On Fri, Apr 9, 2010 at 12:11 PM, Garber, Neal <[email protected]> wrote: > >From what I've read, supplicants can send an EAPOL-Logoff message to > > If the requirement is to determine when the user disconnects, isn't this best > handled by accounting data? That is, if the authenticator supports sending > Accounting-Request packets to RADIUS, then when the user disconnects, it > should send an Acct-Status-Type=stop request.
Absolutely. While I've not played with 802.1X + accounting personally, it looks like there is decent support in Cisco kit: http://www-europe.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_ieee802_pba.html#wp1280467 -M - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
