Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Munge check_eapol script to send RADIUS accounting messages #33

Open
drn05r opened this issue Jun 13, 2019 · 1 comment
Open

Munge check_eapol script to send RADIUS accounting messages #33

drn05r opened this issue Jun 13, 2019 · 1 comment
Assignees
Labels
migrated from todo Migrated from the todo list at https://www.sown.org.uk/todo/ monitoring Monitoring of the SOWN network using Icinga or other tools systems administration Administation of servers and the systems running on them

Comments

@drn05r
Copy link
Member

drn05r commented Jun 13, 2019

Munge check_eapol script to allow it to send RADIUS accounting start and stop messages to keep iSolutions happy.

Cisco ISE allocates licenses for the number of active sessions established. If no RADIUS accounting is sent the session says active and uses a license for 5 days before it assumed to have ended. Eveyr time we run eapol_test for an @soton.ac.uk address we use a license for 5 days. This will mean we use 1000s if not 10,000s of licenses at any one time.

@drn05r drn05r added migrated from todo Migrated from the todo list at https://www.sown.org.uk/todo/ monitoring Monitoring of the SOWN network using Icinga or other tools systems administration Administation of servers and the systems running on them labels Jun 13, 2019
@drn05r
Copy link
Member Author

drn05r commented Jun 13, 2019

radclient can send RADIUS accounting start and stop messages but does not do two phase encryption. (e.g. can do MSCHAPv2 but not outer encryption such PEAP or TTLS).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
migrated from todo Migrated from the todo list at https://www.sown.org.uk/todo/ monitoring Monitoring of the SOWN network using Icinga or other tools systems administration Administation of servers and the systems running on them
Projects
None yet
Development

No branches or pull requests

2 participants