Network Management and Monitoring
-
Logging Infrastructure Support for RADIUS Accounting (cSRX, SRX300, SRX320, SRX340, SRX345, SRX380, SRX1500, SRX1600, SRX2300, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX3.0)—Starting in Junos OS Release 24.2R1, we’ve introduced a logging infrastructure for RADIUS accounting. The RADIUS accounting enables you to send the logs directly from dataplane to the RADIUS accounting server. When you enable RADIUS logging, logs are sent for NAT PBA ALLOC, INTERIM, and RELEASE events to the configured RADIUS server. This feature enhances the existing stream-based logging and includes:
-
Incorporation of vendor-specific attributes (VSAs) in RADIUS accounting messages
-
Support multiple RADIUS accounting servers under different streams
-
Manage retries and retransmissions of RADIUS accounting messages in case of failure
-
Flexible and capable of supporting a backup RADIUS accounting server.
To support the feature, we’ve introduced the following configuration statements:
radius
retry-count
radius-accounting
subscriber-extension
Use the following commands to view and to clear the RADIUS server counters for RADIUS streams:
show security log radius stream
clear security log radius stream
.
[See radius (Security Log), retry-count (Security Log), radius-accounting, and subscriber-extension.]
-