Configuring RADIUS Accounting for Service Manager

The Service Manager application supports RADIUS accounting and interim accounting for subscriber service sessions that are activated by the RADIUS login and RADIUS CoA methods. When RADIUS accounting is enabled, RADIUS generates:

• An Acct-Start message when a service session is activated
• An Acct-Stop message when a service session is deactivated
• Interim-Acct messages

RADIUS accounting messages always include Service Manager time statistics. You must enable Service Manager volume statistics for a service session.

When you terminate a subscriber session, Service Manager first sends RADIUS Acct-Stop messages for any active services associated with the subscriber session, and then sends the Acct-Stop message for the subscriber session.

Note: Service Manager statistics collection is a two-part procedure. You must configure statistics information in the service definition macro file and also enable statistics collection. For detailed information about Service Manager statistics, see Configuring Service Manager Statistics .

To support RADIUS accounting for Service Manager, the RADIUS Acct-Session-ID attribute [44] has been extended to include a colon-separated identifier, which uniquely identifies a service for a subscriber. For example:

The Service-Session attribute (VSA 26-83) identifies the name of the service. This attribute is the value of the Activate-Service or Deactivate-Service attribute (including parameter values) that was used in the RADIUS Access-Accept message to activate or deactivate the service session. For example:

Table 142 lists the RADIUS accounting attributes used by the Service Manager application.

Table 142: Service Manager RADIUS Accounting Attributes

Configuring Service Interim Accounting

Interim accounting determines how often accounting information is updated and sent to an accounting server. In addition to the user-based interim accounting supported on the router, Service Manager supports service-related interim accounting—you can configure an interim accounting interval for services that are created during a user RADIUS-based login and services that are activated by a CoA operation.

The service interim accounting interval is specified by the RADIUS Service-Interim-Acct-Interval attribute (VSA 26-140) that is included in the RADIUS Access-Accept message or CoA-Request message that activates a service session. Because the Service-Interim-Acct-Interval attribute is a tagged attribute, you can configure different interim accounting intervals for a particular user’s various services.

You can use the aaa service accounting interval command to specify the default service interim accounting interval. Service Manager uses this interval value for service accounting when the Service-Interim-Acct-Interval attribute is not configured.

Note: You can also configure interim accounting for users. A user interim accounting interval is configured in the Acct-Interim-Interval RADIUS attribute (RADIUS attribute 85). You use the aaa user accounting interval command to specify the default user interim accounting interval, which is used when RADIUS attribute 85 is not configured. See Configuring Remote Access for information about configuring user interim accounting.

When the Service-Interim-Acct-Interval attribute is configured for a service, Service Manager uses the guidelines shown in Table 143 to determine the correct interim accounting interval to use for the service.

Table 143: Determining the Service Interim Accounting Interval

Table 144 describes a sample Acct-Start message for a service session. In the table, the two fields used by Service Manager are shown in bold characters. An Acct-Start message for a subscriber session without any active services does not include the Service-Session attribute.

Table 144: Sample Acct-Start Message for a Service Session

aaa service accounting interval

• Use to specify the default interval between service accounting updates. Service manager uses the default interval when no value is specified in the Service-Interim-Acct-Interval attribute (Juniper VSA 26-140).
• This command and the aaa user accounting interval command replace the aaa accounting interval command, which is deprecated and might be removed in a future release.
• The default interval is applied on a virtual router basis—this setting is used for services associated with all users who attach to the corresponding virtual router.
• Specify the service accounting interval, in the range 10–1440 minutes. The default setting is 0, which disables the feature.

  Note: To enable interim service accounting, the service accounting interval must be set to a non-zero value and the service statistics type must not be set to none.

• Example

  host1(config)#aaa service accounting interval 60

• Use the no version to reset the accounting interval to 0, which turns off interim service accounting when no value is specified in the Service-Interim-Acct-Interval attribute (Juniper VSA 26-140).
• See aaa service accounting interval

aaa user accounting interval

• Use to specify the default interval between user accounting updates. The router uses the default interval when no value is specified in the RADIUS Acct-Interim-Interval attribute (RADIUS attribute 85).
• This command and the aaa service accounting interval command replace the aaa accounting interval command, which is deprecated and might be removed in a future release.
• The default interval is applied on a virtual router basis—this setting is used for all users who attach to the corresponding virtual router.
• Specify the user accounting interval, in the range 10–1440 minutes. The default setting is 0, which disables the feature.
• Example

  host1(config)#aaa user accounting interval 20

• Use the no version to reset the accounting interval to 0, which turns off interim user accounting when no value is specified in the RADIUS Acct-Interim-Interval attribute.
• See aaa user accounting interval

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.