Mailing List Archive: VPDN accounting

VPDN accounting

Jun 16, 2005, 5:38 AM

Post #1 of 4 (2467 views)

Hi!

I have a question regarding accounting with vpdn.
I have two routers. One router holds the PRIs (router1), one
router terminate the l2tp session (router2).
Normally authentication and accounting information are
handled by router2. So what I do not understand is that
both routers send accounting records to the radius server.
As I far as I know, only router 2 should send accounting
information, because router2 terminates the l2tp session.

Correct ?

Is there an option to disable this ?
In order to make it a little bit more complex.
I can not disable accounting on router1, because
I have dialins, which are not forwarded to router2, which
are terminated locally. I do not make for every call a
l2tp forwarding.

So any ideas ?

Regards,
Ahmad

--
Ahmad Cheikh-Moussa
NetUSE AG
Dr.-Hell-Straße, 24107 Kiel, Germany
Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499
Service: Service@NetUSE.DE -- http://NetUSE.DE/

RE: VPDN accounting [ In reply to ]

oboehmer at cisco

Jun 16, 2005, 5:56 AM

Post #2 of 4 (2314 views)

Permalink

Ahmad Cheikh Moussa <> wrote on Thursday, June 16, 2005 2:39 PM:

> Hi!
>
> I have a question regarding accounting with vpdn.
> I have two routers. One router holds the PRIs (router1), one
> router terminate the l2tp session (router2).
> Normally authentication and accounting information are
> handled by router2. So what I do not understand is that
> both routers send accounting records to the radius server.
> As I far as I know, only router 2 should send accounting
> information, because router2 terminates the l2tp session.
>
> Correct ?

No. router1 (the LAC) also sends accounting requests, but it includes
the vpdn tunnel information.

> Is there an option to disable this ?
> In order to make it a little bit more complex.
> I can not disable accounting on router1, because
> I have dialins, which are not forwarded to router2, which
> are terminated locally. I do not make for every call a
> l2tp forwarding.
>
> So any ideas ?

Hmm, are you using virtual-profiles on the LAC? If you are (I strongly
assume you do), you might be able to disable accounting globally

aaa accounting network default none

and then define a non-default method list which you reference on the
vtemplate:

aaa accounting network DIAL start-group group radius
!
int virtual-template 1
ppp accounting DIAL

I am not sure if this will work, but it is worth a try.

If it doesn't, can't you ignore the acct-records from the LAC which
contain VPDN/tunnel information?

oli

Re: VPDN accounting [ In reply to ]

acm at netuse

Jun 16, 2005, 6:40 AM

Post #3 of 4 (2323 views)

Permalink

Hi Oliver,

Oliver Boehmer (oboehmer) wrote:
>
> Hmm, are you using virtual-profiles on the LAC? If you are (I strongly
> assume you do), you might be able to disable accounting globally
>
> aaa accounting network default none
>
> and then define a non-default method list which you reference on the
> vtemplate:
>
> aaa accounting network DIAL start-group group radius
> !
> int virtual-template 1
> ppp accounting DIAL
>
> I am not sure if this will work, but it is worth a try.
I do not have a default accounting. I only have one method defined like
you have described above. I will try your proposal and set the
defautl accounting to none. Lets give it a try :-)

Regards,
Ahmad

--
Ahmad Cheikh-Moussa
NetUSE AG
Dr.-Hell-Straße, 24107 Kiel, Germany
Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499
Service: Service@NetUSE.DE -- http://NetUSE.DE/

Re: VPDN accounting [ In reply to ]

acm at netuse

Jun 17, 2005, 2:35 AM

Post #4 of 4 (2327 views)

Permalink

Hi!

Ahmad Cheikh Moussa wrote:
>
> I do not have a default accounting. I only have one method defined like
> you have described above. I will try your proposal and set the
> defautl accounting to none. Lets give it a try :-)
Unfortunately it doesn't worked.

Regards,
Ahmad

--
Ahmad Cheikh-Moussa
NetUSE AG
Dr.-Hell-Straße, 24107 Kiel, Germany
Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499
Service: Service@NetUSE.DE -- http://NetUSE.DE/