Solved: How to account the vpn cisco client to the Radius server

peter_jevos · ‎07-21-2010

Hi

I'd like to account the vpn cisco clients

My config is:

aaa authentication login default group radius local
aaa authentication login aaa_radius group radius local
aaa authorization exec default group radius if-authenticated
aaa authorization network vpn local
aaa accounting exec default
action-type start-stop
group radius
!
aaa accounting network aaa_radius
action-type start-stop
group radius

radius-server host x.x.x.x auth-port 1812 acct-port 1813 key xxxxx

No accounitng packet is send to the radius server, only autthetication packets

Radius server is freeradius

Thank you

pet

Maxim Zimovets · ‎07-22-2010

Hi!

You should add following commands to your configuration:

1. in case of old-style crypto map

crypto map MAP-NAME client accounting list aaa_radius

2. in case of isakmp profiles

crypto isakmp profile PROFILE-NAME

accounting aaa_radius

where MAP-NAME and PROFILE-NAME are real names for you crypto map or isakmp profile respectively.

Hope this helps.

Best regards.

View solution in original post

Maxim Zimovets · ‎07-22-2010

Hi!