Do you support RADIUS accounting?
Yes, on port 1813. Add the same addresses you use for authentication as accounting servers, with the same shared secret. It's worth turning on.
It fills the Sessions page. The authentication log shows who was let on. Accounting shows who is still connected: the device, its IP address, the switch port, how long it's been connected and how much data it's used. It's the only way to answer "which device had 10.6.101.42 at three o'clock".
You also need it to disconnect a device. The Disconnect button is on a live session, so without accounting there's nothing to press. See "How do I disconnect a device that is already connected?".
RADSec accounting also goes to 1813, not 2083, because that's where UniFi sends it. Accounting sent to 2083 is accepted too.
Related questions
- RADIUS or RADSec: which should I use?
- Is standard RADIUS safe enough to use?
- What address and port do I point my equipment at?
- How do I set up Cisco Meraki with Passbeam?
- A printer keeps failing with a TLS error. Why would I let a site accept older TLS?
- A camera or printer is still refused after I allowed older TLS. What now?
- Can Passbeam authenticate our VPN as well as the network?
- Our VPN concentrator serves several clients from one address. Will Passbeam tell them apart?
- Can I let only some people use the VPN, but everyone use the office network?
- Can I require a second factor on the VPN?
- Do you support PEAP, MSCHAPv2 or EAP-TTLS?
- How do I disconnect a device that is already connected?
- What firewall rules does the connector need?
Still stuck? Ask us, or read the rest of the knowledge base.