Immediate Accounting Updates; Duplicate And Broadcast Accounting - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

For additional information on configuring PPP to use EAP authentication, see JUNOSe
Link Layer Configuration Guide .

Immediate Accounting Updates

You can use the aaa accounting immediate-update command to configure immediate
accounting updates on a per-VR basis. If you enable this feature, the E Series router
sends an Acct-Update message to the accounting server immediately on receipt of
a response (ACK or timeout) to the Acct-Start message.
This feature is disabled by default. Use the enable keyword to enable immediate
updates and the disable keyword to halt them.
The accounting update contains 0 (zero) values for the input/output octets/packets
and 0 (zero) for uptime. If you have enabled duplicate or broadcast accounting, the
accounting update goes to both the primary virtual router context and the duplicate
or broadcast virtual router context.

Duplicate and Broadcast Accounting

Normally, the JUNOSe software sends subscriber-related AAA accounting information
to the virtual router that authenticates the subscriber. If an operational virtual router
is configured that is different from the authentication router, it also receives the
accounting information. You can optionally configure duplicate or broadcast AAA
accounting, which sends the accounting information to additional virtual routers
simultaneously. The accounting information continues to be sent to the authenticating
virtual router, but not to the operational virtual router.
Both the duplicate and broadcast accounting features are supported on a per-virtual
router context, and enable you to specify particular accounting servers that you want
to receive the accounting information.
For example, you might use broadcast accounting to send accounting information
to a group of your private accounting servers. Or you might use duplicate accounting
to send the accounting information to a customer's accounting server.
Framed-MTU (attribute 12) Used if AAA passes an MTU value to the internal
RADIUS client
State (attribute 24) Used in Challenge-Response messages from the external
server and returned to the external server on the subsequent Access-Request
Session-Timeout (attribute 27) Used in Challenge-Response messages from the
external server
EAP-Message (attribute 79) Used to fragment EAP strings into 253-byte
fragments (the RADIUS limit)
Message-Authenticator (attribute 80) Used to authenticate messages that include
an EAP-Message attribute
Duplicate accounting Sends the accounting information to a particular virtual
router
Configuring RADIUS Authentication and Accounting Servers
Chapter 1: Configuring Remote Access
21