Hey everyone,
I have a question that I could not find the answer to in any publically available documentation so maybe someone here can help 🙂
We are deploying a guest solution that uses an external captive portal on an open ssid together with mac auth. The flow is the following
auser connects to SSID -> MAB to Cisco ISE via Radius-> MAC not known -> radius reply access_accept which causes redirect to portal -> user logs in and authenticates -> CoA triggers removal of walled garden restrictions -> client gets internet access
This works pretty well the only problem we are facing is that the AP never sends any radius accounting information for these clients. The Radius Test works fine. For 802.1x enabled SSIDs accounting also works fine but for the open SSID + MAB + captive portal captures show no accounting packets at all.
In the running configuration for the AP the accounting server is also set for the security-object but it seems to have no effect.
Maybe somebody can point out if this is simply a limitation of the AP Software or is there maybe some configuration that is missing or would it be worthwhile to open a ticket with extreme about this?
Kindest regards and have a great day!
