CR: Enable RADIUS Accounting Interim Updates on 9800 WLC

Change Summary

Field Value

CR ID

CR-2026-04-02-001

Date

2026-04-02

Priority

P3: Standard

Type

Configuration

Status

Implemented

Requestor

Evan Rosado

Implementor

Evan Rosado

Objective

Enable RADIUS accounting interim updates on WLC wireless policy profiles so ISE DataConnect reports contain packet/byte counters for wireless sessions. Without this, wireless sessions show 0 packets/bytes because the WLC only sends Start and Stop records — no interim updates during the session.

Justification

While testing netapi ise dc query --file active-sessions, wireless sessions on the 9800 WLC returned input_packets: 0, output_packets: 0, total_mb: 0 despite active traffic. Wired sessions on the 3560CX showed correct counters (4.8TB, 69M packets). Root cause: accounting-interim was not enabled on the wireless policy profiles.

Current State vs Target State

Component Current (Before) Target (After)

POLICY-DOMUS_SECURE

No accounting-interim — only Start/Stop records sent to ISE

accounting-interim enabled — interim updates sent periodically

POLICY-DOMUS_IoT

No accounting-interim

accounting-interim enabled

Scope

In Scope

  • Enable accounting-interim on POLICY-DOMUS_SECURE

  • Enable accounting-interim on POLICY-DOMUS_IoT

  • Both on Home-9800-WLC (10.50.1.40)

Out of Scope

  • default-policy-profile (not in active use)

  • CHLA WLC configuration (separate change)

Post-Implementation Review

Change successful: [x] Yes
Unexpected outcomes: Wireless clients reconnected within 3 seconds. No authentication failures.
Lessons learned: 9800 WLC requires shutdown before modifying accounting-interim. Command takes no interval argument — the interval is determined by the RADIUS server or defaults to the WLC’s internal setting.