Radius Accounting Help

[garrett_collier]

Can anyone point me in the right direction regarding Windows NPS Accounting? We are using a zone director 3000 and windows 2012 NPS radius. This is all working well as our users are able to login via AD username/pw. The problem I'm running into is, due to NPS, we have no way of controlling number of devices per username. 

I was told that by enabling accounting, I would be able to do this. I, now, have accounting on and logging to a SQL database, however, the data is mostly null with the exception for the username, called station id, and client ip (which is always the zone director's).

I have read the guide "working with radius attributes and accounting" but I feel like I'm missing a lot because it lists all the attributes but I have no idea what to do with them.

[monnat_systems]

have you thought about using DPSK/Zero It, where you can restrict the no of key/device per username..
you can integrate ur AD with controller and set limit on WLAN for per user..
see the image..



it is less complicated and easy to do..
does it fit into ur scheme of things?

[garrett_collier]

I guess I don't have those options available. I have Zero-IT then priority. -No options for DPSK.

[monnat_systems]

see the attached pic.. you got to have WPA2/AES under encryption options and that would open up
other options for you to select.

 

[garrett_collier]

Ah ha! -The reason I wasn't seeing it was due to 802.1xEAP  being checked.

Unless I'm misinterpreting the configuration, I would have to provide a shared key to all 3000+ of my users; I don't believe that would work.