Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

How to account the vpn cisco client to the Radius server

Hi

I'd like to account the vpn cisco clients

My config is:

aaa authentication login default group radius local
aaa authentication login aaa_radius group radius local
aaa authorization exec default group radius if-authenticated
aaa authorization network vpn local
aaa accounting exec default
action-type start-stop
group radius
!
aaa accounting network aaa_radius
action-type start-stop
group radius

radius-server host x.x.x.x auth-port 1812 acct-port 1813 key xxxxx

No accounitng packet is send to the radius server, only autthetication packets

Radius server is freeradius

Thank you

pet

1 ACCEPTED SOLUTION

Accepted Solutions
Community Member

Re: How to account the vpn cisco client to the Radius server

Hi!

You should add following commands to your configuration:

1. in case of old-style crypto map

crypto map MAP-NAME client accounting list aaa_radius

2. in case of isakmp profiles

crypto isakmp profile PROFILE-NAME

accounting aaa_radius

where MAP-NAME and PROFILE-NAME are real names for you crypto map or isakmp profile respectively.

Hope this helps.

Best regards.

2 REPLIES
Community Member

Re: How to account the vpn cisco client to the Radius server

Hi!

You should add following commands to your configuration:

1. in case of old-style crypto map

crypto map MAP-NAME client accounting list aaa_radius

2. in case of isakmp profiles

crypto isakmp profile PROFILE-NAME

accounting aaa_radius

where MAP-NAME and PROFILE-NAME are real names for you crypto map or isakmp profile respectively.

Hope this helps.

Best regards.

Community Member

Re: How to account the vpn cisco client to the Radius server

Thank you , now it's working,

all the best : )

pet

297
Views
0
Helpful
2
Replies
CreatePlease to create content