Authentication, Authorization and Accounting (AAA) for ERS and ES
Technical Configuration Guide
30
November 2010
avaya.com
re-auth-timer : 180
The accounting will be done based on per SNMP Session which will record the duration of that particular
session and the number of packets/octets received. Accounting is done for every session. The user for
any SNMP session has to be added as ―snmp_user‖. At the beginning of any session, a start accounting
message is sent to the RADIUS server. A stop accounting message is sent a period of time (based on the
value configured for abort-session-timer) after the session is terminated. If the abort-session-timer is
configured as 30 seconds (default value is 180 seconds) then a stop message is sent 30 seconds after
the session is closed. The stop accounting message contains the duration for which the session was
maintained and the number of packets/octets received for this session. If the session continues for a long
period, then periodically (after every hour; non-configurable) an interim accounting message will be sent,
containing the number of packets/octets received for that period for that session and the duration of the
session.
Please note that Authentication is still done by the switch and not the RADIUS server. With the
implementation of SNMP-v3, more powerful View based Access Control Model (VACM) is used
to specifically permit or deny access to various OIDs. Since the security provided by the
SNMP-v3 USM and VACM is quite powerful, radius authentication is not implemented for
SNMP. Please note that SNMPv1 and SNMPv2 also use VACM for granting access to MIBS
(OIDs) on ERS8600.
Launch Device Manager application, select Device -> Open. Enter switch IP address in Device Name
field, and then select Open.
In order to simulate a session, open different windows, select VLAN, Vlan or IP, ip, click on a port then
select Edit. Finally select Device -> Exit to close Device Manager Application.
