-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Unfortunately it is the design of PEAP (and TTLS) to offer separate
inner and outer identities. There has been a lot of discussion in the
IEEE about how to better support service provider billing in these
instances, but I don't know what came of those discussions. Perhaps
someone else on the list knows.
David
David Morton
Director, Security Solutions
Technology Engineering, C&C
University of Washington
[EMAIL PROTECTED]
http://staff.washington.edu/dmorton/blog
tel 206.221.7814
On Jun 1, 2006, at 3:27 PM, Julian Y. Koh wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
How are people handling accounting records for your 802.1X wireless
networks?
We're in the process of rolling out EAP-PEAP, and everything is
fine in
terms of our RADIUS accounting records from the APs as long as the
users
leave the "Outer Identity" field blank - we end up with their real
usernames
in the accounting records. However, as soon as they fill in
anything for
"Outer Identity" (Mac OS X) or "Roaming Identity" (Intel Wireless
utility),
that text is what ends up in our accounting records. Obviously
this is
suboptimal in terms of relying on our accounting records for true
accounting
of who was where on our network. Is there any way around this?
FWIW, we're using Cisco 1200 APs with a WLSM/WLSE combo, Steel
Belted RADIUS
talking to an Active Directory back end.
Thanks in advance!
-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.6 (Build 6060)
Comment: <http://bt.ittns.northwestern.edu/julian/pgppubkey.html>
iQA/AwUBRH9ptA5UB5zJHgFjEQKANgCcDrXkDHD7v+CDJmulrxHcTtVWSdsAn0sj
GgvPA4nr9fM5cY5s0cNVuNly
=TiAV
-----END PGP SIGNATURE-----
--
Julian Y. Koh
<mailto:[EMAIL PROTECTED]>
Network Engineer <phone:
847-467-5780>
Telecommunications and Network Services Northwestern
University
PGP Public Key:<http://bt.ittns.northwestern.edu/julian/
pgppubkey.html>
**********
Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at http://
www.educause.edu/groups/.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
iD8DBQFEf2tdv56EHSc/epsRArhhAJ9XU4+IWMvAt8YUdGpzXncVY7HLSwCff9cb
baU9+fqnNrGzb8KUk7LK3o0=
=0EIY
-----END PGP SIGNATURE-----
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
