Pix: VPN Radius Accounting

Pix: VPN Radius Accounting

NewsGroups | Search | Tools

General Cisco Forum - Cisco Systems - Hardware Software and Security News and Discussions 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Pix: VPN Radius Accounting Christoph Gartmann 09-21-2005
If you were  Registered and logged in, you could reply and use other advanced thread options
Posted by Christoph Gartmann on September 21, 2005, 2:58 pm
Hello,

I posted this five days ago but didn't get any response. So here it goes again:

I would like to have the Pix (Software 7.0.2) send accounting data about
the VPN users to our Radius server. Currently I get a record for each
connection request but not for the end of the VPN session. Somehow I cannot
figure out how to achieve this. So I am interested in some example.

What I have so far is this:

aaa-server RADIUS protocol radius
aaa-server RADIUS host 111.222.333.444
timeout 5
key something
aaa accounting include tcp/0 outside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 RADIUS

But I don't see any accounting records on our radius server (except the one
for the authentication request). In fact, the Pix doesn't send any, I used
a sniffer to check this. So what is missing?

Regards,
Christoph Gartmann

--
Max-Planck-Institut fuer Phone : +49-761-5108-464 Fax: -452
Immunbiologie
Postfach 1169 Internet: gartmann@immunbio dot mpg dot de
D-79011 Freiburg, Germany
http://www.immunbio.mpg.de/home/menue.html


Posted by Martin Bilgrav on September 21, 2005, 8:42 pm
AFAIK, accounting is for TACACS+ service.

HTH
Martin

> Hello,
> I posted this five days ago but didn't get any response. So here it goes
again:
> I would like to have the Pix (Software 7.0.2) send accounting data about
> the VPN users to our Radius server. Currently I get a record for each
> connection request but not for the end of the VPN session. Somehow I
cannot
> figure out how to achieve this. So I am interested in some example.
> What I have so far is this:
> aaa-server RADIUS protocol radius
> aaa-server RADIUS host 111.222.333.444
> timeout 5
> key something
> aaa accounting include tcp/0 outside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0
RADIUS
> But I don't see any accounting records on our radius server (except the
one
> for the authentication request). In fact, the Pix doesn't send any, I used
> a sniffer to check this. So what is missing?
> Regards,
> Christoph Gartmann
> --
> Max-Planck-Institut fuer Phone : +49-761-5108-464 Fax: -452
> Immunbiologie
> Postfach 1169 Internet: gartmann@immunbio dot mpg dot de
> D-79011 Freiburg, Germany
> http://www.immunbio.mpg.de/home/menue.html




Similar ThreadsPosted
Pix VPN Radius Accounting September 16, 2005, 9:19 am
accounting records gigawords (cistron radius) October 17, 2005, 1:04 pm
set up accounting August 20, 2004, 1:56 pm
MS IAS accounting October 15, 2005, 2:48 pm
Ip Accounting December 21, 2005, 6:56 am
acs accounting November 14, 2007, 5:16 am
NPE-G2 CPU Accounting August 6, 2008, 9:47 am
Re: acs accounting problem January 18, 2008, 9:04 am
IP accounting vs. NetFlow December 17, 2009, 1:50 pm
tcl ivr: send application name in accounting November 23, 2004, 5:28 pm

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map