topic Re: Radius Accounting Help in ZoneDirector

Radius Accounting Help

garrett_collier — Tue, 25 Oct 2016 17:42:59 GMT

Can anyone point me in the right direction regarding Windows NPS Accounting? We are using a zone director 3000 and windows 2012 NPS radius. This is all working well as our users are able to login via AD username/pw. The problem I'm running into is, due to NPS, we have no way of controlling number of devices per username.

I was told that by enabling accounting, I would be able to do this. I, now, have accounting on and logging to a SQL database, however, the data is mostly null with the exception for the username, called station id, and client ip (which is always the zone director's).

I have read the guide "working with radius attributes and accounting" but I feel like I'm missing a lot because it lists all the attributes but I have no idea what to do with them.

Re: Radius Accounting Help

monnat_systems — Wed, 26 Oct 2016 09:41:15 GMT

have you thought about using DPSK/Zero It, where you can restrict the no of key/device per username..
you can integrate ur AD with controller and set limit on WLAN for per user..
see the image..

it is less complicated and easy to do..
does it fit into ur scheme of things?

Re: Radius Accounting Help

garrett_collier — Wed, 26 Oct 2016 12:59:33 GMT

I guess I don't have those options available. I have Zero-IT then priority. -No options for DPSK.

Re: Radius Accounting Help

monnat_systems — Thu, 27 Oct 2016 12:22:00 GMT

see the attached pic.. you got to have WPA2/AES under encryption options and that would open up
other options for you to select.

Re: Radius Accounting Help

garrett_collier — Thu, 27 Oct 2016 18:11:49 GMT

Ah ha! -The reason I wasn't seeing it was due to 802.1xEAP being checked.

Unless I'm misinterpreting the configuration, I would have to provide a shared key to all 3000+ of my users; I don't believe that would work.