Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

English  

English

Configuring Per-Subscriber Session Accounting

To configure accounting for a subscriber session, you use an access profile, and specify how the subscriber access management feature collects and uses the accounting statistics. The router uses the RADIUS attributes and Juniper Networks VSAs discussed in RADIUS Accounting Statistics for Subscriber Access Overview to provide the accounting statistics for the subscriber session.

1. At the [edit access profile profile-name] hierarchy level, specify that you want to configure accounting.
   [edit access profile profile-name]user@host# edit accounting
2. (Optional) Configure AAA to issue an Acct-Stop message if the AAA server denies access to the subscriber.
   [edit access profile profile-name accounting]user@host# set accounting-stop-on-access-deny
3. (Optional) Configure AAA to send an Acct-Stop message if the subscriber fails AAA but is granted access by the AAA server.
   [edit access profile profile-name accounting]user@host# set accounting-stop-on-failure
4. (Optional) Configure the router or switch to send an Acct-Update message to the RADIUS accounting server when a CoA occurs.
   [edit access profile profile-name accounting]user@host# set coa-immediate-update
5. (Optional) Configure subscriber management to send the RADIUS accounting report to both the wholesaler and the retailer accounting servers.
   [edit access profile profile-name accounting]user@host# set duplication
6. (Optional) Configure the router to send the RADIUS accounting report to multiple accounting servers listed in access profiles in a nondefault VRF (LS:RI).
   [edit access profile profile-name accounting duplication-vrf]user@host# set vrf-name vrf-nameuser@host# set access-profile-name profile-name
7. (Optional) Configure the router or switch to send an Acct-Update message to the RADIUS accounting server when the router or switch receives a response (for example, an ACK or timeout) to the Acct-Start message.
   [edit access profile profile-name accounting]user@host# set immediate-update
8. (Optional) Configure the order in which multiple accounting methods are used.
   [edit access profile profile-name accounting]user@host# set order [ accounting-order ]
9. (Optional) Configure the types of statistics to gather. You can specify that the router or switch collect both volume and time statistics or only time statistics for subscriber sessions. When you change the type of statistics being collected, current subscribers continue to use the previous collection specification. Subscribers who log in after the change use the new specification.
   [edit access profile profile-name accounting]user@host# set statistics (time | volume-time)
10. (Optional) Override the default behavior and specify that, after a CoA action that changes the RADIUS Class attribute, accounting reports for the subscriber’s service sessions continue to use the original Class attribute that was assigned when the service sessions were created. The new Class attribute value is used in accounting reports for the subscriber session only. By default, the accounting reports for both the subscriber session and the subscriber’s service sessions use the new Class attribute value.
    [edit access profile profile-name accounting]user@host# set coa-no-override service-class-attribute
11. (Optional) Configure the number of minutes between accounting updates. You can configure an interval from 10 through 1440 minutes. All values are rounded up to the next higher multiple of 10. For example, the values 811 through 819 are all accepted by the CLI, but are all rounded up to 820.
    [edit access profile profile-name accounting]user@host# set update-interval minutes
12. (Optional) Configure the authd process to wait for an Acct-On-Ack response message from RADIUS before sending any new authentication and accounting updates to the RADIUS server. This configuration ensures that when a new subscriber session starts, the authentication and accounting information for the new session does not get deleted when RADIUS clears previously existing session state information.
    [edit access profile profile-name accounting]user@host# set wait-for-acct-on-ack
13. (Optional) Configure the authd process to send an Acct-On message when the first RADIUS server is added to the access profile, and to send an Acct-Off message when the last RADIUS server is removed from the access profile. This configuration enables you to monitor whether the access profile has an active RADIUS server.
    [edit access profile profile-name accounting]user@host# set send-acct-status-on-config-change