VPN Client Accounting

[tgreenwald]

I want to trac my VNP users access thru my PIX 515. I've read that with version 7.0 there is more accounting functionality. My question is where is this accounting information stored, RADIUS or syslog? Can I get the same information via syslog messages at level 6??

[mchin345]

RADIUS server (for example, Cisco Access Registrar), at either the customer or service-provider site, can be used to authenticate and authorize remote-access clients. Customer-managed RADIUS servers typically store per-user information (such as user authentication). At the service-provider site, a RADIUS server can store all AAA and configuration information, or the information can be split across two servers.

The RADIUS-based start-stop IPsec accounting feature provides client accounting records that can be used for billing purposes. The accounting records use the VRF ID to provide VPN identification information in the accounting records. Some of the attributes include the client username, IP address, session time, and session byte and packet counts. A session constitutes all IPsec transmissions for a particular user or device.

http://www.cisco.com/en/US/netsol/ns341/ns396/ns172/ns334/networking_solutions_white_paper09186a008017dc5e.shtml