No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E V800R010C10SPC500 Configuration Guide - User Access 01

This is NE40E V800R010C10SPC500 Configuration Guide - User Access
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring an Accounting Scheme

Configuring an Accounting Scheme

You must configure an accounting scheme before implementing accounting for users.

Context

After being authenticated and authorized, users successfully go online, and accounting starts with the access of services. Accounting is performed based on online time, user traffic, or both. The accounting process is as follows: The NE40E collects statistics on the online time and the upstream and downstream traffic, and then sends the statistics to the RADIUS server in the format specified by the RADIUS protocol. At last, the server returns a message to the NE40E indicating whether accounting succeeds.

Perform the following steps on the router:

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run aaa

    The AAA view is displayed.

  3. Run realtime-accounting backup enable

    Real-time accounting backup is enabled between the master and slave MPUs.

    Run this command if the RADIUS server requires that the interval at which real-time accounting packets are sent be strictly followed. After the realtime-accounting backup enable command is run, the master and slave MPUs start real-time accounting at the same time. Even if a master/slave MPU switchover occurs during the real-time accounting interval, the device still sends real-time accounting packets at the configured interval.

  4. Run accounting-scheme scheme-name

    An accounting scheme is created.

    The authentication schemes named default0 and default1 are set by default on the NE40E. They can be modified but cannot be deleted.

  5. Run accounting-mode { hwtacacs | none | radius }

    An accounting mode is set.

    The NE40E supports RADIUS accounting, HWTACACS accounting, and non-accounting.

    NOTE:

    Only administrators support HWTACACS accounting.

  6. (Optional) Run accounting interim interval interval [ second ] [ traffic ] [ hash ]

    The interval for real-time accounting and conditions for sending real-time accounting packets are configured and real-time accounting packets are hashed for the accounting scheme.

    Real-time accounting indicates that the NE40E periodically generates accounting packets and send them to the remote accounting server when a user is online. Real-time accounting minimizes loss of accounting information when the communication between the NE40E and the remote server is interrupted.

    The interval for real-time accounting can be in minutes or seconds.

  7. (Optional) Run accounting start-fail { offline | online [ keep-accounting ] }

    The policy for handling the accounting start failure is configured.

    If the NE40E does not receive any response after sending an accounting start packet to the remote accounting server, the NE40E adopts the policy for the accounting start failure. This policy may keep the user online or log the user out.

  8. (Optional) Run accounting interim-fail [ max-times times ] { offline | online }

    The policy for the real-time accounting failure is configured.

    If the NE40E does not receive any response after re-sending the real-time accounting packets to the remote accounting server for certain times, the NE40E adopts the policy for the real-time accounting failure. This policy may keep the user online or log the user out.

    When the RADIUS or the HWTACACS server is used for charging, it is recommended that you set the time of retransmitting real-time charging packets to be larger than the time of retransmitting failed RADIUS or the HWTACACS packets.

  9. (Optional) Run accounting send-update

    The NE40E is configured to send real-time accounting packets immediately after receiving the accounting start response.

    After receiving the accounting response, the NE40E determines whether to send the real-time accounting packet immediately according to the configuration.

  10. (Optional) Enable a device to send an accounting-start packet about a dual-stack user after a specified delay
    1. Run aaa

      The AAA view is displayed.

    2. Run domain domain-name

      The domain view is displayed.

    3. Run accounting-start-delay

    4. Run commit

      The configuration is committed.

Translation
Download
Updated: 2019-01-03

Document ID: EDOC1100055031

Views: 17384

Downloads: 70

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next