Disable Radius Accounting

Revision History


Note

Revision history details are not provided for features introduced before release 21.24.

Revision Details

Release

First introduced

Pre 21.24

Feature Description

RADIUS is a distributed client or server system that secures networks against unauthorized access. In the Cisco implementation, the RADIUS clients run on Cisco devices and send authentication requests to a central RADIUS server that contains all user authentication and network service access information.

CUPS supports disabling RADIUS accounting on dedicated bearers for RADIUS server.

CUPS supports the following functionality:

  • Enabling RADIUS accounting for all bearers

  • Disabling RADIUS accounting for a specific dedicated bearer based on its QCI and ARP value

  • Enabling RADIUS accounting only for the default bearer while disabling RADIUS accounting for all the dedicated bearers

  • URRs are not created for bearers that have their RADIUS accounting disabled

  • CLI configuration changes apply only to new calls made after the configuration change and do not affect existing calls.

  • If the RADIUS accounting for a particular bearer is disabled or enabled, it applies to bearers created after it was disabled or enabled, and not for existing bearers

NOTE: This functionality is also available for products that use RADIUS in non-CUPS architecture.

Configuring RADIUS Accounting on Dedicated Bearer Feature

This section describes the CLI configurations for:

  • Enabling RADIUS accounting for all bearers

  • Disabling RADIUS accounting for a specific dedicated bearer based on its QCI and ARP value

  • Enabling RADIUS accounting only for the default bearer while disabling RADIUS accounting for all the dedicated bearers

Enabling RADIUS Accounting for All Bearers

To enable RADIUS accounting for all the bearers, use the following CLI configuration.


configure 
   context context_name 
      aaa group group_name 
         radius accounting mode all-bearers 
         end

NOTES:

  • The radius accounting mode all-bearers CLI command is enabled by default.

Disabling RADIUS Accounting for a Specific Bearer

To disable RADIUS accounting for a specific dedicated bearer based on its QCI and ARP values, use the following CLI configuration.


configure 
   context context_name 
      aaa group group_name 
         radius accounting disable-bearer qci qci_value arp-priority-level arp_value 
         end

NOTES:

  • The radius accounting disable-bearer qci qci_value arp-priority-level arp_value CLI command disables RADIUS accounting only for the dedicated bearer with the specified QCI and ARP values. Accounting of other dedicated bearers is not affected.

  • The maximum number of QCI and ARP combination configurations allowed to disable RADIUS accounting on dedicated bearers is 16. If you try to configure more than 16 combinations, the following error message is displayed: 

    
Failure: Error!!! Maximum 16 qci and arp combinations allowed.

Enabling RADIUS Accounting only for the Default Bearer

To enable RADIUS accounting only for the default bearer, and disable RADIUS accounting for all the dedicated bearers, use the following CLI configuration. 


configure 
   context context_name 
      aaa group group_name 
         radius accounting mode default-bearer-only 
         end

NOTES:

  • The radius accounting mode default-bearer-only CLI command enables RADIUS accounting only for the default bearer and disables RADIUS accounting for all the dedicated bearers.

  • To remove the radius accounting disable-bearer qci qci_value arp-priority-level arp_value configuration for a specific dedicated bearer, and allow RADIUS accounting for that dedicated bearer, use the no radius accounting disable-bearer qci qci_value arp-priority-level arp_value CLI command.

  • When RADIUS accounting mode is set to default-bearer-only, you cannot disable RADIUS accounting on a dedicated bearer. If you run the radius accounting disable-bearer qci qci_value arp-priority-level arp_value CLI command, the following error message is displayed: 

    
Failure: Error!!! Radius accounting mode is set to default-bearer-only. Change the mode to all-bearers and run this CLI again