Radius accounting for SSL VPN - WebVPN Usage

[anmo]

Hi All,

Has anyone deployed accounting method to check on the SSL VPN sessions ?

I tried this code,

https://www.cisco.com/c/en/us/td/docs/ios/12_4t/12_4t11/htwebvpn.html#wp1054928

SYD(config)#webvpn aaa ?
% Unrecognized command

Router IOS is : Version 15.4(3)M8,

-Thanks. 

[Rob Ingram]

Hi, What hardware are you attempting to run this on? I know that WebVPN/SSL-VPN is not supported on all routers. Also what license do you have on the router?

[anmo]

Thank you RJI for getting back. I'm using Cisco 3925 with security license, SSL VPN is working fine well.

However, aaa accounting doesn't support with webvpn.  I need to get the vpn session usage by enabling aaa accounting via radius server. SSL VPN authentication works via radius. 

[Rob Ingram]

Looks like you need to be under the webvpn context to add the webvpn aaa commands.

Output from my 1921 running Version 15.6(3)M2:

LAB-RTR(config)#webvpn context WEBVPN
LAB-RTR(config-webvpn-context)#aaa ?
  accounting      accounting parameters
  authentication  authetication parameters
  authorization   authorization parameters

HTH

[anmo · Accepted solution]

HI RJI,

Thank you for that, i tried it.

Do you have any idea to get the VPN session usage from the radius accounting ?

- Thank you.