Accounting of RA VPN traffic in ASA with ACS SE Radius

[garpo]

We have an ASA v8.0.3 configured for Radius with an ACS SE v4.1.4.

We'd like to have accounting of the detailed traffic coming from the RA VPN users, not only the 'start'/'stop' of the tunnel.

We already see the detailed accouting of the traffic coming from other IPsec LAN-to-LAN VPN but not from the RA VPN.

Any idea?

Thanks in adavance.

Garpo

[hadbou]

The security appliance can send accounting information to a RADIUS or TACACS+ server about any TCP or UDP traffic that passes through the security appliance. If that traffic is also authenticated, then the AAA server can maintain accounting information by username.

Refer the following url for more info on configuring accounting:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/fwaaa.html#wp1043741