[cisco-nas] VPDN accounting
Oliver Boehmer (oboehmer)
oboehmer at cisco.com
Thu Jun 16 08:56:38 EDT 2005
Ahmad Cheikh Moussa <> wrote on Thursday, June 16, 2005 2:39 PM:
> Hi!
>
> I have a question regarding accounting with vpdn.
> I have two routers. One router holds the PRIs (router1), one
> router terminate the l2tp session (router2).
> Normally authentication and accounting information are
> handled by router2. So what I do not understand is that
> both routers send accounting records to the radius server.
> As I far as I know, only router 2 should send accounting
> information, because router2 terminates the l2tp session.
>
> Correct ?
No. router1 (the LAC) also sends accounting requests, but it includes
the vpdn tunnel information.
> Is there an option to disable this ?
> In order to make it a little bit more complex.
> I can not disable accounting on router1, because
> I have dialins, which are not forwarded to router2, which
> are terminated locally. I do not make for every call a
> l2tp forwarding.
>
> So any ideas ?
Hmm, are you using virtual-profiles on the LAC? If you are (I strongly
assume you do), you might be able to disable accounting globally
aaa accounting network default none
and then define a non-default method list which you reference on the
vtemplate:
aaa accounting network DIAL start-group group radius
!
int virtual-template 1
ppp accounting DIAL
I am not sure if this will work, but it is worth a try.
If it doesn't, can't you ignore the acct-records from the LAC which
contain VPDN/tunnel information?
oli
More information about the cisco-nas
mailing list