Configuring RADIUS Accounting for Service Manager
The Service Manager application supports RADIUS accounting and interim accounting for subscriber service sessions that are activated by the RADIUS login and RADIUS CoA methods. When RADIUS accounting is enabled, RADIUS generates:
- An Acct-Start message when a service session is activated
- An Acct-Stop message when a service session is deactivated
- Interim-Acct messages
RADIUS accounting messages always include Service Manager time statistics. You must enable Service Manager volume statistics for a service session.
When you terminate a subscriber session, Service Manager first sends RADIUS Acct-Stop messages for any active services associated with the subscriber session, and then sends the Acct-Stop message for the subscriber session.
 |
NOTE: Service Manager statistics collection is a two-part procedure. You must configure statistics information in the service definition macro file and also enable statistics collection. For detailed information about Service Manager statistics, see Configuring Service Manager Statistics. |
To support RADIUS accounting for Service Manager, the RADIUS Acct-Session-ID attribute [44] has been extended to include a colon-separated identifier, which uniquely identifies a service for a subscriber. For example:
erx FastEthernet 12/0:0001048580:002478
The Service-Session attribute (VSA 26-83) identifies the name of the service. This attribute is the value of the Activate-Service or Deactivate-Service attribute (including parameter values) that was used in the RADIUS Access-Accept message to activate or deactivate the service session. For example:
tiered(1280000, 5120000)
Table 139 lists the RADIUS accounting attributes used by the Service Manager application.
Configuring Service Interim Accounting
Interim accounting determines how often accounting information is updated and sent to an accounting server. In addition to the user-based interim accounting supported on the router, Service Manager supports service-related interim accounting—you can configure an interim accounting interval for services that are created during a user RADIUS-based login and services that are activated by a CoA operation.
The service interim accounting interval is specified by the RADIUS Service-Interim-Acct-Interval attribute (VSA 26-140) that is included in the RADIUS Access-Accept message or CoA-Request message that activates a service session. Because the Service-Interim-Acct-Interval attribute is a tagged attribute, you can configure different interim accounting intervals for a particular user's various services.
You can use the aaa service accounting interval command to specify the default service interim accounting interval. Service Manager uses this interval value for service accounting when the Service-Interim-Acct-Interval attribute is not configured.
|
NOTE: You can also configure interim accounting for users. A user interim accounting interval is configured in the Acct-Interim-Interval RADIUS attribute (RADIUS attribute 85). You use the aaa user accounting interval command to specify the default user interim accounting interval, which is used when RADIUS attribute 85 is not configured. See Chapter 1, Configuring Remote Access for information about configuring user interim accounting. |
When the Service-Interim-Acct-Interval attribute is configured for a service, Service Manager uses the guidelines shown in Table 140 to determine the correct interim accounting interval to use for the service.
The tag for the service-interim-acct- interval attribute does not match the tag for any service-activate attribute (VSA 26-65) |
Table 141 describes a sample Acct-Start message for a service session. In the table, the two fields used by Service Manager are highlighted. An Acct-Start message for a subscriber session without any active services does not include the Service-Session attribute.
aaa service accounting interval
- Use to specify the default interval between service accounting updates. Service manager uses the default interval when no value is specified in the Service-Interim-Acct-Interval attribute (Juniper VSA 26-140).
- This command and the aaa user accounting interval command replace the aaa accounting interval command, which is deprecated and might be removed in a future release.
- The default interval is applied on a virtual router basis—this setting is used for services associated with all users who attach to the corresponding virtual router.
- Specify the service accounting interval, in the range 10–1440 minutes. The default setting is 0, which disables the feature.
NOTE: To enable interim service accounting, the service accounting interval must be set to a non-zero value and the service statistics type must not be set to none.
- Example
host1(config)#aaa service accounting interval 60
aaa user accounting interval
- Use to specify the default interval between user accounting updates. The router uses the default interval when no value is specified in the RADIUS Acct-Interim-Interval attribute (RADIUS attribute 85).
- This command and the aaa service accounting interval command replace the aaa accounting interval command, which is deprecated and might be removed in a future release.
- The default interval is applied on a virtual router basis—this setting is used for all users who attach to the corresponding virtual router.
- Specify the user accounting interval, in the range 10–1440 minutes. The default setting is 0, which disables the feature.
- Example
host1(config)#aaa user accounting interval 20