How to identify used AP in RADIUS Accounting

We are using 5508 WLC with 3602 APs.
Looks like in RADIUS Authentication Called-Station-Id is the MAC address of the AP,
but in RADIUS Accounting Called-Station-Id is the MAC address of the WLC.
How can we change that behaviour so that Called-Station-Id will always be the MAC address of the AP?
Or is there some other way to identify the actual AP to which the user is connected?
Regards
Timo

Hmm, I did some trial and error and solved the problem.
On the WLC, go to Security > AAA > RADIUS > Authentication and set the Call Station ID Type to "AP MAC Address:SSID". Even tho that seems to be for RADIUS Authentication, it changes the Called-Station-Id also for RADIUS Accounting.
Thx anyway
Timo

Similar Messages

  • How do I use $$ on my Apple account to buy music?

    How do I use $$ on my Apple account to buy music?

    Not sure I understand.
    What elese would you use?
    Please explain.

  • How do I use my I cloud account to save all my data no my device? I purchase $ 100 dollars deal because my phone memory was almost full.

    How do I use my I cloud account to save all my data no my device? I purchase $ 100 dollars deal because my phone memory was almost full.

    If you're asking if there is a way to add memory to your device, there isn't.  iOS devices have a fixed capacity that can't be expanded by using expansion cards or other hardware solutions.
    If you're running out of capacity on your devices, the only solution is to store less on your phone.  You can import your photos and videos to your computer as explained here: http://support.apple.com/kb/HT4083, then delete it from your device.  If you still want some of the photos on your device, put them in a folder on your computer then select the folder on the Photos tab of your iTunes sync settings and sync your device.
    You can also sync only some of your music to your device rather than your entire library, or subscribe to iTunes Match and stream it from iCloud.  You can also not keep as many movies, tv shows and other media on your device.

  • How can i use my aol email account without it using up my storage on my phone

    how can i use my aol email account without using up storgae

    Your mail account shouldn't take up very much of the capacity on your phone and you can't purchase more of it. So I'm thinking you might be talking about iCloud backup storage. If that's the case, you can change some of the info that goes into your icloud backup and reduce its size from settings > icloud > backup and storage > manage storage

  • NPAS: How do I use Cisco ASA RADIUS attribute 146?

    We have a Cisco ASA 5520 running firmware 8.4.5 and are using it for AnyConnect SSL VPN.  We are using Microsoft Network Policy and Access Services (NPAS) as a RADIUS server to handle authentication requests coming from the ASA.
    We have three tunnel groups configured on the ASA, and have three Active Directory security groups that correspond with each one.  At this time, we are using Cisco's vendor-specific RADIUS attribute 85 (tunnel-group-lock) to send back to the ASA a string
    that corresponds to a policy rule in NPAS based on the matched group membership.  This works in the sense that each user can only be a member of one of the three AD security groups used for VPN, and if they pick a tunnel group in the AnyConnect client
    that doesn't correspond to them, the ASA doesn't set up the session for them.
    Well, Cisco added vendor-specific RADIUS attribute 146 (tunnel-group-name) in firmware 8.4.3.  This is an *upstream* attribute, and is one that is sent by the ASA to the RADIUS server.  We would like to use this attribute in our policies in NPAS
    to help with policy matching.  By doing this, we could allow people to be in more than one VPN group and select more than one of the tunnel groups in the AnyConnect client, each of which may provide different network access.
    The question becomes, how can I use this upstream RADIUS attribute in my policy conditions?  I tried putting it in the policy in the Vendor-Specific section under Policies (the same place where we had attribute 85 defined), but this doesn't work. 
    These are just downstream attributes that the NPAS server sends back to the RADIUS client (the ASA).  The ASA seems to ignore attribute 146 if it is sent back in this manner and the result is that the first rule that contains a group the user is a member
    of is matched and authentication is successful.  This is undesirable, because it means the person could potentially select a tunnel group and successfully authenticate even though that isn't what we desire.
    Here is Cisco's documentation that describes these attributes: http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/ref_extserver.html

    Philippe:
    Thank you for the response, but I am already aware how to use Cisco's group-lock or tunnel-group-lock with RADIUS and, in fact, we are already using tunnel-group-lock (attribute 85).
    Using tunnel-group-lock works in the sense that you have three RADIUS policies and three AD security groups (one per tunnel group configured on the ASA).  Each AD group basically is designed to map to a specific tunnel group.  Each RADIUS policy
    contains vendor-specific attribute 85 with the name of the tunnel group.  So when you connect and attempt authentication through NPAS, it goes down the RADIUS policies until the conditions match (in this case the conditions are the source RADIUS client
    - the ASA - and membership in a particular AD security group), it determines if your authentication attempt is successful, and if so it sends the tunnel group name back to the ASA.  If the tunnel group name matches the one associated to the user group
    you selected from the list in the AnyConnect client, a VPN tunnel is established.  Otherwise, the ASA rejects the connection attempt.
    Frankly, tunnel-group-lock works fine so long as it is only necessary for a given individual to need to connect to only a single tunnel group.  If there is a need for an individual to be able to use two out of the three or all three tunnel groups in
    order to gain different access, using tunnel-group-lock or group-lock won't work.  This is because the behavior will be when the RADIUS server processes the policies, the first one in the list that has the AD security group that the user is a member of
    will be matched and the tunnel group name associated with that policy will be sent back to the ASA every time.  If that name doesn't match the one they picked, the tunnel will not be established.  This will happen every time if the tunnel group is
    associated with the second or third AD group they are a member of in terms of order in the NPAS policy list.
    Group-lock (attribute 25) works similarly.  In such a case, the result won't be a failure to connect if the user group chosen is associated with the second or third AD group in the policy list; rather, it will just always send the ASA the first group
    name and the ASA will establish the session but always apply the same policy to the client rather than the desired one.
    We upgraded to firmware 8.4.5 on our ASA 5520 specifically so that we could make use of attribute 146 (tunnel-group-name).   Since this is an upstream attribute sent by the ASA to the RADIUS server (rather than something send by the RADIUS server
    to the ASA as part of the authentication response), we were hoping to be able to use it as an additional condition in the NPAS policies.  In this way, people could be members of more than one of the AD security groups related to VPN at a time.  The
    problem is, I just do not know how to leverage it in the NPAS policy conditions or if it is even possible.

  • HT204053 My husband and I have separate apple IDs, how do we use the same iTunes account

    My husband and I have separate apple IDs , how do we use the same iTunes account

    You don't. Each ID is associated with a separate account. Each of you should maintain a separate user account on your computer so as to maintain separate iTunes Libraries. Do not sync your phone with your husbands account or Apple ID and vice-versa or your data will become inter-mixed or worse - deleted from the phone.
    Try to understand that iDevices are intended for use by one person with one Apple ID, one iTunes Library, and one iTunes account. They are not multi-user devices.

  • How can i use my existing apple account with the app store when i have no credit card or paypal?

    i dont have a credit card or a paypal account how do i use the bloody appstore when i have neither and already have an apple id?

    This user, mountaingoatgirl, explains how to get a None option in your account details in the iTunes app on a Mac or PC. -
    https://discussions.apple.com/message/24907941

  • Exchange User IP - How do I use an Impersonated Exchange Account to Access Another Mailbox

    Hey,
    I am trying to use the Exchange User IP to access another mailbox using an impersonated exchange account. How do I accomplish this?
    I know that the community developed Exchange Mail IP lets me do this but the activities available from that IP is not as powerful as Exchange User IP.
    Please help.
    Thanks,
    Jag

    Hi,
    Have you tried to use powershell New-ManagementRoleAssignment cmdlet.
    To configure impersonation for specific users or groups of users
    https://msdn.microsoft.com/en-us/library/office/dn722376(v=exchg.150).aspx
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • How do I use the same iTunes account on 2 separate PCs?

    Ok. I am new to Itunes in general & know there is probably an easy fix/explanation to my question.
    Is there a way to use my same iTunes account for music downloading on 2 separate computers? I have iTunes downloaded on my home desktop computer but am wanting to use the same account on my computer for school? Is there a way to be able to share the songs on both computers without having to use like an external hard drive or cd or another method to transfer them between the 2. I want to be able to just download a song on one computer & then log in &  it be there on the other one? Thanks!

    Have a read here...
    https://discussions.apple.com/message/18409815?ac_cid=ha
    And See Here...
    http://support.apple.com/kb/HT1495

  • How do you use two seperate iTunes accounts on one computer?

    My wife and I have seperate iTunes accounts and content. We both have an iPod and iPhone. We purchased a new Macbook Pro because our other computers were fried. How do we both use the same computer to access our own iTunes accounts and sync our own iPhone and iPod to it to update our respective toys? I have already transferred all my content to the new laptop and am able to sync my iPhone and iPod. Now I just need to figure out how to get my wife's content on this new laptop so she can sync her iPhone and iPod. Does anyone know how to do this? I assume this is a common request.

    one option would be to create a separate user account for your wife. click here to learn "how to share music between different accounts on a single computer"
    another option would be to authorize iTunes to use/play content purchased with both your iTunes accounts.that's basically very easy. all you have to do is +log out+ of one account (click on the account name in the Store window and select +sign out+ from the pop-up dialog) and into the other, and then they will both be authorized. (be sure to just *log out*, not de-authorize ).
    JGG

  • How do I use two BT Cloud accounts on 1 computer

    Hi All,
    I we have two fibre connections and two cloud accounts, I want to be able to access both of them from the desk top, at thw moment I cant work this out< I can use 1 in a browser and one on the desk top, unfortunately in a hurry to share some pictures for my duughter for her university work I set them up the wrong way round.
    I would like to use 1 account fo rwork things and one for family things keeping them separate.
    Can this be done ?
    Thanks Ian

    Wonky wrote:
    Thanks for answering.
    I have finally got it to log out, when I try to sign in with the other account it says to use previous identity.
    Have to paly a bit more.
    Regards Ian
    In case I have confused you.  The User ID I am referring to is a Windows ID.
    So you have to have two user accounts on your PC.  You set up one user to use Cloud Account A and the other user to access Cloud account B.  Both accounts will probably need to be Administrator accounts.

  • How do i use the adobe revel account to make a calendar?

    I can't log in to my Photoshop Elements 10 program. I was told to sign into Adobe Revel Accounts and I would be able to use my Photoshop program but all I get is my photos. Any help would be greatly appreciated, thanks.

    Consider setting up a mail-in repair for your iPod http://depot.info.apple.com/ipod/
    Or visit your local Apple Retail Store http://www.apple.com/retail/

  • How To Identify Used Footage In Event Browser

    I wonder how to see in the event browser which part of the footage is already used in the current project in the timeline.
    I know favorites, keywords and the 'show timeline window'.
    But isn't there a way to get the used footage automatically marked in the event browser only if it's used in the current project? (should be of course depend on the project selected / timeline displayed).
    Thanks,
    Roland

    Not currently, but you could make a feature request for this.

  • HT2731 How can I use my current iTunes account to make purchases when I can no longer remember the answers to security questions? Help!

    What do I do when I have forgotten answers to iTunes log in security questions?
    Do I need to close my Apple account to get this fixed? If I keep guessing
    at the answers it locks me out for 8-24 hrs): Help!!

    Itunes has nothing to do with photos.
    iCloud: Photo Stream FAQ
    iTunes 10: iTunes in the Cloud
    iCloud: Mail
    iCloud: online
    iCloud: Contacts
    iCloud: devices
    iCloud: iCloud
    iCloud: syncing

  • How do i use 2 ipod touches with 1 itunes account?

    how do i use 2 ipod touches with 1 itunes account?  can they share apps and music etc. I'm not very good at any tech so advise would be much appreciated.

    Yes. You can sync an unlimited number of iDvies that you control to one iTunes library/account. If using the same iTunes library on the same comutr just make sure that yu go to the ap. music and other pane for the iPod in iTunes and select sycn selected items. Not the the whole library.  That way each iPod can have it own contents.

Maybe you are looking for