146Chapter 4 Configuring the domain

Configuring RADIUS accounting using the CLI

The Nortel SNAS 4050 can be configured to provide support for logging administrative operations and user session start and stop messages to a RADIUS accounting server.

With RADIUS accounting enabled, the Nortel SNAS 4050 sends an accounting request start packet to the accounting server for each user who successfully authenticates to the Nortel SNAS 4050 domain. The start packet contains the following information:

client user name

Nortel SNAS 4050 device Real IP address (RIP)

session ID

When the user session terminates, the Nortel SNAS 4050 sends an accounting request stop packet to the accounting server. The stop packet contains the following information:

session ID

session time

cause of termination

Configure the RADIUS server in accordance with the recommendations in RFC 2866.

Certain Nortel SNAS 4050-specific attributes are sent to the RADIUS server when you enable accounting (see “Configuring Nortel SNAS 4050-specific attributes using the CLI” on page 149). In conjunction with custom plugins on RADIUS, these attributes can be used for more detailed monitoring of Nortel SNAS 4050 activity.

320818-A

Page 146
Image 146
Nortel Networks 4050 manual Configuring Radius accounting using the CLI