Remote Address-based RADIUS Accounting
Remote Address-based RADIUS Accounting
 
This chapter provides information on configuring an enhanced, or extended, service. The product administration guides provide examples and procedures for the configuration of basic services on the system. It is recommended that you select the configuration example that best meets your service model, and configure the required elements for that model before using the procedures in this chapter.
This chapter includes the following sections:
•
Overview
•
Configuring Remote Address-based Accounting
•
Subscriber Attribute Configuration
Overview
Remote address-based RADIUS accounting counts the number of octets exchanged between individual subscribers and specific remote IP addresses, or networks, during a packet data session. Data from the subscriber to the remote addresses, and data from the remote addresses to the subscriber are accounted for separately.
The remote addresses for which to collect RADIUS accounting data are configured in lists on a per-context basis. Individual subscribers are associated with particular address lists through the configuration or specification of an attribute in their locally configured or RADIUS server-based profiles. Once the lists and subscriber profiles are configured, accounting data collection can be enabled on the system.
Remote address-based RADIUS accounting is implemented in the system according to the specifications described in TIA/EIA/IS-835-B, CDMA2000 Wireless IP Network Standard, October 2002 and 3GPP2 X.S0011-005-D.
License Requirements
The Remote address-based RADIUS Accounting is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
 
Configuring Remote Address-based Accounting
To configure this functionality, a list of up to ten remote addresses or networks is configured in the authentication context, the list is assigned to a subscriber, and remote address collection is enabled.
Use the following configuration example to configure remote address-based accounting:
configure
  context <context_name>
     radius group <group_name>
     radius accounting ip remote-address list <list_id>
     address <ipv4_address/ipv6_address> netmask <netmask>
     end
Verifying the Remote Address Lists
Use the following command to verify the remote address lists:
show configuration context <context_name>
Output similar to the following is displayed.
[local] host_name # show configuration context <context_name>
configure
  context <context_name>
     subscriber default
     exit
  radius accounting ip remote-address list 1
     address <ipv4_address/ipv6_address> netmask <netmask>
     address <ipv4_address/ipv6_address> netmask <netmask>
     address <ipv4_address/ipv6_address> netmask <netmask>
     end
Notes:
•
Save your configuration to flash memory, an external memory device, and/or a network location using the Exec mode command save configuration. For additional information on how to verify and save configuration files, refer to the System Administration Guide and the Command Line Interface Reference.
Subscriber Attribute Configuration
Subscriber attributes are configured as part of their profile. Subscriber profiles can be configured either remotely on a RADIUS server or locally on the system.
This section provides information and procedures on the attributes used to support this functionality.
note_smallImportant: Since the instructions for configuring subscribers differ between RADIUS server applications, this section only provides the individual attributes that can be added to the subscriber profile. Please refer to the documentation that shipped with your RADIUS server for instructions on configuring subscribers.
Supported RADIUS Attributes
The following RADIUS attributes are used to configure remote address-based RADIUS accounting for a subscriber session. For specific information on each attribute, see the AAA and GTPP Interface Administration and Reference.
•
3GPP2-Remote-Addr-Table-Index
•
3GPP2-Remote-IPv4-Address
•
3GPP2-Remote-IPv4-Addr-Octets
Configuring Local Subscriber Profiles
Use the following example to configure local subscriber profiles to support the Remote Address-based RADIUS Accounting feature:
configure
  context <context_name>
     subscriber name <name>
        radius accounting ip remote-address list-id <list_id>
        end
configure
  context <context_name>
     radius accounting ip remote-address collection
     end
Notes:
•
Save your configuration to flash memory, an external memory device, and/or a network location using the Exec mode command save configuration. For additional information on how to verify and save configuration files, refer to the System Administration Guide and the Command Line Interface Reference.
 
 
Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883