[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring Authentication and Accounting Parameters

You use an access profile to configure authentication and accounting support for the subscriber access management feature. The access profile enables you to specify the type of methods used for authentication and accounting. You can also configure how subscriber access management collects and uses accounting statistics.

Specifying the Authentication and Accounting Methods

To specify the authentication and accounting methods that subscriber access management uses, you include the authentication-order statement and accounting order statements at the [edit access profile profile-name] hierarchy level.



[edit access profile profile-name]

authentication-order [ authentication-methods ]
}

accounting {

order [ accounting-methods ];
}

You can configure multiple authentication and accounting methods—the authentication-order and accounting order statements specify the order in which the subscriber access management feature uses the methods. For example, an authentication entry of radius none specifies that RADIUS authentication is performed first and, if it fails, no authentication (none) is done.



[edit access profile profile-name]
authentication-order radius none;

You can specify the following authentication methods:

none—No authentication
password—Local authentication
radius—RADIUS-based authentication

You can specify the following accounting methods:

radius—RADIUS-based accounting

Configuring How Accounting Statistics Are Collected

Include the accounting statement at the [edit access profile profile-name] hierarchy level to specify how the subscriber access management feature collects and uses accounting statistics.



[edit access profile profile-name]

accounting {

accounting-stop-on-access-deny;

accounting-stop-on-failure;

order [ accounting-method ];

statistics (time);

update-interval minutes;
}

The following list describes the accounting statements:

accounting-stop-on-access-deny—Configures AAA to issue an Acct-Stop message if the AAA server denies access to the subscriber.
accounting-stop-on-failure—Configures the AAA servers to send an Acct-Stop message if the subscriber fails AAA but is granted access by the AAA-server.
order—The order in which multiple accounting methods are used. For example, an entry of radius specifies that the router use RADIUS accounting and, if that fails, no accounting is performed.
statistics—The types of statistics to gather. Currently, only time statistics are gathered.
update-interval—Configures the number of minutes between accounting updates. You can configure an interval from 10 to 1440 minutes. If you specify an interval between 10 and 15, the interval is rounded up to 15.

[Contents] [Prev] [Next] [Index] [Report an Error]