When using a cisco router in conjunction with Ciscosecure ACS, I can't get a aaa accounting record of the ip address assigned to a dial-up client until the client terminates the session and the stop record appears in ACS. Regardless of using RADIUS IETF or TACACS+, the ip address assigned to a client does not appear in the aaa accounting start record, only the stop record. I am using an ip pool on the Cisco NAS and aaa accounting is set to start-stop accounting. How do I get to see the ip address assigned to a 'logged-in' user in ACS? At the moment, I have to log into the NAS and run the command 'show users' to see this info.
Need to know which ios image you have it. There is a old bug CSCdk17573 which talks about that. It reports "Need Framed-address in network PPP/IP start accounting record" So pl. visit to cco bug toolkit and track that bug and have the router/NAS runs the fixed image of that bug to resolve.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...