radius server and nas

[eppiet]

I have a VPN concentrator as well as Pix firewalls. Radius Accounting works well with the Concentrator, but not with the Pix. The Concentrator is sending unique session ID, Acct-Unique-Session-Id to the radius server. The Pix sends different Acct-Unique-Session-Id at the Start of the Packet and at the Stop of the Packets. The error on the radius log is Logout entry for NAS has wrong ID.

How can I fix this?

Thank you.

Eppie

[jsivulka]

It is my understanding that the 'NAS_PORT' value in authentication and accounting request are unique and a different value for each authentication request allows it to identify those users that are logged in. However, sending one Acct-Unique-Session-Id at the Start and a different one at stop does sound fishy. However, I could not find any bugs related to this problem. Do let me know if you manage to locate something.