Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 215 / 788

Subscriber AAA Accounting Messages
Accounting messages identify service provisions and use on a per-user or per-tunnel
basis. These messages keep track of when a particular service is initiated and
terminated for a specific user.
JUNOSe software supports the Acct-On message on startup or configuration of the
first accounting server. Acct-Off messages are supported when the last RADIUS
accounting server in a virtual router is removed, when the router is shut down, and
when a virtual router that has configured RADIUS accounting servers is deleted.
Beginning with JUNOSe Release 11.0.0b1, you can configure the router to send the
Partition-Accounting-On and Partition-Accounting-On messages to the RADIUS server
whenever an ICR partition toggles between the backup and master states.
The router supports the following types of accounting messages:
■
Acct-Start
■
Acct-Stop
■
Interim-Acct
■
Acct-On
■
Acct-Off
■
Partition-Accounting-On
■
Partition-Accounting-Off
Supported RADIUS IETF Attributes
Table 39 on page 176 lists the RADIUS IETF attributes supported for Acct-Start,
Acct-Stop, Interim-Acct, Acct-On, and Acct-Off messages.
The following notes are referred to in Table 39 on page 176:
1.
The attribute is used when terminating a PPP connection at the LNS or the
initiating LAC.
2.
For this attribute to be included, an IP address must be assigned to the subscriber.
3.
The attribute is not included in Acct-Stop messages that are sent when a user
session does not get established in one of the following situations.
■
The aaa accounting acct-stop on-access-deny command is enabled and
the authentication server sends an Access-Reject (deny) message.
■
The aaa accounting acct-stop on-aaa-failure command is enabled and the
authentication server issues an Access-Accept message (grant), but the AAA
configuration denies access for the user. The
aaa accounting acct-stop
on-aaa-failure is enabled by default.
■
The aaa accounting acct-stop on-aaa-failure command is enabled and the
user terminates before AAA receives the authentication response from the
authentication server.
Subscriber AAA Accounting Messages
■ 175
Chapter 3: Configuring RADIUS Attributes