RADIUS Accounting with SZ100 NAS-IP
We are currently implementing a public hot spot scenario in midsize city with approx 50 access points. As controller we have a Smartzone 100 controller. As part of the implemenation we have build a captive portal in conjunction with a RADUIS server. Authentication over 1812 works as a charm. What we don’t reach is a proper accounting. We have selected under AAA the proxy Authentication server as per manual. Because of this we are unable to properly limit bandwith nor are we able to cut of a user when the maximum time or volume has been reached. A Wireshark cature shows that the accounting request is not coming from the controller as we would expect but from a single AP. Does that mean we have to enter each AP IP as a NAS in our RADUIS server? If yes – what about APs which are behind one or two additional routers and there4 behind several NATs. We don’t exclusively operate direct IP networks.