Table of Contents
Advertisement
Appendix H. RADIUS Accounting
This section is trying to organize the basic configuration with RADIUS server to work with VSA. The aim is
trying to control the maximum usage (upload; download or upload + download traffic) of clients in each
session.
This VSA will send from RADIUS server to gateway along with an Access-Accept packet. In other words,
when the external RADIUS server accepts the request, it will not only reply with an Access-Accept and it will
also carry a maximum value in bytes that each user is allowed to transfer. This value may be the maximum
upload traffic; download traffic or the summation of each user's download plus upload traffic in bytes.
Gateway will check this value every minute, if the user is reached this value, gateway will stop the session of
this user and send a "Stop" to RADIUS server.
1. Description
This Attribute is available to allow vendors to support their own extended Attributes not suitable for general
usage. It MUST not affect the operation of the RADIUS protocol.
The standard Attribute Type of VSA is "26". Also we need to know the "Vendor ID", in this example; the
Vendor ID of LevelOne is "31932". There must have other attribute to define the amount of traffic with
"Attribute Number" and "Attribute Value":
Attribute Name
LevelOne-Byte-Amount
LevelOne-MaxByteIn
LevelOne-MaxByteOut
LevelOne-Byte-Amount-4GB
LevelOne-MaxByteIn-4GB
LevelOne-MaxByteOut-4GB
If the amount of traffic is larger than 4 GB, then the attribute of "XXXX-4GB" is for the carry. For example, if
the amount is 5 GB, you must set "LevelOne-Byte-Amount = 1048576" and "LevelOne-Byte-Amount-4GB =
1".
On the other hand, if administrator fills in all attributes, it means that if any condition is reached, the user will
be kicked out from system. For example, if administrator set "LevelOne-Byte-Amount = 1048576"; "LevelOne-
MaxByteIn = 1048576" and "LevelOne- MaxByteOut = 1048576". It means that whatever the downlink or
uplink or total traffic exceeded the limit, the user will be kicked out from system.
Attribute Number
10
To be defined by administrator for
different user group
11
To be defined by administrator for
different user group
12
To be defined by administrator for
different user group
20
To be defined by administrator for
different user group
21
To be defined by administrator for
different user group
22
To be defined by administrator for
different user group
286
Attribute Value
Advertisement
Table of Contents
