[j-nsp] ERX310 radius configuration

[Goldschmidt, Bernd]

Hi,

it seems that it works as you've configured it.
aaa accounting acct-stop on-aaa-failure enable
-> send stop record when AAA fails

If you do not want a stop record when AAA fails, then you need a:
aaa accounting acct-stop on-aaa-failure disable

I think the documentation is a little bit confusing/faulty:
http://www.juniper.net/techpubs/software/erx/junose701/swconfig-broadban
d/html/b-ras-config21.html#320420

- Bernd.


> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net 
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of ???
> Sent: Monday, December 19, 2005 1:25 PM
> To: juniper-nsp
> Subject: [j-nsp] ERX310 radius configuration
> 
> Hello everybody!
> 
> Is there a way to make the commond "aaa accounting acct-stop 
> on-aaa-failure enable" to function correctly?
> We use ERX310, and "aaa accounting acct-stop on-aaa-failure 
> enable" is inside the configuration file(both in default 
> virtual router and other vrs) but just do not act as we want. 
> It still send account-stop packet when a user authenticate failed.
> 
> I googled the web but find no solution. Can you tell me how 
> to solve this?
> 
> The following is the version description of erx
> ERX-41-70-c7#show version 
> Juniper Edge Routing Switch ERX-310
> Copyright (c) 1999-2005 Juniper Networks, Inc.  All rights reserved.
> System Release: erx310_7-0-0.rel
>         Version: 7.0.0 release-0.0 [BuildId 3768]   (July 12, 
> 2005  16:39)
> System running for: 3 days, 1 hour, 11 minutes, 10 seconds
>         (since FRI DEC 16 2005 11:12:35 UTC)
> 
> slot state     type     admin  spare running release   slot uptime 
> ---- ------ ---------- ------- ----- ---------------- -------------
> 0    online SRP310-10G enabled  ---  erx310_7-0-0.rel 3d01h:10m:48s
> 1    online GE-HDE-2   enabled  ---  erx310_7-0-0.rel 3d01h:10m:26s
> 2     ---      ---       ---    ---        ---             ---     
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/juniper-nsp
>