Mailing List Archive

Unwanted accounting messages from WebTV?
Hi,

I have a couple of AS5300s running 12.1(9) that are gathering
accounting information from users authenticating with an unknown
radius server. I have a suspicion that this unknown radius server
belongs to WebTV as both customers connect through us to use that
service. Below you will find my aaa set up, is there anything I can
modify in there to make the RAS discard accounting info from radius
servers not in the config?


aaa new-model
aaa authentication login default local group radius
aaa authentication login TELNET local
aaa authentication ppp default if-needed local group radius
aaa authorization exec default group radius local
aaa authorization network default group radius
aaa accounting delay-start
aaa accounting network default start-stop group radius
aaa accounting system default wait-start group radius

Thanks,

Eddie
--
Edward Hutchens -=Data Technician=- NTELOS IP routing
http://www.ntelos.net
Re: Unwanted accounting messages from WebTV? [ In reply to ]
I don't think I understand your question. The 5300 doesn't gather
accounting information, it only transmits accounting information to
the RADIUS server. If any accounting information is being directly
transmitted to the 5300, it would be dropped automatically. And how
are users authenticating to a RADIUS server you have not defined?

Dennis

Edward Hutchens [hutchense@ntelos.net] wrote:
> Hi,
>
> I have a couple of AS5300s running 12.1(9) that are gathering
> accounting information from users authenticating with an unknown
> radius server. I have a suspicion that this unknown radius server
> belongs to WebTV as both customers connect through us to use that
> service. Below you will find my aaa set up, is there anything I can
> modify in there to make the RAS discard accounting info from radius
> servers not in the config?
>
>
> aaa new-model
> aaa authentication login default local group radius
> aaa authentication login TELNET local
> aaa authentication ppp default if-needed local group radius
> aaa authorization exec default group radius local
> aaa authorization network default group radius
> aaa accounting delay-start
> aaa accounting network default start-stop group radius
> aaa accounting system default wait-start group radius
>
> Thanks,
>
> Eddie
> --
> Edward Hutchens -=Data Technician=- NTELOS IP routing
> http://www.ntelos.net
> _______________________________________________
> cisco-nas mailing list
> cisco-nas@puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nas

--
-------------------------------------------------------------------------
|| || Dennis Peng
|| || Cisco Systems, Inc. Escalation Engineer
|||| |||| 170 West Tasman Drive Phone: (408) 526-6143
..:||||||:..:||||||:.. San Jose, CA 95134 Fax: (408) 232-2343
Cisco Systems Inc. dpeng@cisco.com
-------------------------------------------------------------------------