Radius Accouting Issue in VSX

[vishnukanth]

Hi Everyone,

We have enabled RADIUS Accounting on one of our Virtual Systems (VS) and configured all the required RADIUS Accounting parameters in SmartConsole.

When a user connects to the SSID, the user is able to authenticate successfully and Internet access is working as expected. However, the username is not visible in the SmartConsole logs, and the IP address is not being mapped to the username through the Identity Awareness blade using RADIUS Accounting.

Regarding our Access Control policy:

• We have both IP-based rules and Access Role-based rules in the same policy package.
• As per the recommended best practices, we moved all IP-based rules and management rules to the top of the policy.
• The Access Role-based rules are placed below the IP-based rules.

Despite these changes, RADIUS Accounting is still not working as expected, and the username mapping is not occurring.

Could anyone please guide us on the correct configuration or best practice for implementing RADIUS Accounting with Identity Awareness? If there are any additional settings or common troubleshooting steps that we should verify, your suggestions would be greatly appreciated.

Please find the attached images for reference

Thank you in advance for your assistance.

[Chris_Atkinson]

sk106133 scenario 5 could be a factor amongst other potential causes.

Where is the Radius server sending the accounting data?

[PhoneBoy]

For Access Roles to be calculated, we need group information.
For a RADIUS configuration, this occurs through LDAP, and you've mentioned no LDAP configuration above.