Table of Contents
Advertisement
Chapter 4
Authentication and Accounting
Service Connection and Termination
SSG also sends a RADIUS accounting-request record to the local RADIUS server when a user accesses
or terminates a service. The Acct-Status-Type attribute included in the accounting-request record
indicates whether the accounting-request marks the start of the user service or the end of the service.
When a user accesses a service, SSG sends an accounting-start record to RADIUS. When a user
terminates a service, SSG sends an accounting-stop record.
Configuration Examples for Service Connection and Termination
Example 4-5
Example 4-5
User-Name = "username"
The following list describes some of the attributes included in the record. For more information, refer to
the
•
•
•
OL-4387-02
shows the information contained in an accounting-start record for service access.
RADIUS Accounting-Start Record for Service Access
Acct-Status-Type = Start
Acct-Authentic = RADIUS
Service-Type = Framed
Acct-Session-Id = "00000010"
Framed-Protocol = PPP
Service-Info = "Nisp-name.com"
Service-Info = "Uusername"
Service-Info = "TP"
Acct-Delay-Time = 0
Service Section Gateway, Release 12.2(15)B feature
Acct-Status-Type—Indicates that the accounting-request marks the start of the user service.
Service-Type—Indicates the type of service requested or the type of service to be provided. PPP and
SLIP connections use the service type.
Service-Info—Indicates the following:
–
Nname—Indicates the name of the service profile.
Uname—Indicates the username used to authenticate the user with the remote RADIUS server.
–
This attribute is used for proxy services.
Ttype—Indicates whether the connection is proxy (X), tunnel (T), or passthrough (P).
–
module.
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
RADIUS Accounting Records
4-3
Advertisement
Table of Contents
