Radius Accounting Records; Account Login And Logout; Configuration Examples For Account Login And Logout - Cisco OL-4387-02 Configuration Manual

RADIUS Accounting Records

RADIUS Accounting Records
SSG sends accounting records with the associated attributes to the RADIUS accounting server when the
following events occur:
•
•

Account Login and Logout

SSG sends a RADIUS accounting-request record to the local RADIUS server when a user logs in to or
out of the SSG. The Acct-Status-Type attribute included in the accounting-request record indicates if the
accounting-request marks the start of the user service or the end of the service.
When a user logs in, SSG sends an accounting-start record to RADIUS. When a user logs out, SSG sends
an accounting-stop record.

Configuration Examples for Account Login and Logout

Example 4-3
Example 4-3
Acct-Status-Type = Start
NAS-IP-Address = ip_address
User-Name = "username"
Acct-Session-Id = "session_id"
Framed-IP-Address = user_ip
Proxy-State = "n"
Example 4-4
Example 4-4
Acct-Status-Type = Stop
NAS-IP-Address = ip_address
User-Name = "username"
Acct-Session-Time = time
Acct-Terminate-Cause = cause
Acct-Session-Id = "session_id"
Framed-IP-Address = user_ip
Proxy-State = "n"
The Acct-Session-Time attribute indicates the length of session, expressed in seconds. The
Acct-Terminate-Cause attribute indicates the reason for account termination, which can be due to the
following events:
•
•
•
•
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
4-2
Account Login and Logout, page 4-2
Service Connection and Termination, page 4-3
shows the information contained in a RADIUS accounting-start record.
RADIUS Accounting-Start Record
shows the information contained in a RADIUS accounting-stop record.
RADIUS Accounting-Stop Record
User-Request
Session-Timeout
Idle-Timeout
Lost-Carrier
Chapter 4 Authentication and Accounting
OL-4387-02