Radius Accounting Help

  • 1
  • Question
  • Updated 10 months ago
Can anyone point me in the right direction regarding Windows NPS Accounting? We are using a zone director 3000 and windows 2012 NPS radius. This is all working well as our users are able to login via AD username/pw. The problem I'm running into is, due to NPS, we have no way of controlling number of devices per username. 

I was told that by enabling accounting, I would be able to do this. I, now, have accounting on and logging to a SQL database, however, the data is mostly null with the exception for the username, called station id, and client ip (which is always the zone director's).

I have read the guide "working with radius attributes and accounting" but I feel like I'm missing a lot because it lists all the attributes but I have no idea what to do with them.
Photo of Garrett Collier

Garrett Collier

  • 11 Posts
  • 1 Reply Like

Posted 10 months ago

  • 1
Photo of Monnat Systems

Monnat Systems, AlphaDog

  • 719 Posts
  • 151 Reply Likes
have you thought about using DPSK/Zero It, where you can restrict the no of key/device per username..
you can integrate ur AD with controller and set limit on WLAN for per user..
see the image..



it is less complicated and easy to do..
does it fit into ur scheme of things?
(Edited)
Photo of Garrett Collier

Garrett Collier

  • 11 Posts
  • 1 Reply Like
I guess I don't have those options available. I have Zero-IT then priority. -No options for DPSK.
Photo of Monnat Systems

Monnat Systems, AlphaDog

  • 719 Posts
  • 151 Reply Likes
see the attached pic.. you got to have WPA2/AES under encryption options and that would open up
other options for you to select.

 
Photo of Garrett Collier

Garrett Collier

  • 11 Posts
  • 1 Reply Like
Ah ha! -The reason I wasn't seeing it was due to 802.1xEAP  being checked.

Unless I'm misinterpreting the configuration, I would have to provide a shared key to all 3000+ of my users; I don't believe that would work.