Re: Accounting question

On 4/9/07, Alan DeKok <aland@deployingradius.com> wrote:
> Ian Truelsen wrote:
> > When I connect to my AP, authenticated by freeradius using EAP-TLS, I
> > get an entry into radpostauth, entries
> > in /var/log/radius/radacct/192.168.3.115/detail-auth and detail-reply
> > files, but I am not getting any entries into radacct. I don't know
> > whether this is because the NAS is not sending any accounting packets or
> > my setup is not correct. However, since I am getting the entries into
> > radpostauth, I think I must have the setup correct.
>
> As the README and FAQ say: run the server in debugging mode. It will
> tell you if it's receiving accounting packets.

I did just that when I set up a Foundry test switch, and I noticed
that I was getting (and entering into the database) authorization, but
not accounting packets. I bit of digging in the docs later, and I was
able to cobble up the incantation to tell the switch to send
accounting information, too. I'd previously set up the correct ports,
but it took additional commands to get the switch to _send_ the
packets over the port.

Check the docs for your NAS, specifically look for something like "aaa
accounting enable..." or the like. You didn't say what vendor made
your NAS, so guessing commands is going to be a bit difficult.

-ethan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html