542 Configuring AAA for network usersNN47250-500 (320657-F Version 02.01)Clearing location policy rules and disabling the location policyTo delete a location policy rule, use the following command:clear location policy rule-numberType show location policy to display the numbers of configured location policy rules. To disable the location policy ona WSS, delete all the location policy rules.Configuring accounting for wireless network usersAccounting records come in three types: start, stop, and update. WSS Software generates these records based on theconfigured accounting mode, either start-stop or stop-only:• When start-stop mode is configured, a start record is generated when a user is first connected, an update record isgenerated when a user roams from one AP to another, and a stop record is generated when a user terminates his orher session.• When stop-only mode is configured, a stop record is generated when a user terminates his or her session.Optionally, WSS Software can be configured to send update records at periodic intervals, and also generate anAccounting-On message when the WSS starts, and an Accounting-Off message when the WSS is administratively shutdown. This functionality can be used in conjunction with billing systems that require periodic accounting messages.To set accounting, type the following command:set accounting {admin | console | dot1x | mac | web | last-resort}{ssid ssid-name | wired} {user-wildcard | mac-addr-wildcard}{start-stop | stop-only} method1 [method2] [method3] [method4]For example, to store start-stop accounting records at example.com for 802.1X users of SSID mycorp in the localdatabase, type the following command:WSS# set accounting dot1x ssid mycorp *@example.com start-stop localsuccess: change accepted.The accounting records can contain the following session information:Start Records Update and Stop RecordsSession date and time Session date and timeLocation of authentication (ifany): RADIUS server (1) or localdatabase (2)Location of authentication (if any):RADIUS server (1) or local database (2)ID for related sessions ID for related sessionsUsername UsernameSession duration Session durationTimestamp TimestampVLAN name VLAN name
