
Problem Description: In MAC address authentication scenarios, the AAA server occasionally fails to obtain the IP address of the terminal from the RADIUS Accounting-Request (Start) packet sent by the ACU2.
Capture packets on the AAA server, as shown in the following figure.
Some of the Accounting-Request (Start) packets sent by the ACU2 to AAA do not carry the frame-ip-address.
In MAC address authentication or 802.1X authentication scenarios, when a STA associates with an AP, the authentication process starts.
Whether the frame-ip-address is carried in the Accounting-Request (Start) packet depends on the speed of terminal obtaining the IP address.
If the terminal still fails to obtain an IP address when the AC sends an accounting-request (start), the Accounting-Request (Start) packet does not carry the frame-ip-address of the terminal.
Later when The AC sends the Accounting-Request (Interim-update) packet, the packet will carries the frame-ip-address of the terminal, as shown in the following figure:
In V200R007C20 and later versions, the AC supports delayed sending of Accounting-Request (Start) packets. It sends an Accounting-Request (Start) packet after the STA obtains an IP address.
# Enable the function of carrying the user IP address in the Accounting-Request (Start) packet.
[AC6605] authentication-profile name test
[AC6605-authentication-profile-test] authentication ip-address in-accounting-start