wait-for-acct-on-ack (Access Profile)
Syntax
wait-for-acct-on-ack;
Hierarchy Level
[edit access profile profile-name accounting]
Description
Configure the router’s authd process to wait for an Acct-On-Ack response message from RADIUS before sending new authentication and accounting updates to the RADIUS server. This configuration ensures that when a new subscriber session starts, the authentication and accounting information for the new session does not get deleted when RADIUS clears previously existing session state information.
At subscriber session startup, the Junos OS authd process sends an Acct-On message to the RADIUS server and the new session starts authentication and accounting operations. However, in some service provider environments, upon receipt of the Acct-On message, the RADIUS server cleans up the previous session state and removes accounting statistics. In this scenario, the RADIUS server’s cleanup operation can inadvertently delete the new session’s authentication and accounting information, which might include customer billing information.
To ensure that the new session’s authentication and accounting
information is not deleted, you can include the wait-for-acct-on-ack
statement to configure authd to wait for an Acct-On-Ack response
message from the RADIUS accounting server, so the RADIUS cleanup can
finish before authd sends any new authentication and accounting updates.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.3.