Re: cisco accounting attribute
"John A. Hengstler" <[EMAIL PROTECTED]> wrote: > Does anybody know why this accounting attribute would be listed this way > coming from a cisco. > > Connect-Info = > "\320\272\254J721670\000\000\000\000\000\000\000\000\000\000\000" Because that's what the Cisco NAS sends to the RADIUS server? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco accounting
[EMAIL PROTECTED] wrote: > Foundry has the same config and is working as it should. Below is a snapshot > of the file freeradius has generated for a Foundry. No, this attitude is *totally* incorrect. Thinking this way makes it more difficult to understand what's really going on. FreeRADIUS generates *no* accounting information. It only logs the information sent to it by the NAS. So the Foundry NAS generates the accounting packet, and sends it to the server. If the information you want isn't in the 'detail' file, don't blame the server, blame the NAS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco accounting
i have 2 cisco ( 3620 and AS5300) with freeradius 0.5 and accounting work fine. the config of cisco are. aaa accounting send stop-record authentication failure aaa accounting delay-start aaa accounting update periodic 1 aaa accounting network default start-stop group radius radius-server host 192.168.0.4 auth-port 1645 acct-port 1646 key 7 X radius-server retransmit 3 and work fine. whis that this help you. - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 18, 2002 5:05 AM Subject: Cisco accounting > I recently installed freeradius 0.7.1 on freebsd4.6 and authentication is > working just fine. But accounting only works on Foundry and not Cisco. I'm > not sure if anyone has experienced this in the pass. Any help is > appreciated. > > Regards > Mathias, > > > DISCLAIMER > This e-mail is intended only for the use of the addressees named above and > may be confidential. If you are not an addressee you must not read it and > must not use any information contained in nor copy it nor inform any person > other than TeleCity Limited or the addressees of its existence or contents. > If you have received this email and are not a named addressee, please delete > it and notify the TeleCity IT department on 0161 226 7643 or by email at > [EMAIL PROTECTED] > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco accounting
On Tue, Sep 17, 2002 at 10:03:42PM -0700, Frank Cusack wrote: > So, as I said, this is not supported on Cisco w/ RADIUS. Look at the > Cisco docs, it says this explicitly. > > ( cco->ios->12.2->security->aaa->accounting->command accounting ... I think) http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_c/fsaaa/scfacct.htm#xtocid10 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco accounting
On Wed, Sep 18, 2002 at 05:35:52AM +0100, [EMAIL PROTECTED] wrote: > If someone logs in to a router and issue a command, this is recorded in a > file. I currently use IOS 12.2 The following commands are configured on the > Cisco router. So, as I said, this is not supported on Cisco w/ RADIUS. Look at the Cisco docs, it says this explicitly. ( cco->ios->12.2->security->aaa->accounting->command accounting ... I think) > Foundry has the same config and is working as it should. Below is a snapshot > of the file freeradius has generated for a Foundry. So Foundry got it right. There's no REASON it's not easily supportable; Cisco just chose not to implement it I guess. You should open a bug. /fc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Cisco accounting
If someone logs in to a router and issue a command, this is recorded in a file. I currently use IOS 12.2 The following commands are configured on the Cisco router. this mailto:[EMAIL PROTECTED]] Sent: 18 September 2002 05:09 To: [EMAIL PROTECTED] Subject: Re: Cisco accounting On Wed, Sep 18, 2002 at 04:05:58AM +0100, [EMAIL PROTECTED] wrote: > I recently installed freeradius 0.7.1 on freebsd4.6 and authentication is > working just fine. But accounting only works on Foundry and not Cisco. I'm > not sure if anyone has experienced this in the pass. Any help is > appreciated. Exactly what kind of accounting are you talking about here? Cisco IOS (up to 12.1 at least) does not support command accounting via RADIUS. Other accounting should be supported but I have no further info on it. /fc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html DISCLAIMER This e-mail is intended only for the use of the addressees named above and may be confidential. If you are not an addressee you must not read it and must not use any information contained in nor copy it nor inform any person other than TeleCity Limited or the addressees of its existence or contents. If you have received this email and are not a named addressee, please delete it and notify the TeleCity IT department on 0161 226 7643 or by email at [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco accounting
On Wed, Sep 18, 2002 at 04:05:58AM +0100, [EMAIL PROTECTED] wrote: > I recently installed freeradius 0.7.1 on freebsd4.6 and authentication is > working just fine. But accounting only works on Foundry and not Cisco. I'm > not sure if anyone has experienced this in the pass. Any help is > appreciated. Exactly what kind of accounting are you talking about here? Cisco IOS (up to 12.1 at least) does not support command accounting via RADIUS. Other accounting should be supported but I have no further info on it. /fc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
