Juniper Networks VSAs Supported for Subscriber AAA Accounting Messages

Table 6 lists the Juniper Networks (Vendor ID 4874) VSAs supported for Acct-Start, Acct-Stop, Interim-Acct, Acct-On, Acct-Off, Partition-Accounting-On, and Partition-Accounting-Off messages.

The following notes are referred to in Table 6:

  1. The attribute is not included in Acct-Stop messages that are sent when a user session does not get established in one of the following situations.
    • The aaa accounting acct-stop on-access-deny command is enabled and the authentication server sends an Access-Reject (deny) message.
    • The aaa accounting acct-stop on-aaa-failure command is enabled and the authentication server issues an Access-Accept message (grant), but the AAA configuration denies access for the user. The aaa accounting acct-stop on-aaa-failure is enabled by default.
    • The aaa accounting acct-stop on-aaa-failure command is enabled and the user terminates before AAA receives the authentication response from the authentication server.
  2. ERX routers send IPv6 accounting attributes in the Acct-Stop and Interim-Acct messages (stop, interim) when they are configured to return these attributes and when the subscriber is either an IPv6 subscriber or a combined IPv4/IPv6 subscriber in a dual stack. For an IPv4 subscriber, IPv6 accounting attributes are not included in the accounting messages even if the IPv6 accounting is enabled.

    In JunosE Release 10.1.x and lower-numbered releases, the combined accounting statistics were retrieved at the layer 2. Therefore, error or discarded packets in the layer 2 itself were excluded in these statistics. Because the layer 2 cannot detect the error or discarded packets in the layer 3, the combined statistics also include the error or discarded packets of the layer 3. In this release, with the support for RADIUS VSAs for IPv6 accounting, the IPv6 statistics are retrieved at the layer 3. To be consistent with the combined statistics, the error or discarded packets of the layer 3 are also included in these IPv6 statistics.

  3. The ICR partition accounting messages comprise the following:
    • Partition-Accounting-On—Sent to the RADIUS server whenever an ICR partition changes to the master state from the backup state. The Partition-Accounting-On message has the same Acct-Status-Type attribute value as the Accounting-On message, but also contains the ICR-Partition-Id VSA, which specifies the ICR partition to which this message corresponds.
    • Partition-Accounting-Off—Sent to the RADIUS server when the partition changes from the master state to the backup state. However, in the event of a complete chassis failure, the Partition-Accounting-Off message is not sent. Partition-Accounting-Off message has the same Acct-Status-Type attribute value as the Accounting-Off message and contains the ICR-Partition-Id VSA to denote the ICR partition to which the message is associated.

    For more information about how to configure and use ICR partitions, see the Managing Interchassis Redundancy chapter in the JunosE Services Availability Configuration Guide.

Table 6: AAA Accounting Message Juniper Network (Vendor ID 4874) VSAs Supported

Attribute Number

Attribute Name

Acct-Start

Acct-Stop

Interim-Acct

Acct-On

Acct-Off

Partition- Accounting-On

Partition- Accounting-Off

[26-10]

Ingress-Policy-Name

[26-11]

Egress-Policy-Name

[26-24]

Pppoe-Description
(See Note 1.)

[26-26]

QoS-Profile-Name

[26-42]

Acct-Input-Gigapackets

[26-43]

Acct-Output-Gigapackets

[26-44]

Tunnel-Interface-Id

[26-45]

Ipv6-Virtual-Router

[26-46]

Ipv6-Local-Interface

[26-47]

Ipv6-Primary-DNS

[26-48]

Ipv6-Secondary-DNS

[26-51]

Disconnect-Cause

[26-53]

Service-Description

[26-55]

DHCP-Options
(See Note 1.)

[26-56]

DHCP-MAC-Address
(See Note 1.)

[26-57]

DHCP-GI-Address
(See Note 1.)

[26-62]

MLPPP-Bundle-Name

[26-63]

Interface-Description

[26-92]

L2C-Up-Stream-Data

[26-93]

L2C-Down-Stream-Data

[26-106]

Ipv6-Ingress-Policy-Name

[26-107]

Ipv6-Egress-Policy-Name

[26-110]

Acc-Loop-Cir-Id

[26-111]

Acc-Aggr-Cir-Id-Bin

[26-112]

Acc-Aggr-Cir-Id-Asc

[26-113]

Act-Data-Rate-Up

[26-114]

Act-Data-Rate-Dn

[26-115]

Min-Data-Rate-Up

[26-116]

Min-Data-Rate-Dn

[26-117]

Att-Data-Rate-Up

[26-118]

Att-Data-Rate-Dn

[26-119]

Max-Data-Rate-Up

[26-120]

Max-Data-Rate-Dn

[26-121]

Min-LP-Data-Rate-Up

[26-122]

Min-LP-Data-Rate-Dn

[26-123]

Max-Interlv-Delay-Up

[26-124]

Act-Interlv-Delay-Up

[26-125]

Max-Interlv-Delay-Dn

[26-126]

Act-Interlv-Delay-Dn

[26-127]

DSL-Line-State

[26-128]

DSL-Type

[26-129]

Ipv6-NdRa-Prefix

[26-150]

ICR-Partition-Id
(See Note 3.)

[26-151]

Ipv6-Acct-Input-Octets
(See Note 2.)

[26-152]

Ipv6-Acct-Output-Octets
(See Note 2.)

[26-153]

Ipv6-Acct-Input-Packets
(See Note 2.)

[26-154]

Ipv6-Acct-Output-Packets
(See Note 2.)

[26-155]

Ipv6-Acct-Input-Gigawords
(See Note 2.)

[26-156]

Ipv6-Acct-Output-Gigawords
(See Note 2.)

[26-159]

DHCP-Option 82
(See Note 1.)

[26-164]

Ipv4-release-control

[26-165]

PCP-Server-Name

Related Documentation