Enable RADIUS Accounting

Before you begin

  • You must set up a RADIUS server and add it to the configuration file of the device before you can enable RADIUS accounting on the device. Otherwise, the system displays an error message.

About this task

Enable RADIUS accounting to log all of the activity of each remote user in a session on the centralized RADIUS accounting server.

Procedure

  1. In the navigation pane, expand Configuration > Security > Control Path.
  2. Select RADIUS.
  3. Select the RADIUS Global tab.
  4. Select AcctEnable.
  5. In AcctAttrValue, type an access policy value (by default, this value is 193).
  6. Select Apply.

RADIUS Global Field Descriptions

Use the data in the following table to use the RADIUS Global tab.

Name

Description

Enable

Enables the RADIUS authentication feature globally.

MaxNumberServer

Specifies the maximum number of servers to be used inclusive.

AccessPriorityAttrValue

Specific to RADIUS authentication. Specifies the vendor-specific attribute value of the access-priority attribute to match the type value set in the dictionary file on the RADIUS server. The default is 192.

AcctEnable

Enables RADIUS accounting.

AcctAttriValue

Specific to RADIUS accounting. Specifies the vendor-specific attribute value of the CLI-command attribute to match the type value set in the dictionary file on the RADIUS server. This value must be different from the access-priority attribute value configured for authentication. The default value is 193.

AcctIncludeCli

Specifies whether you want CLI commands included in RADIUS accounting requests.

ClearStat

Clears RADIUS statistics from the device.

McastAttributeValue

Specifies the value of the Mcast attribute. The default value is 90.

AuthInfoAttrValue

Specifies the value of the authentication information attribute. The default value is 91.

CommandAccessAttrValue

Specifies the value of the command access attribute. The default value is 194.

CliCommandAttrValue

Specifies the value of the CLI command attribute. The default value is 195.

AuthInvalidServerAddress

Displays the number of access responses from unknown or invalid RADIUS servers.

CliCmdCount

Gives the value for the CLI command count. The default is 40.

CliProfEnable

Enables RADIUS CLI profiling.

SupportedVendorIds

Shows the vendor IDs that the software supports for RADIUS.

RadiusReachability

Specifies the mode for RADIUS reachability. Status-server mode provides a standard-compliant method for RADIUS reachability. Use-radius mode requires the configuration of dummy packets that are sent to RADIUS servers. The default is use-radius mode.

SecureEnable

Enable RADIUS Security (RADSec).

UserName

Specifies the user name for RADIUS server reachability. The default is extremenetworks.

Password

Specifies the password for RADIUS server reachability. The default is extremenetworks.

Confirm Password

Confirms the password for RADIUS server reachability.

Unreachable Timer

Specifies, in seconds, the interval between checks when radius server is unreachable. The default is 60 seconds.

Keep Alive Timer

Specifies, in seconds, the interval between checks when radius server is reachable. The default is 180 seconds.
9039040-00 Rev AB