802.1x WLAN auth not showing client ip in win 2008 AD security log

Question

Hello.
I have a ongoing project configuring a cisco wlan with 802.1x, where microsoft network policy server is used for radius authentication.
Configuring the SSID on the WLC, and the 802.1x on wlc/radius server works fine, users type in their username and password on a smartphone/ipad etc and get access to the network.
The problem im facing is that I want to log the clients ip-address on the radius-server security log, so I can use cisco active directory agent to find the ip against username mapping in ironport.
The active directory agent checks the domain controllers security log to see what ip-address belongs to which user. In this scenario the user is mapped to the wlc ip, not the smartphone/ipad. The result is a lot of users mapped to the wlc ip-address, and the logs in cisco ADA/ironport is worthless.
Is there any way to configure wlc/802.1x to send the actual client ip-address to the authentication server, and not the WLC?

Answer 1

Please configure radius accounting on the WLC to have the required logs on the NPS server.
On the WLC, make sure we have radius accounting server configured under security > AAA > radius > accounting
After that Go to WLAN, edit the WLAN > security > AAA server and enable radius accounting.
Radius accounting on NPS logs
http://technet.microsoft.com/en-us/library/dd197475%28v=ws.10%29.aspx
Regards,
Jatin