So it turned out that to get the switch to send Accounting stop messages, one has to configure the interface in dot1x MAC-based mode and configure the switchport to general mode (to allow dynamic VLAN assignment). ...interface gi1/0/n    dot1x port-control mac-based    switchport mode generalexit... Thanks Daniel for your help. I hope this helps someone! Jacob  
Hi, I think I may have found a bug: one of my N2000 switches has accounting enabled for dot1x authentication, and configured to send start & stop messages, but I only ever see start messages in the RADIUS server logs, never any stop messages Can anyone confirm/replicate this? Here are the relevant lines from the switch configuration: aaa accounting dot1x default start-stop radiusdot1x system-auth-controlaaa authentication dot1x default radiusaaa authorization network default radiusradius server attribute 8 include-in-access-reqradius server auth 192.168.0.1primaryname "RADIUS server"key 7 "omitted"exitradius server acct 192.168.0.1name "RADIUS server"key 7 "omitted"exit Thanks in advance, Jacob
Possible RADIUS accounting bug