No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade
Knowledge Base

FAQ-ACU2 How Does an RADIUS Accounting-Request (Start) packet Carry an IP Address

Publication Date:  2019-06-27  |   Views:  264  |   Downloads:  0  |   Document ID:  EKB1100020208

Contents

Issue Description

Device model: ACU2

Software version: V200R006C10SPC200

Problem Description: In MAC address authentication scenarios, the AAA server occasionally fails to obtain the IP address of the terminal from the RADIUS Accounting-Request (Start) packet sent by the ACU2.

Capture packets on the AAA server, as shown in the following figure.

Some of the Accounting-Request (Start) packets sent by the ACU2 to AAA do not carry the frame-ip-address.

Solution

In MAC address authentication or 802.1X authentication scenarios, when a STA associates with an AP, the authentication process starts.

Whether the frame-ip-address is carried in the Accounting-Request (Start) packet depends on the speed of terminal obtaining the IP address.

If the terminal still fails to obtain an IP address when the AC sends an accounting-request (start), the Accounting-Request (Start) packet does not carry the frame-ip-address of the terminal.

Later when The AC sends the Accounting-Request (Interim-update) packet, the packet will carries the frame-ip-address of the terminal, as shown in the following figure:


 

 In V200R007C20 and later versions, the AC supports delayed sending of Accounting-Request (Start) packets. It sends an Accounting-Request (Start) packet after the STA obtains an IP address.

 

 # Enable the function of carrying the user IP address in the Accounting-Request (Start) packet.

<AC6605> system-view

[AC6605] authentication-profile name test

[AC6605-authentication-profile-test] authentication ip-address in-accounting-start