Log the 802.1x session

[Matt Hite]

On Fri, Apr 9, 2010 at 12:11 PM, Garber, Neal
<Neal.Garber at energyeast.com> wrote:
> >From what I've read, supplicants can send an EAPOL-Logoff message to
>
> If the requirement is to determine when the user disconnects, isn't this best handled by accounting data?  That is, if the authenticator supports sending Accounting-Request packets to RADIUS, then when the user disconnects, it should send an Acct-Status-Type=stop request.

Absolutely. While I've not played with 802.1X + accounting personally,
it looks like there is decent support in Cisco kit:

http://www-europe.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_ieee802_pba.html#wp1280467

-M