Cisco IOS XE, Configuration Manual

Page: 242 / 358

Configuring ISG Accounting
How to Configure ISG Accounting
10
Configuring RADIUS for Service Activation and Deactivation
Configure Cisco VSA 250 and VSA 252 in the service profile on RADIUS to dynamically activate and
deactivate services. RADIUS uses VSA 250 in Access-Accept and VSA 252 in CoA messages. These
VSAs have the following syntax:
252 0b "service(parameter1=value,parameter2=value,...)"
250 "service(parameter1=value,parameter1=value,...)"
When deactivating a service, RADIUS sends the same information in VSA 252 that was used for service
activation, except that service deactivation uses 0c in the VSA instead of the 0b parameter used for
service activation. VSA 252 has the following syntax for service deactivation:
252 0xC "service(parameter1=value,parameter2=value,...)"
Enabling Per-Service Accounting in a Service Profile on a AAA Server
Use the attributes in this procedure to enable per-service accounting in a service profile on a AAA server.
Note that for per-service accounting, the traffic class attribute should not be included in the service
profile.
SUMMARY STEPS
1.
Cisco-Avpair="accounting-list=accounting_mlist_name"
2. IETF RADIUS attribute Acct-Interim-Interval (attribute 85)
DETAILED STEPS
Step 1
Cisco-Avpair="accounting-list=accounting_mlist_name"
Add the Accounting attribute to the service profile. This attribute enables accounting and specifies the
AAA method list to which accounting updates will be sent.
Step 2
IETF RADIUS attribute Acct-Interim-Interval (attribute 85)
(Optional) Add the Acct-Interim-Interval (attribute 85) to the service profile. This attribute specifies the
number of seconds between interim updates.
Enabling Per-Service Accounting in a Service Policy Map on the Router
To configure per-service accounting in a service policy map on the router, you must configure an empty
traffic class map (a traffic class map that does not specify an access list) and enable accounting within
the empty traffic class in a service policy map. Perform this task to enable per-service accounting in a
service policy map.
SUMMARY STEPS
1. enable
2.
configure terminal
3. class-map type traffic match-any class-map-name
4.
exit