cancel
Showing results for 
Search instead for 
Did you mean: 

Radius Accounting Help

garrett_collier
New Contributor III
Can anyone point me in the right direction regarding Windows NPS Accounting? We are using a zone director 3000 and windows 2012 NPS radius. This is all working well as our users are able to login via AD username/pw. The problem I'm running into is, due to NPS, we have no way of controlling number of devices per username. 

I was told that by enabling accounting, I would be able to do this. I, now, have accounting on and logging to a SQL database, however, the data is mostly null with the exception for the username, called station id, and client ip (which is always the zone director's).

I have read the guide "working with radius attributes and accounting" but I feel like I'm missing a lot because it lists all the attributes but I have no idea what to do with them.
4 REPLIES 4

monnat_systems
Valued Contributor II
have you thought about using DPSK/Zero It, where you can restrict the no of key/device per username..
you can integrate ur AD with controller and set limit on WLAN for per user..
see the image..

Image_ images_messages_5f91c42b135b77e24799beae_43191abbb864666e48dc45cc7e6d66bd_RackMultipart20161026103012u8g-220d815d-ed55-434f-9a95-b0757a03e730-236327986.png1477474812

it is less complicated and easy to do..
does it fit into ur scheme of things?

garrett_collier
New Contributor III
I guess I don't have those options available. I have Zero-IT then priority. -No options for DPSK.

monnat_systems
Valued Contributor II
see the attached pic.. you got to have WPA2/AES under encryption options and that would open up
other options for you to select.

Image_ images_messages_5f91c42c135b77e24799e5c0_ff1b625465d1cc5229ae0d7f8f13f834_RackMultipart2016102712613eulk-08b8109a-ba92-439b-aa9f-f542b4291e62-2106865684.png1477570909 

garrett_collier
New Contributor III
Ah ha! -The reason I wasn't seeing it was due to 802.1xEAP  being checked.

Unless I'm misinterpreting the configuration, I would have to provide a shared key to all 3000+ of my users; I don't believe that would work.