[cisco-nas] VPDN accounting

Oliver Boehmer (oboehmer) oboehmer at cisco.com
Thu Jun 16 08:56:38 EDT 2005


Ahmad Cheikh Moussa <> wrote on Thursday, June 16, 2005 2:39 PM:

> Hi!
> 
> I have a question regarding accounting with vpdn.
> I have two routers. One router holds the PRIs (router1), one
> router terminate the l2tp session (router2).
> Normally authentication and accounting information are
> handled by router2. So what I do not understand is that
> both routers send accounting records to the radius server.
> As I far as I know, only router 2 should send accounting
> information, because router2 terminates the l2tp session.
> 
> Correct ?

No. router1 (the LAC) also sends accounting requests, but it includes
the vpdn tunnel information.

> Is there an option to disable this ?
> In order to make it a little bit more complex.
> I can not disable accounting on router1, because
> I have dialins, which are not forwarded to router2, which
> are terminated locally. I do not make for every call a
> l2tp forwarding.
> 
> So any ideas ?

Hmm, are you using virtual-profiles on the LAC? If you are (I strongly
assume you do), you might be able to disable accounting globally

aaa accounting network default none

and then define a non-default method list which you reference on the
vtemplate:

aaa accounting network DIAL start-group group radius
!
int virtual-template 1
 ppp accounting DIAL

I am not sure if this will work, but it is worth a try.

If it doesn't, can't you ignore the acct-records from the LAC which
contain VPDN/tunnel information?

	oli



More information about the cisco-nas mailing list