Interim Accounting Messages; Configuring Radius Accounting - D-Link DFL-1660 User Manual

2.3.3. Interim Accounting Messages

• Timestamp - The number of seconds since 1970-01-01. Used to set a timestamp when this
packet was sent from the NetDefend Firewall.
In addition, two more attributes may be sent:
• Input Gigawords - Indicates how many times the Input Bytes counter has wrapped. This is only
sent if Input Bytes has wrapped, and if the Input Bytes attribute is sent.
• Output Gigawords - Indicates how many times the Output Bytes counter has wrapped. This is
only sent if Output Bytes has wrapped, and if the Output Bytes attribute is sent.
2.3.3. Interim Accounting Messages
In addition to START and STOP messages NetDefendOS can optionally periodically send Interim
Accounting Messages to update the accounting server with the current status of an authenticated
user.
Messages are Snapshots
An interim accounting message can be seen as a snapshot of the network resources that an
authenticated user has used up until a given point. With this feature, the RADIUS server can track
how many bytes and packets an authenticated user has sent and received up until the point when the
last message was sent.
An Interim Accounting Message contains the current values of the statistics for an authenticated
user. It contains more or less the same parameters as found in an accounting request STOP message,
except that the Acct-Terminate-Cause is not included (as the user has not disconnected yet).
Message Frequency
The frequency of interim accounting messages can be specified either on the authentication server or
in NetDefendOS. Switching on the setting in NetDefendOS will override the setting on the
accounting server.

2.3.4. Configuring RADIUS Accounting

In order to activate RADIUS accounting a number of steps must be followed:
• The RADIUS server must be defined in NetDefendOS.
• A user authentication object must have a rule associated with it where a RADIUS server is
specified.
• The external RADIUS server itself must be correctly configured.
Tip: The meaning of the asterisk after a list entry
The asterisk (*) symbol after an entry in the list above indicates that the sending of the
parameter is optional and is configurable.
Important: The RADIUS Vendor ID must be set to 5089
When configuring the external RADIUS server to communicate with NetDefendOS, it
is necessary to enter a value for the Vendor ID (vid). This value should be specified as
5089.
Chapter 2. Management and Maintenance
68