cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
984
Views
0
Helpful
2
Replies

Auth-Proxy Accounting

alexdv
Level 1
Level 1

May I get from the router with Auth-Proxy Accounting turned on not

only

attribute 42 (Acct-Input-Octets), but also an attrubute 43

(Acct-Output-Octets).

In the

http://www.cisco.com/en/US/products/sw/iosswrel/ps1834/products_feature_guide09186a0080080348.html

I can read that:

The Authentication Proxy Accounting for HTTP feature provides "start"

and "stop" accounting records with enough information to be used for

billing and security auditing purposes.

Without Acct-Output-Octets attribute it's not "enough information to

be used for billing"

2 Replies 2

umedryk
Level 5
Level 5

attribute 42 and attribute 43 cannot be turned on simaltaneously, as far as I know

For example, in the

http://www.cisco.com/en/US/products/hw/iad/ps4349/products_installation_guide_chapter09186a008007e515.html

we can see the following:

Service Stop

When a service is terminated, the Cisco 6510 sends a RADIUS accounting-request to the accounting server. The attributes associated with this record are:

Acct-Status-Type = Stop

User-Name = "service"

NAS-IP-Address = ip_address

Acct-Input-Octets = in_bytes

Acct-Output-Octets = out_bytes

Acct-Session-Time = time

Acct-Terminate-Cause = cause

Acct-Session-Id = "session_id"

Proxy-State = "n"

service

Name of the service profile.

ip_address IP address of the Cisco 6510 interface card 1.

in_bytes Number of inbound bytes.

out_bytes Number of outbound bytes.

time Length of session in seconds.

cause Cause of account termination. These include:

ž Lost-Carrier

ž Lost-Service

ž Host-Request

ž Session-Timeout

session_id Session Number

n Accounting record queuing information (has no effect on account billing).

Or another example

http://www.cisco.com/en/US/products/sw/secursw/ps4911/products_user_guide_chapter09186a008015c5c2.html

NAS-IP-Address = 10.1.0.18

NAS-Port = 30202

NAS-Port-Type = ISDN-Sync

User-Name = "user9"

Calling-Station-Id = "6228213"

Acct-Status-Type = Stop

Acct-Authentic = RADIUS

User-Service-Type = Framed-User

Acct-Session-Id = "0000005B"

Framed-Protocol = PPP

Acct-Link-Count = 2

Framed-IP-Address = 10.1.0.35

Acct-Multi-Session-Id = "39"

Acct-Input-Octets = 580

Acct-Output-Octets = 751

Acct-Input-Packets = 39

Acct-Output-Packets = 48

Acct-Session-Time = 298

Acct-Delay-Time = 0

Both attributes sent to RADIUS server and we can get full information for billing . But when we turn on accounting on auth-proxy, router send only one attribute. How we can make billing if we have only one attribute?